Route Origin Authorization

$ rpki-client -vvf k23.rrdp-rpki.athene-center.net/repo/k23-rpki-athene-center/0/3135382e3232302e3135322e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135322e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          QeUtnyUAyRo44+E/0FtrQYqCwCKnot+vIVZU7+yvomo=
Subject key identifier:   BB:8E:4F:DC:58:35:98:BD:15:D8:A4:80:53:E3:54:0F:CE:BB:46:FA
Certificate issuer:       /CN=31C6F37513E5EB99FE10A37AFCAE63F7CE2FDEFC
Certificate serial:       5123C240D44E683DFA7F0B9C475DF6EF2EA912D2
Authority key identifier: 31:C6:F3:75:13:E5:EB:99:FE:10:A3:7A:FC:AE:63:F7:CE:2F:DE:FC
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/31C6F37513E5EB99FE10A37AFCAE63F7CE2FDEFC.cer
Subject info access:      rsync://k23.rrdp-rpki.athene-center.net/repo/k23-rpki-athene-center/0/3135382e3232302e3135322e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:42:02 +0000
ROA not before:           Wed 27 Mar 2024 19:37:02 +0000
ROA not after:            Wed 26 Mar 2025 19:42:02 +0000
asID:                     208162
IP address blocks:        158.220.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:23:c2:40:d4:4e:68:3d:fa:7f:0b:9c:47:5d:f6:ef:2e:a9:12:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31C6F37513E5EB99FE10A37AFCAE63F7CE2FDEFC
        Validity
            Not Before: Mar 27 19:37:02 2024 GMT
            Not After : Mar 26 19:42:02 2025 GMT
        Subject: CN=BB8E4FDC583598BD15D8A48053E3540FCEBB46FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:51:3c:c5:2c:cb:af:ea:e5:0e:75:97:48:
                    9e:99:dd:ac:b5:a3:72:24:fa:36:9f:09:aa:c6:32:
                    49:76:a6:ab:0f:08:3f:f8:0d:c9:0a:5a:0d:a7:5b:
                    6b:8a:d9:3f:43:ed:2a:88:73:c4:f4:d4:8d:ee:fa:
                    a2:ec:8d:6f:6e:5e:ec:02:db:e3:cb:ae:2a:19:62:
                    81:14:2b:25:07:69:b5:7a:53:df:29:62:a6:fd:14:
                    0d:48:e6:18:1b:db:29:6a:11:bf:e1:e3:72:84:f2:
                    e2:9b:96:d1:dd:1d:a4:c2:9c:f6:d2:b7:7f:6f:ed:
                    88:58:2c:c5:06:b7:83:4d:21:0b:a6:24:ec:15:f0:
                    44:6a:79:4d:a8:b3:2c:2e:45:75:0e:21:9d:fe:ab:
                    f5:50:a6:11:f2:0c:37:f3:0b:1d:a1:16:2c:0c:70:
                    65:b3:8e:1e:ed:be:aa:82:cd:c2:b4:36:13:80:df:
                    c6:ca:64:0e:e1:71:7b:65:29:c4:0f:c7:22:a1:68:
                    d2:76:8c:b2:94:a0:b8:8e:fe:04:2e:bb:79:a2:c8:
                    b8:1f:c8:63:6e:8d:5a:fd:39:ec:48:78:49:e0:d5:
                    c4:ee:6e:68:78:ff:b1:d9:58:4b:d8:03:cd:37:17:
                    76:97:af:83:e7:03:76:29:e0:6b:cd:20:ea:68:1b:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8E:4F:DC:58:35:98:BD:15:D8:A4:80:53:E3:54:0F:CE:BB:46:FA
            X509v3 Authority Key Identifier:
                keyid:31:C6:F3:75:13:E5:EB:99:FE:10:A3:7A:FC:AE:63:F7:CE:2F:DE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k23.rrdp-rpki.athene-center.net/repo/k23-rpki-athene-center/0/31C6F37513E5EB99FE10A37AFCAE63F7CE2FDEFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/31C6F37513E5EB99FE10A37AFCAE63F7CE2FDEFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://k23.rrdp-rpki.athene-center.net/repo/k23-rpki-athene-center/0/3135382e3232302e3135322e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:90:75:ea:ba:86:27:74:87:b8:82:ca:a5:c5:28:dd:6e:00:
         82:a3:04:2f:a3:ff:14:06:32:52:82:7e:74:29:e0:22:00:dd:
         87:d7:d2:27:ce:7e:e4:c8:2b:83:32:05:69:79:6a:b2:13:0f:
         bc:31:80:b3:ef:05:a5:5b:8b:c8:9e:24:67:e5:fa:8a:f2:73:
         9e:8e:42:65:af:bd:9b:a1:7e:71:d9:b7:9b:e5:d2:02:c9:9a:
         4e:1f:ee:1d:49:7e:a9:5b:6b:02:07:90:c3:c4:ab:91:38:61:
         e0:ea:3b:86:39:76:2a:00:50:a7:92:15:45:a6:e9:ef:35:91:
         28:08:69:82:f5:e0:ae:e0:1a:35:3f:3e:64:d5:6c:76:09:90:
         00:34:a6:cf:2f:5c:7b:34:dd:e6:e4:9d:cc:e7:70:71:bd:b5:
         b3:17:1b:17:6b:18:c7:ee:a2:11:e6:79:50:51:4d:f6:ea:7e:
         d4:1f:7b:3b:c4:32:44:90:d3:48:ad:a3:6a:46:d7:f8:c7:21:
         1b:c2:fc:3d:80:4a:0e:82:cc:49:69:4d:c1:07:20:cf:a8:04:
         74:dd:22:b5:8e:d5:e2:fa:cc:76:b2:d5:61:0e:a3:2b:2b:9c:
         50:a0:10:7a:f4:ce:b4:11:8e:41:35:77:d6:4f:9d:e3:82:44:
         52:98:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org