Route Origin Authorization

$ rpki-client -vvf k12.rrdp-rpki.athene-center.net/repo/k12-rpki-athene-center/0/3135382e3232302e3134312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          d92GAXdJ/nAEbYqXhPyAx7JydwdbL4MSftiHZtj1mIM=
Subject key identifier:   DC:B5:60:06:D1:6A:40:DF:A2:83:96:FB:82:98:5B:0D:9C:F1:BA:D4
Certificate issuer:       /CN=1915EB9623C2DD9E5CCBD30E7B33A60A9A5C35A3
Certificate serial:       5EF3904B2F7C79489A3C2B3B9496CE461094E380
Authority key identifier: 19:15:EB:96:23:C2:DD:9E:5C:CB:D3:0E:7B:33:A6:0A:9A:5C:35:A3
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1915EB9623C2DD9E5CCBD30E7B33A60A9A5C35A3.cer
Subject info access:      rsync://k12.rrdp-rpki.athene-center.net/repo/k12-rpki-athene-center/0/3135382e3232302e3134312e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:39:59 +0000
ROA not before:           Wed 27 Mar 2024 19:34:59 +0000
ROA not after:            Wed 26 Mar 2025 19:39:59 +0000
asID:                     208162
IP address blocks:        158.220.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f3:90:4b:2f:7c:79:48:9a:3c:2b:3b:94:96:ce:46:10:94:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1915EB9623C2DD9E5CCBD30E7B33A60A9A5C35A3
        Validity
            Not Before: Mar 27 19:34:59 2024 GMT
            Not After : Mar 26 19:39:59 2025 GMT
        Subject: CN=DCB56006D16A40DFA28396FB82985B0D9CF1BAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:1c:15:e9:f4:a7:db:4c:60:71:cb:8a:93:
                    e7:cc:82:cd:41:a4:f5:66:26:30:bb:de:eb:81:e4:
                    0e:3f:e4:9e:11:9a:78:45:55:dd:cd:b4:c0:f7:84:
                    f7:07:1a:06:8b:91:ca:2a:b2:79:80:e9:de:3d:38:
                    8a:2c:f1:a8:79:b8:7f:58:11:4e:49:fa:81:80:29:
                    e7:77:0b:06:e9:d3:76:e7:dd:18:72:5f:0e:e9:dd:
                    56:e3:ad:5b:83:a1:c7:88:25:4e:f3:69:60:d2:69:
                    0c:25:1a:f9:20:8e:53:3f:ce:2e:cb:38:5d:36:33:
                    1b:83:a1:20:d5:47:8b:d6:85:dc:8c:50:ca:49:eb:
                    8c:6c:cc:0b:68:38:32:26:4a:4c:d4:1b:01:59:fc:
                    1f:45:e6:ae:0f:39:9a:13:c0:a9:85:49:46:20:55:
                    25:01:36:c7:f1:64:39:16:70:04:2d:91:ad:30:96:
                    b9:40:b0:ba:15:96:79:2e:b7:28:68:42:50:e4:28:
                    f6:b8:2c:5d:1c:12:e7:65:0a:b9:32:58:06:b3:2b:
                    1a:bd:61:55:5a:2e:92:4a:51:ec:2e:ca:23:62:20:
                    84:47:5c:45:f2:ba:ec:4e:f9:d9:31:5d:8b:5b:81:
                    c9:e2:5a:38:f0:3d:b2:30:06:43:77:5c:ee:fb:eb:
                    a6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:60:06:D1:6A:40:DF:A2:83:96:FB:82:98:5B:0D:9C:F1:BA:D4
            X509v3 Authority Key Identifier:
                keyid:19:15:EB:96:23:C2:DD:9E:5C:CB:D3:0E:7B:33:A6:0A:9A:5C:35:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k12.rrdp-rpki.athene-center.net/repo/k12-rpki-athene-center/0/1915EB9623C2DD9E5CCBD30E7B33A60A9A5C35A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/1915EB9623C2DD9E5CCBD30E7B33A60A9A5C35A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://k12.rrdp-rpki.athene-center.net/repo/k12-rpki-athene-center/0/3135382e3232302e3134312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:1f:50:de:d8:67:cd:c2:27:69:73:1e:81:cc:43:0b:7c:e7:
         07:de:b1:e1:38:2b:be:06:9f:29:34:20:69:4f:13:be:63:2f:
         b7:43:e6:be:17:3c:a6:f5:96:57:4e:8a:91:fe:1e:c7:c7:4d:
         b0:5c:93:75:da:4a:98:18:e7:7b:ef:0c:66:48:c7:07:1c:6f:
         a0:f6:b8:47:eb:f3:3f:c5:b2:4b:f0:6e:d9:2e:09:a2:5b:78:
         13:e7:6a:f2:93:92:19:c3:12:7a:06:40:c9:d1:cb:f0:6c:e8:
         54:f2:82:ab:d0:52:8e:37:46:e0:32:89:06:7e:b6:aa:34:f1:
         85:a0:e3:47:18:9f:72:bd:b8:24:3d:c5:38:e3:f3:dd:3e:40:
         df:b2:9f:2b:40:08:12:07:8a:3a:2e:d9:e1:79:4f:b7:b5:2d:
         11:eb:9d:f8:ee:f4:91:21:fd:fa:c7:3c:aa:ce:bc:c2:0e:34:
         c2:19:97:c4:eb:58:2d:42:57:48:8d:cc:6f:6b:53:13:17:62:
         ea:52:20:4d:a0:cf:90:f4:fd:a0:b5:b6:02:0c:00:49:a8:9d:
         6d:09:d8:95:ff:66:cb:19:bf:79:80:c3:ea:2b:53:50:f3:c8:
         77:57:98:87:ab:2e:86:ae:fe:03:e6:51:ec:30:76:88:ff:0f:
         44:d6:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org