Route Origin Authorization

$ rpki-client -vvf k17.pp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          kRA+OWBvXGlr4EJZdXyuPuhrNKsIb89AjgdBplt9VZM=
Subject key identifier:   A8:9D:D5:D9:FD:EC:AA:7C:95:2E:E4:D9:94:83:90:23:6E:D2:F2:64
Certificate issuer:       /CN=AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5
Certificate serial:       5ED94F0335AA6426D37584957674120F582F6ABF
Authority key identifier: AA:2D:B5:2B:27:A0:39:A6:9D:50:82:CA:59:F8:D9:B6:A2:10:EB:B5
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.cer
Subject info access:      rsync://k17.pp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:27:20 +0000
ROA not before:           Fri 22 Mar 2024 10:22:20 +0000
ROA not after:            Fri 21 Mar 2025 10:27:20 +0000
asID:                     208162
IP address blocks:        158.220.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d9:4f:03:35:aa:64:26:d3:75:84:95:76:74:12:0f:58:2f:6a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5
        Validity
            Not Before: Mar 22 10:22:20 2024 GMT
            Not After : Mar 21 10:27:20 2025 GMT
        Subject: CN=A89DD5D9FDECAA7C952EE4D9948390236ED2F264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:da:bd:6b:52:5a:0b:d1:3a:78:f1:3c:17:1b:
                    fe:97:3c:ed:f6:55:61:a4:ac:ba:85:41:48:4e:84:
                    43:b6:06:af:8b:39:24:f3:66:26:08:f3:a5:b3:a8:
                    d1:af:8d:9b:ea:3c:b2:ba:de:00:37:8a:56:f4:de:
                    54:f9:9d:5f:c4:07:21:0c:82:48:0a:36:2a:c3:20:
                    ac:f9:e3:0b:3c:9b:39:31:4b:83:0b:5e:88:17:a5:
                    b1:cc:ab:f5:b6:0e:8d:eb:03:e9:81:9b:1a:6c:c1:
                    fe:9b:59:3d:4d:eb:31:3d:41:8e:bd:9b:84:4c:7e:
                    1f:76:7c:78:5c:a3:ce:3b:f3:75:17:7f:68:df:35:
                    4b:cc:3c:76:3b:fc:66:f2:62:51:04:3d:74:04:67:
                    fe:a2:fa:d7:0d:a9:07:13:e8:d0:ce:89:9d:25:8e:
                    16:6d:c2:a7:0f:28:50:16:cb:97:05:6b:cc:32:5d:
                    f0:a4:fc:15:fa:d5:ad:c2:64:83:71:59:f4:43:7e:
                    b8:7f:3e:c0:40:7d:88:8c:09:ac:a2:ab:a5:06:e0:
                    a1:35:40:c6:02:24:f9:09:d8:16:b2:c6:22:6a:d5:
                    77:42:39:a6:4c:06:a2:81:1b:11:cc:48:6f:ce:66:
                    0a:43:07:2a:af:7e:33:85:bc:dc:92:cf:a3:16:33:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9D:D5:D9:FD:EC:AA:7C:95:2E:E4:D9:94:83:90:23:6E:D2:F2:64
            X509v3 Authority Key Identifier:
                keyid:AA:2D:B5:2B:27:A0:39:A6:9D:50:82:CA:59:F8:D9:B6:A2:10:EB:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k17.pp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AA2DB52B27A039A69D5082CA59F8D9B6A210EBB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://k17.pp-rpki.athene-center.net/repo/k17-rpki-athene-center/0/3135382e3232302e3134362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e7:1b:e2:4d:97:32:6c:c6:83:79:47:25:30:b2:20:a9:dc:
         d3:9e:ad:63:d6:3d:05:0e:6a:f7:2c:bf:b5:09:f1:b3:be:f6:
         57:5e:bf:1b:6c:0d:99:45:ad:54:9f:79:3a:a9:ee:ea:f0:48:
         b2:1d:e4:b0:20:72:3e:0a:c9:13:db:76:ae:89:f9:3c:61:61:
         a3:20:75:62:21:d1:09:06:7a:f3:04:23:f5:c0:49:14:ba:3f:
         b1:13:4a:9a:6e:5b:db:1f:af:7e:7b:9a:54:4c:9c:c0:ed:ed:
         3e:6a:fe:84:88:a7:e1:48:07:6a:ec:fb:a2:c4:23:15:9c:23:
         84:99:24:73:9f:48:e5:12:4d:5a:01:8c:84:5f:12:f8:7f:6b:
         78:28:ad:db:8a:33:3b:37:7c:fe:a5:15:b4:ae:84:74:9c:0b:
         ed:98:b7:f5:49:c7:1a:02:c1:16:c9:2f:d9:40:f7:07:fb:fd:
         88:f3:77:0f:81:a9:40:4c:41:2f:6a:e6:2c:6f:99:d2:62:a2:
         62:0e:17:2c:99:5b:e1:70:1e:a9:14:e0:4d:41:1f:44:9d:79:
         00:d5:0d:6b:bb:51:fc:5e:7a:0f:82:d4:41:98:69:b9:55:57:
         00:a7:61:17:c2:17:58:0a:8b:e8:4f:08:fa:03:84:4c:38:49:
         cb:78:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 22:50:52 2024 by rpki-client on console-ams.rpki-client.org