Route Origin Authorization

$ rpki-client -vvf k22.rrdp-rpki.athene-center.net/repo/k22-rpki-athene-center/0/3135382e3232302e3135312e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135312e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          LV7EDxZv0FlIkReQltpLJpMP/AHOTyEpKnnQrdH5L3A=
Subject key identifier:   7B:86:55:1B:0F:9B:67:C6:9A:51:91:A5:C8:DA:C8:D8:02:75:4D:0D
Certificate issuer:       /CN=AD281BCCE9C053980844E60393A2081EB8B47108
Certificate serial:       1F3AFB67A9EA4B45E72ED206CD466A81589C0423
Authority key identifier: AD:28:1B:CC:E9:C0:53:98:08:44:E6:03:93:A2:08:1E:B8:B4:71:08
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AD281BCCE9C053980844E60393A2081EB8B47108.cer
Subject info access:      rsync://k22.rrdp-rpki.athene-center.net/repo/k22-rpki-athene-center/0/3135382e3232302e3135312e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:41:51 +0000
ROA not before:           Wed 27 Mar 2024 19:36:51 +0000
ROA not after:            Wed 26 Mar 2025 19:41:51 +0000
asID:                     208162
IP address blocks:        158.220.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3a:fb:67:a9:ea:4b:45:e7:2e:d2:06:cd:46:6a:81:58:9c:04:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD281BCCE9C053980844E60393A2081EB8B47108
        Validity
            Not Before: Mar 27 19:36:51 2024 GMT
            Not After : Mar 26 19:41:51 2025 GMT
        Subject: CN=7B86551B0F9B67C69A5191A5C8DAC8D802754D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:b4:c2:21:d5:22:0f:96:6e:eb:66:87:05:
                    72:f0:78:fd:81:f8:51:3a:63:56:fa:38:bb:4c:1a:
                    18:45:17:cc:2b:02:a3:65:b5:c1:01:e1:ee:9c:37:
                    b6:fa:76:f5:c1:cd:80:6f:59:ed:19:73:82:d4:be:
                    00:67:e6:0f:81:5f:ec:de:25:93:3b:46:8c:f3:f2:
                    96:4d:f5:53:d6:15:5a:13:da:7a:f7:b3:ec:e9:f3:
                    7d:4b:65:e5:d9:d6:97:c0:b0:f6:b9:be:b0:95:db:
                    37:fb:74:ae:ab:2c:21:5b:d9:32:df:aa:c0:f8:c2:
                    04:aa:65:32:08:d5:12:a5:13:d9:c5:dc:6e:01:6f:
                    4d:51:d4:31:5b:ca:c6:b5:7c:4e:9f:35:c6:a3:df:
                    cf:a2:68:d0:7e:65:27:81:84:81:9b:50:8c:2e:06:
                    0f:a2:04:b5:90:52:52:85:3c:81:29:1b:10:86:a2:
                    94:c5:a3:1f:16:40:41:d7:4c:13:6d:5a:07:20:40:
                    25:e8:67:77:2e:77:3c:8b:f4:fb:79:6e:65:43:2b:
                    86:77:50:a6:04:69:d5:a5:ba:e8:61:24:7e:d3:da:
                    b1:35:b5:f4:8b:55:ad:e2:ca:f9:8d:47:21:4c:0e:
                    36:85:41:78:59:5d:5d:d3:bf:cf:68:42:df:2a:48:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:86:55:1B:0F:9B:67:C6:9A:51:91:A5:C8:DA:C8:D8:02:75:4D:0D
            X509v3 Authority Key Identifier:
                keyid:AD:28:1B:CC:E9:C0:53:98:08:44:E6:03:93:A2:08:1E:B8:B4:71:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k22.rrdp-rpki.athene-center.net/repo/k22-rpki-athene-center/0/AD281BCCE9C053980844E60393A2081EB8B47108.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/AD281BCCE9C053980844E60393A2081EB8B47108.cer

            Subject Information Access:
                Signed Object - URI:rsync://k22.rrdp-rpki.athene-center.net/repo/k22-rpki-athene-center/0/3135382e3232302e3135312e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f5:57:40:22:68:c8:fa:60:d9:e1:5a:6e:f5:fc:59:f5:c6:
         e6:3a:3b:dc:e6:70:89:0e:e0:8c:ab:31:51:c3:97:24:c3:4f:
         e7:83:84:60:6c:be:42:23:e3:93:ce:77:d8:63:1b:5c:74:03:
         6c:3e:78:a4:82:1b:5a:b3:05:bc:06:5b:5d:37:fc:f6:37:6b:
         ed:1d:65:af:d9:b3:53:68:b0:39:10:35:c4:1c:bd:4b:4f:de:
         cb:d3:e7:ec:e4:34:54:41:47:03:02:36:27:48:43:a9:91:54:
         f7:d4:ec:b3:ad:c1:c8:43:5f:2a:c6:af:f0:20:7b:d1:bb:39:
         af:71:cd:06:06:56:55:65:3f:65:d1:e0:4d:66:f2:12:80:9e:
         3e:5b:83:fa:5b:48:28:1c:28:4c:db:45:1f:4c:e9:42:ff:88:
         7b:54:5c:2b:1a:3e:b6:5a:83:7b:60:42:21:00:c5:a5:53:af:
         9b:97:70:fb:42:43:7a:da:46:67:39:77:9a:3c:11:5e:d0:4e:
         29:14:56:3c:f1:b0:84:fe:cf:c4:d6:fc:79:b3:96:31:20:ae:
         19:1a:2f:a0:e1:32:2d:28:9e:fe:a0:36:e2:ec:53:35:91:35:
         bd:f1:e5:a0:91:96:38:1c:cf:b4:03:f1:c6:c3:80:75:a1:73:
         cd:1c:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org