Route Origin Authorization

$ rpki-client -vvf k16.pp-rpki.athene-center.net/repo/k16-rpki-athene-center/0/3135382e3232302e3134352e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134352e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          GR2PTM4kp0/HnXGHmcG0QaARZifDQtq5DjvCiuT1htQ=
Subject key identifier:   EC:0E:7A:01:DE:1F:08:A2:C9:9D:6E:CC:35:4A:96:8E:0F:75:B6:3F
Certificate issuer:       /CN=2A16C081CCCC322A748B9B2EA0F3BCCBA1116C4B
Certificate serial:       4C5E9DC9963FF8B96FDB47ADEF73312B49C55CB7
Authority key identifier: 2A:16:C0:81:CC:CC:32:2A:74:8B:9B:2E:A0:F3:BC:CB:A1:11:6C:4B
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/2A16C081CCCC322A748B9B2EA0F3BCCBA1116C4B.cer
Subject info access:      rsync://k16.pp-rpki.athene-center.net/repo/k16-rpki-athene-center/0/3135382e3232302e3134352e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:27:09 +0000
ROA not before:           Fri 22 Mar 2024 10:22:09 +0000
ROA not after:            Fri 21 Mar 2025 10:27:09 +0000
asID:                     208162
IP address blocks:        158.220.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5e:9d:c9:96:3f:f8:b9:6f:db:47:ad:ef:73:31:2b:49:c5:5c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A16C081CCCC322A748B9B2EA0F3BCCBA1116C4B
        Validity
            Not Before: Mar 22 10:22:09 2024 GMT
            Not After : Mar 21 10:27:09 2025 GMT
        Subject: CN=EC0E7A01DE1F08A2C99D6ECC354A968E0F75B63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:d1:95:2a:84:29:7a:75:e1:1a:78:6e:95:
                    88:71:ac:57:6e:bc:4d:d1:c3:ba:9a:03:dd:8f:c6:
                    e9:e4:bc:de:95:fc:57:66:a1:8b:6b:3b:59:b7:7f:
                    6f:3f:4e:65:83:b3:88:e8:34:91:30:64:ef:3b:49:
                    7c:0b:a6:7a:5e:c2:7c:c8:0a:ea:c0:70:fd:a7:74:
                    52:96:fb:ab:aa:71:58:7b:58:72:56:ff:35:a3:f3:
                    17:f8:88:d9:2c:d7:96:15:af:d4:03:9a:b4:07:59:
                    bb:8f:d9:d0:f0:ae:54:99:67:29:c6:c6:dc:dc:74:
                    4c:1a:23:d6:6a:99:ca:80:c2:4d:ab:7c:bd:f3:e2:
                    1f:be:e6:f4:87:80:25:fa:8e:5f:c0:89:08:57:69:
                    91:c3:88:a4:4a:f3:ea:0d:1e:cf:f4:38:21:ad:e6:
                    66:f9:bf:0a:8f:e6:49:dd:60:45:d5:1d:ec:f4:83:
                    89:96:3f:00:c9:86:f7:c8:c3:4e:61:8c:fc:b2:cb:
                    88:9a:5e:2f:1d:c4:ec:be:3a:64:45:cf:67:93:d6:
                    86:70:f8:87:54:90:70:51:0f:8d:ce:fd:0e:14:b5:
                    65:f3:ca:9d:23:a3:2b:4e:fd:fa:dd:50:2c:d8:01:
                    e4:09:18:d3:97:a4:4e:60:3b:dd:dd:a0:23:ea:51:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0E:7A:01:DE:1F:08:A2:C9:9D:6E:CC:35:4A:96:8E:0F:75:B6:3F
            X509v3 Authority Key Identifier:
                keyid:2A:16:C0:81:CC:CC:32:2A:74:8B:9B:2E:A0:F3:BC:CB:A1:11:6C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k16.pp-rpki.athene-center.net/repo/k16-rpki-athene-center/0/2A16C081CCCC322A748B9B2EA0F3BCCBA1116C4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/2A16C081CCCC322A748B9B2EA0F3BCCBA1116C4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://k16.pp-rpki.athene-center.net/repo/k16-rpki-athene-center/0/3135382e3232302e3134352e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:09:5e:2e:a1:3f:8f:6d:63:82:51:01:e3:c1:3f:e9:64:c2:
         ba:23:74:5a:68:8d:85:30:00:5a:8e:d1:38:2f:fa:ec:77:07:
         17:40:44:b9:8e:5d:73:0b:17:23:de:9d:15:1d:7a:1b:16:92:
         ff:bd:7b:b6:e2:15:62:27:9f:7c:8b:56:72:e5:78:1a:12:e0:
         4e:c1:04:06:3b:93:74:d0:ba:ec:b2:6f:22:4d:19:e9:48:12:
         06:45:fe:0e:37:3b:0c:c0:5a:45:77:ba:df:fb:36:bd:9d:dd:
         87:78:09:7a:3e:09:1a:f9:4c:47:32:3a:1d:02:4b:f3:bd:c4:
         27:10:ec:77:fd:ac:46:fd:c2:5a:36:28:aa:30:55:dc:6e:39:
         bb:a3:03:30:1e:05:97:28:2e:0a:6d:fb:58:5a:f7:5b:82:b0:
         c6:06:06:82:61:30:ee:5c:22:07:9d:4e:a6:52:c6:b1:49:d5:
         c9:65:b2:41:89:68:78:33:6d:c3:e1:5e:f4:64:8a:d5:f5:11:
         9e:f1:62:29:a5:23:bf:41:b7:df:8f:0e:e1:54:5a:97:8e:5c:
         9f:54:46:f3:4c:7a:32:1c:2c:71:10:20:ff:d6:8c:05:1c:84:
         81:cd:07:7d:f1:10:0c:06:d6:b1:c8:4f:10:5d:ca:1c:7b:26:
         4e:f4:85:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 22:50:52 2024 by rpki-client on console-ams.rpki-client.org