Route Origin Authorization

$ rpki-client -vvf k13.rrdp-rpki.athene-center.net/repo/k13-rpki-athene-center/0/3135382e3232302e3134322e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134322e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          qIlqR8T77fwv3wfie8gBPxRCQuGp8xMtHC2y/xDaKoQ=
Subject key identifier:   3B:E5:56:8D:43:17:34:3E:E2:EA:81:F1:35:CD:6A:B5:37:CA:0F:9D
Certificate issuer:       /CN=E8FD79B2CBC330746DBB63DA3FFD20326BE5492A
Certificate serial:       14BA5BA4966554036980C02C12CEE619C034907C
Authority key identifier: E8:FD:79:B2:CB:C3:30:74:6D:BB:63:DA:3F:FD:20:32:6B:E5:49:2A
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E8FD79B2CBC330746DBB63DA3FFD20326BE5492A.cer
Subject info access:      rsync://k13.rrdp-rpki.athene-center.net/repo/k13-rpki-athene-center/0/3135382e3232302e3134322e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:40:10 +0000
ROA not before:           Wed 27 Mar 2024 19:35:10 +0000
ROA not after:            Wed 26 Mar 2025 19:40:10 +0000
asID:                     208162
IP address blocks:        158.220.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ba:5b:a4:96:65:54:03:69:80:c0:2c:12:ce:e6:19:c0:34:90:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8FD79B2CBC330746DBB63DA3FFD20326BE5492A
        Validity
            Not Before: Mar 27 19:35:10 2024 GMT
            Not After : Mar 26 19:40:10 2025 GMT
        Subject: CN=3BE5568D4317343EE2EA81F135CD6AB537CA0F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:59:ae:99:cf:42:c2:19:f5:37:ba:95:8d:
                    95:89:e7:85:b5:00:18:66:0f:9d:2d:6b:77:25:f2:
                    17:bd:30:a1:27:57:92:f4:30:9b:3a:30:40:9c:a7:
                    b4:f6:2b:11:0e:da:ca:5f:0e:9a:eb:99:b9:d1:f2:
                    c1:ad:a3:4a:33:21:99:43:91:73:a3:61:e4:30:9c:
                    74:da:a2:6c:6b:85:ca:ba:fa:a8:8e:5d:30:11:f4:
                    7e:e7:48:be:0d:07:2c:88:53:7e:6b:50:fc:e9:34:
                    76:86:e5:71:d4:81:ca:ea:63:d0:06:fb:09:09:ea:
                    5c:2a:41:96:a1:d1:30:6b:66:4a:ea:17:19:7e:e7:
                    5d:dd:53:b3:99:d7:ca:d8:45:d8:83:ef:22:bd:9c:
                    da:1e:03:49:74:a4:11:9f:98:47:fa:7b:66:28:27:
                    58:be:b1:1d:aa:34:01:9c:1f:5f:e2:e8:a3:b2:52:
                    2a:5e:d4:8a:4d:44:02:bc:c3:4e:e5:7a:65:b9:0d:
                    fe:8a:b4:12:cd:14:c6:8d:16:6a:ab:4a:8a:69:01:
                    bc:e8:f5:1e:2d:1d:8a:6d:a9:45:1b:a3:2b:df:a6:
                    36:f9:2a:e4:6f:07:0c:7f:7d:4b:12:bf:8e:06:3b:
                    32:c8:ce:94:8f:1a:73:00:03:e1:6d:40:22:eb:e3:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E5:56:8D:43:17:34:3E:E2:EA:81:F1:35:CD:6A:B5:37:CA:0F:9D
            X509v3 Authority Key Identifier:
                keyid:E8:FD:79:B2:CB:C3:30:74:6D:BB:63:DA:3F:FD:20:32:6B:E5:49:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k13.rrdp-rpki.athene-center.net/repo/k13-rpki-athene-center/0/E8FD79B2CBC330746DBB63DA3FFD20326BE5492A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E8FD79B2CBC330746DBB63DA3FFD20326BE5492A.cer

            Subject Information Access:
                Signed Object - URI:rsync://k13.rrdp-rpki.athene-center.net/repo/k13-rpki-athene-center/0/3135382e3232302e3134322e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:8f:4f:46:9d:6a:49:c5:b9:25:3c:c8:e3:0f:c5:7d:ef:
         87:59:17:57:54:07:3e:21:b6:dc:57:c0:bc:b9:ee:f1:7c:7c:
         e8:61:8c:da:f4:4b:c9:5d:9c:eb:f4:db:08:f4:31:bb:c6:3f:
         19:39:e6:97:6a:03:9a:03:0c:58:2d:c3:e0:e4:d0:cc:d6:00:
         45:ee:1d:ec:76:16:d9:26:8b:33:52:1e:54:a3:1f:27:8f:77:
         37:00:96:d1:35:1b:06:46:ce:39:c9:2b:1c:ec:4d:48:65:dd:
         42:af:be:c6:a3:df:1d:a4:f8:3d:5c:fa:67:8c:14:74:19:f0:
         ed:72:7e:b2:bb:b8:01:76:e0:86:f0:a1:72:7b:92:03:ac:c4:
         0a:27:39:a0:7d:91:07:4c:4b:3c:a9:43:9d:45:48:a2:b5:3b:
         39:8a:d0:f6:da:87:98:62:74:20:db:45:53:83:ca:2a:be:be:
         6e:77:ab:a2:a9:02:18:35:82:33:67:ef:8a:aa:05:d8:2c:7a:
         ae:2f:08:cb:e6:51:04:3b:b3:eb:32:dc:7a:a6:4b:14:1d:12:
         d6:41:e2:c8:8d:f9:1b:bc:68:c9:47:fe:a2:d1:43:a6:6b:06:
         1c:c2:95:ae:9d:62:0d:8e:82:fb:a7:1d:90:90:76:73:d3:b8:
         65:cb:22:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org