Route Origin Authorization

$ rpki-client -vvf k12.pp-rpki.athene-center.net/repo/k12-rpki-athene-center/0/3135382e3232302e3134312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          Vnw86l8jF1Lo17VnVinsvyB3KjXYPyBepPnEEcNYOvA=
Subject key identifier:   00:F8:AC:3C:B5:C1:CD:B3:0E:9A:08:88:5A:6C:C1:C3:D3:A1:3D:BD
Certificate issuer:       /CN=CEAC5C1E4B45A40DDC89223AD1DBFEB7185F9E9B
Certificate serial:       7F4EBD633A2F799400FE55B47DEFC1719A884C05
Authority key identifier: CE:AC:5C:1E:4B:45:A4:0D:DC:89:22:3A:D1:DB:FE:B7:18:5F:9E:9B
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/CEAC5C1E4B45A40DDC89223AD1DBFEB7185F9E9B.cer
Subject info access:      rsync://k12.pp-rpki.athene-center.net/repo/k12-rpki-athene-center/0/3135382e3232302e3134312e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:26:24 +0000
ROA not before:           Fri 22 Mar 2024 10:21:24 +0000
ROA not after:            Fri 21 Mar 2025 10:26:24 +0000
asID:                     208162
IP address blocks:        158.220.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4e:bd:63:3a:2f:79:94:00:fe:55:b4:7d:ef:c1:71:9a:88:4c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEAC5C1E4B45A40DDC89223AD1DBFEB7185F9E9B
        Validity
            Not Before: Mar 22 10:21:24 2024 GMT
            Not After : Mar 21 10:26:24 2025 GMT
        Subject: CN=00F8AC3CB5C1CDB30E9A08885A6CC1C3D3A13DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cb:f3:0d:d7:31:f8:79:30:94:b1:17:99:7e:
                    59:7e:a3:8b:5e:a6:34:8a:94:4d:e5:44:a1:05:bd:
                    41:c1:7c:82:ca:56:94:05:05:cb:0a:fd:43:c5:fa:
                    8e:67:47:a2:0a:39:e7:9f:32:13:d1:f3:9b:49:30:
                    04:8e:c6:eb:f9:4d:1c:30:66:66:60:83:68:53:e1:
                    25:ae:6e:d4:e6:81:59:24:86:cc:5b:77:03:ee:dd:
                    81:1c:21:c1:3f:9c:0b:5b:9b:b1:96:eb:ac:d3:c0:
                    1a:d2:e4:83:e4:65:52:91:2d:c5:55:7e:d2:6c:53:
                    c3:fc:31:90:a4:d1:4a:49:55:f6:4d:a3:75:af:49:
                    e6:56:b4:e3:1b:be:de:2d:19:04:d2:64:24:dc:2f:
                    23:36:1c:50:1c:10:50:00:ed:bd:3a:93:bf:13:88:
                    7e:6a:c9:b2:35:c1:b0:20:2e:73:67:f3:e6:44:d3:
                    5f:65:21:13:26:e0:a3:21:0e:92:5c:40:2d:9f:61:
                    b6:dd:47:23:84:cb:d4:00:59:42:ef:8d:62:d6:ec:
                    ba:60:3a:e0:52:ff:67:95:66:2a:62:3e:0f:e4:6a:
                    00:cc:be:b3:6f:2b:6b:b6:c2:d7:17:14:80:08:9c:
                    95:6e:f1:65:64:6e:11:c1:5a:f6:b6:08:28:3b:bb:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:AC:3C:B5:C1:CD:B3:0E:9A:08:88:5A:6C:C1:C3:D3:A1:3D:BD
            X509v3 Authority Key Identifier:
                keyid:CE:AC:5C:1E:4B:45:A4:0D:DC:89:22:3A:D1:DB:FE:B7:18:5F:9E:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k12.pp-rpki.athene-center.net/repo/k12-rpki-athene-center/0/CEAC5C1E4B45A40DDC89223AD1DBFEB7185F9E9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/CEAC5C1E4B45A40DDC89223AD1DBFEB7185F9E9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://k12.pp-rpki.athene-center.net/repo/k12-rpki-athene-center/0/3135382e3232302e3134312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:92:db:75:eb:58:d0:a1:b4:06:eb:84:69:3e:32:76:8d:06:
         80:92:59:97:83:c3:0e:b8:e6:8d:b1:73:88:47:40:c4:5c:49:
         87:38:2f:9a:c9:8d:58:b1:6c:2a:7f:96:e7:17:6f:80:3f:e3:
         a1:87:c0:9b:de:c4:2d:ee:bf:22:05:91:40:2b:f7:bb:79:c4:
         d4:09:bb:e7:e3:3a:3f:0f:9b:e8:d7:6e:3d:e7:b9:6a:2b:f4:
         ea:a3:2f:e5:e8:d6:32:d6:fe:36:c1:45:51:24:0b:97:f5:5e:
         f1:b2:5f:54:a3:fb:a3:4f:53:e1:7c:d5:c7:d4:09:1d:c4:97:
         36:a2:48:d9:09:bc:94:c4:a0:26:af:10:ed:51:01:53:2a:57:
         1b:36:13:4f:bf:26:10:76:38:9f:75:e5:b1:1c:67:c3:f5:a3:
         d0:97:79:40:2b:30:f9:d5:37:39:c0:ce:51:95:00:aa:a8:14:
         60:69:87:67:08:63:91:a2:6f:1f:be:ac:06:23:c2:2b:41:f5:
         3a:d7:18:a8:d5:74:5d:20:87:9b:c6:2e:db:4f:0b:f1:12:4b:
         d6:ef:a2:65:ea:45:af:af:4d:75:95:aa:58:7b:3b:16:59:f7:
         90:d9:1a:38:6d:28:cb:fb:1c:2a:8a:78:14:aa:bc:25:0d:b3:
         d2:db:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org