Route Origin Authorization

$ rpki-client -vvf k19.rrdp-rpki.athene-center.net/repo/k19-rpki-athene-center/0/3135382e3232302e3134382e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          hism+pjiFOh5AOpSZJr35cTVhqZHDJU8UmiKolbhiRQ=
Subject key identifier:   B8:68:C9:F4:52:0B:10:0F:AA:59:06:44:1C:AF:BB:67:74:22:A5:0A
Certificate issuer:       /CN=AA8CDAC6BAFD181C6A7DE2B0F55CBE639EC15526
Certificate serial:       68E482A723557F60D5810F59271A006B45A8D762
Authority key identifier: AA:8C:DA:C6:BA:FD:18:1C:6A:7D:E2:B0:F5:5C:BE:63:9E:C1:55:26
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AA8CDAC6BAFD181C6A7DE2B0F55CBE639EC15526.cer
Subject info access:      rsync://k19.rrdp-rpki.athene-center.net/repo/k19-rpki-athene-center/0/3135382e3232302e3134382e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:41:18 +0000
ROA not before:           Wed 27 Mar 2024 19:36:18 +0000
ROA not after:            Wed 26 Mar 2025 19:41:18 +0000
asID:                     208162
IP address blocks:        158.220.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e4:82:a7:23:55:7f:60:d5:81:0f:59:27:1a:00:6b:45:a8:d7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA8CDAC6BAFD181C6A7DE2B0F55CBE639EC15526
        Validity
            Not Before: Mar 27 19:36:18 2024 GMT
            Not After : Mar 26 19:41:18 2025 GMT
        Subject: CN=B868C9F4520B100FAA5906441CAFBB677422A50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0d:03:e5:6a:e1:ec:46:ed:2d:db:27:98:2f:
                    fe:41:3d:3c:9e:a9:5b:9c:63:95:af:c9:04:59:38:
                    ee:65:43:d4:a2:c0:65:a2:6f:a9:65:b8:ff:5f:a0:
                    4a:15:b9:f6:24:ad:62:cf:79:b5:97:4f:53:ef:65:
                    d6:3a:64:4d:42:b8:39:88:cf:1e:43:b8:65:00:5e:
                    a5:77:bc:2f:64:ac:4c:41:c2:38:34:5b:b7:eb:75:
                    80:d2:c8:40:68:26:0d:2e:88:8a:6a:2c:46:16:fe:
                    34:33:db:2a:7e:28:fd:8d:d0:cf:ff:62:09:a4:d7:
                    38:9d:c8:ea:ac:17:55:c8:81:39:8d:7a:9b:21:7c:
                    3a:93:27:91:db:69:9d:0f:c5:14:9d:02:09:9f:34:
                    63:5b:83:fb:1e:af:4d:76:5e:f0:b3:af:e5:18:72:
                    16:16:4b:44:e2:ef:92:48:1a:0e:9c:72:dc:54:f2:
                    d0:4f:db:df:4b:55:2d:fa:a2:df:6e:d2:7c:1b:35:
                    7f:0f:b3:16:ef:92:f6:6d:33:4f:cf:9a:30:cc:9d:
                    cc:41:3f:40:3d:1f:36:cc:30:b9:50:3b:89:92:c3:
                    c4:ad:5c:dc:18:1f:d4:93:52:aa:e3:3c:7e:fe:8e:
                    bd:55:ee:10:30:f9:0e:a8:93:c5:1f:ec:dd:6b:56:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:C9:F4:52:0B:10:0F:AA:59:06:44:1C:AF:BB:67:74:22:A5:0A
            X509v3 Authority Key Identifier:
                keyid:AA:8C:DA:C6:BA:FD:18:1C:6A:7D:E2:B0:F5:5C:BE:63:9E:C1:55:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k19.rrdp-rpki.athene-center.net/repo/k19-rpki-athene-center/0/AA8CDAC6BAFD181C6A7DE2B0F55CBE639EC15526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AA8CDAC6BAFD181C6A7DE2B0F55CBE639EC15526.cer

            Subject Information Access:
                Signed Object - URI:rsync://k19.rrdp-rpki.athene-center.net/repo/k19-rpki-athene-center/0/3135382e3232302e3134382e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:97:3d:43:bf:5c:c3:6c:f1:38:7f:84:a8:3d:30:5e:6e:6e:
         3a:82:53:6c:58:ae:17:fc:7e:03:7a:05:2d:13:52:60:70:2e:
         fa:6e:53:51:e7:78:35:98:58:b2:5a:27:80:a6:a8:0f:a0:1b:
         a2:0c:2e:a0:2f:e3:3f:94:a9:e1:bc:71:de:97:9f:c8:6e:e5:
         00:eb:54:37:aa:8c:85:ce:68:62:dc:08:ce:62:0d:a9:e8:11:
         cb:34:0a:8e:f2:c7:e6:48:47:9b:6c:65:2e:2b:20:73:44:07:
         19:b4:16:ec:4e:ef:8b:ac:d2:cc:af:8b:df:f6:99:08:1d:1b:
         db:03:37:ad:db:6b:20:e8:b6:9f:d7:9a:4d:3f:7a:12:57:3b:
         c8:e1:20:12:46:bf:f9:36:b9:db:9d:55:59:35:11:20:97:42:
         c8:f4:a8:f2:3f:9e:dd:43:bd:b3:12:29:10:20:1a:f3:fd:06:
         2f:85:9f:f9:b7:ef:32:9f:b7:71:b4:1c:a7:9a:a8:f5:3c:52:
         d4:bd:ed:f7:cd:53:99:58:31:32:72:b7:0b:85:57:51:4b:ea:
         6a:26:4f:92:3d:64:50:ba:bd:be:f0:ec:29:b9:49:75:d6:4d:
         ae:d0:e9:0e:d3:0c:c1:af:0e:f9:2d:6d:d4:94:c2:c8:a0:48:
         cf:44:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org