Route Origin Authorization

$ rpki-client -vvf k21.pp-rpki.athene-center.net/repo/k21-rpki-athene-center/0/3135382e3232302e3135302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          7xOgNdgJZIulIAwXlMfXUJdXwxEPC/eI/ge+TV0z3eQ=
Subject key identifier:   24:6E:E8:21:0B:4D:D9:60:D2:83:56:2D:6B:5E:6A:81:26:09:FB:33
Certificate issuer:       /CN=056E814A187A949C15FFD0FA92FF6F640DFA9A83
Certificate serial:       1C47CC66EECB5E59F9711ED9FDEE2E4C8A3EA77E
Authority key identifier: 05:6E:81:4A:18:7A:94:9C:15:FF:D0:FA:92:FF:6F:64:0D:FA:9A:83
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/056E814A187A949C15FFD0FA92FF6F640DFA9A83.cer
Subject info access:      rsync://k21.pp-rpki.athene-center.net/repo/k21-rpki-athene-center/0/3135382e3232302e3135302e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:28:05 +0000
ROA not before:           Fri 22 Mar 2024 10:23:05 +0000
ROA not after:            Fri 21 Mar 2025 10:28:05 +0000
asID:                     208162
IP address blocks:        158.220.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:cc:66:ee:cb:5e:59:f9:71:1e:d9:fd:ee:2e:4c:8a:3e:a7:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056E814A187A949C15FFD0FA92FF6F640DFA9A83
        Validity
            Not Before: Mar 22 10:23:05 2024 GMT
            Not After : Mar 21 10:28:05 2025 GMT
        Subject: CN=246EE8210B4DD960D283562D6B5E6A812609FB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:40:af:bd:ca:04:33:37:68:1c:9b:7a:78:
                    6a:c2:0b:9d:10:d5:46:c0:84:58:91:b2:59:4f:45:
                    8a:54:16:41:e3:29:6e:3d:96:d7:5d:37:ad:80:62:
                    4f:71:05:ef:12:ab:83:df:0c:08:45:c4:9d:15:3f:
                    4d:00:5a:3d:b0:99:23:92:73:e1:d4:7c:12:5c:7d:
                    d8:d1:69:cc:2a:53:b1:37:3d:ed:e1:7d:69:4c:db:
                    e7:b9:f9:60:fb:4b:39:a0:3d:8f:47:86:84:61:17:
                    2f:75:38:c2:f6:e7:9a:d3:5b:44:86:86:c2:0d:f6:
                    36:38:00:61:39:bf:52:f6:b8:b4:e2:68:66:91:c4:
                    71:fb:97:d3:0e:6d:1b:cb:92:63:40:6e:ff:bd:8a:
                    a0:e5:ff:60:30:1b:80:e0:b5:95:56:dc:ca:ce:26:
                    16:f1:a6:8f:6a:4e:37:fd:a1:1d:e3:5c:79:da:22:
                    86:51:28:15:91:fa:a5:6f:43:dd:7b:4a:1e:07:3f:
                    c4:23:bf:84:61:75:da:44:38:0f:c5:39:80:4a:23:
                    90:3a:c4:b5:1f:bc:ab:85:cd:7f:65:cc:b0:73:80:
                    ed:31:7a:fc:65:c1:dd:c9:b4:71:a2:00:71:c1:b3:
                    6f:52:ec:b8:a2:83:d5:d5:7f:74:b7:f6:ef:93:77:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6E:E8:21:0B:4D:D9:60:D2:83:56:2D:6B:5E:6A:81:26:09:FB:33
            X509v3 Authority Key Identifier:
                keyid:05:6E:81:4A:18:7A:94:9C:15:FF:D0:FA:92:FF:6F:64:0D:FA:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k21.pp-rpki.athene-center.net/repo/k21-rpki-athene-center/0/056E814A187A949C15FFD0FA92FF6F640DFA9A83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/056E814A187A949C15FFD0FA92FF6F640DFA9A83.cer

            Subject Information Access:
                Signed Object - URI:rsync://k21.pp-rpki.athene-center.net/repo/k21-rpki-athene-center/0/3135382e3232302e3135302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:a8:c8:b2:bb:40:e2:43:85:18:94:ee:0c:19:90:70:e0:c4:
         53:a4:93:f7:3a:6a:74:a3:07:8b:f9:06:40:0f:1e:82:c0:6b:
         19:03:af:9c:fb:41:81:59:5d:24:e4:8e:fa:1a:84:15:40:1c:
         cf:66:b8:09:96:87:fb:81:b4:58:fc:e8:83:a7:6c:f3:b8:fb:
         dd:3e:b8:4b:da:1a:d5:75:b2:c2:4f:37:27:f5:b8:e2:c8:d6:
         93:41:92:31:9f:27:ee:74:e9:13:b4:26:05:cd:1c:e1:2e:13:
         8c:9d:00:90:80:98:43:02:50:0b:4e:94:d9:84:cb:db:1b:98:
         0b:db:70:ae:83:01:1a:94:a1:b2:e5:af:35:9b:73:3e:0a:c0:
         bf:50:84:a1:7a:27:4a:b2:29:16:22:f2:54:e0:f8:09:68:84:
         76:99:ba:f4:34:d0:c0:70:d8:1b:84:d9:08:87:c8:f4:92:9d:
         af:32:c4:03:28:b7:89:6b:89:18:ce:88:83:e5:86:9a:00:f9:
         9c:a4:3e:32:09:5b:81:ed:d2:51:1b:d1:d7:27:1b:01:a1:c0:
         6f:14:63:ac:16:ba:87:d3:4d:66:6d:20:04:88:28:26:f4:9a:
         c7:84:3c:e8:ce:80:3f:d5:ba:65:5c:83:79:90:5a:6e:56:38:
         ee:4c:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org