Route Origin Authorization

$ rpki-client -vvf k26.pp-rpki.athene-center.net/repo/k26-rpki-athene-center/0/3135382e3232302e3135352e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135352e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          Dzw5j0j5xF6dFp9TIpF7lGKxV4nGRVqnKa6oA74bMuk=
Subject key identifier:   44:F5:C1:9D:B9:3A:D5:DA:AC:91:53:A9:E3:5D:D2:E8:94:41:EB:41
Certificate issuer:       /CN=0274D0511D0C87B6ADDFF81FBE623E9292EC0945
Certificate serial:       3F493749A0B24D1BC53213AE7E16AC2050C0366E
Authority key identifier: 02:74:D0:51:1D:0C:87:B6:AD:DF:F8:1F:BE:62:3E:92:92:EC:09:45
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0274D0511D0C87B6ADDFF81FBE623E9292EC0945.cer
Subject info access:      rsync://k26.pp-rpki.athene-center.net/repo/k26-rpki-athene-center/0/3135382e3232302e3135352e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:29:01 +0000
ROA not before:           Fri 22 Mar 2024 10:24:01 +0000
ROA not after:            Fri 21 Mar 2025 10:29:01 +0000
asID:                     208162
IP address blocks:        158.220.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:49:37:49:a0:b2:4d:1b:c5:32:13:ae:7e:16:ac:20:50:c0:36:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0274D0511D0C87B6ADDFF81FBE623E9292EC0945
        Validity
            Not Before: Mar 22 10:24:01 2024 GMT
            Not After : Mar 21 10:29:01 2025 GMT
        Subject: CN=44F5C19DB93AD5DAAC9153A9E35DD2E89441EB41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:5a:96:2f:cc:1e:2c:03:ab:17:25:5d:9e:
                    6e:17:e0:b0:3a:1f:67:47:8a:35:5d:3c:96:6b:0a:
                    8f:56:04:d4:55:4b:c2:15:a4:5e:18:13:6e:34:f4:
                    7f:ca:56:c6:b4:6b:84:77:8d:3b:0d:80:c5:12:e1:
                    57:1b:da:80:74:b5:bd:8d:a2:f3:6f:76:ff:69:cd:
                    43:a9:5e:9b:ea:2a:6c:73:f0:41:41:15:1e:6b:32:
                    e8:b3:5e:26:8c:6a:52:4c:67:18:e7:33:7e:dc:f8:
                    f4:e1:2a:6c:94:c9:2c:00:dd:2b:88:8e:07:25:d1:
                    f5:57:b4:f5:ca:c8:07:30:cd:31:8f:de:86:08:93:
                    f7:60:23:b7:8f:80:1f:69:0e:a8:84:27:43:b3:20:
                    25:d5:d6:26:ad:b4:ad:c0:ce:b6:7e:5d:55:77:8a:
                    ba:59:9b:cf:25:e1:f9:5f:49:78:aa:65:a4:aa:c5:
                    16:70:68:d4:59:ce:cb:f5:90:f7:79:2a:e6:b1:17:
                    fc:0d:cb:03:a3:31:20:d4:c2:07:1a:df:ea:92:e1:
                    be:d6:91:90:3f:c9:cf:e0:02:8f:3a:ac:b6:bf:7d:
                    42:bd:26:3b:5f:78:ef:5c:ff:46:a8:89:6f:a1:41:
                    fe:b4:56:60:f3:dd:5f:92:74:9d:cb:93:3f:51:96:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:C1:9D:B9:3A:D5:DA:AC:91:53:A9:E3:5D:D2:E8:94:41:EB:41
            X509v3 Authority Key Identifier:
                keyid:02:74:D0:51:1D:0C:87:B6:AD:DF:F8:1F:BE:62:3E:92:92:EC:09:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k26.pp-rpki.athene-center.net/repo/k26-rpki-athene-center/0/0274D0511D0C87B6ADDFF81FBE623E9292EC0945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/0274D0511D0C87B6ADDFF81FBE623E9292EC0945.cer

            Subject Information Access:
                Signed Object - URI:rsync://k26.pp-rpki.athene-center.net/repo/k26-rpki-athene-center/0/3135382e3232302e3135352e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:02:54:5e:68:ef:54:a8:09:87:ee:7b:a1:37:c2:80:3a:5a:
         ac:fb:36:e6:b3:56:86:af:0f:05:3a:95:a1:32:71:46:2a:6b:
         2c:2d:17:f1:a2:1b:83:af:d1:a1:d8:d4:a2:fd:3a:a6:cb:a2:
         bf:99:0b:57:36:50:56:3e:9c:24:5d:86:47:d1:51:98:eb:b1:
         8c:48:dd:c4:d5:e1:98:80:97:c3:1a:1e:2e:03:cd:e7:5a:be:
         ba:6f:fd:79:96:a6:53:60:c1:a5:73:36:26:97:6c:a4:1c:2c:
         4a:84:4f:c5:d6:6c:d3:0b:05:7f:67:90:f7:44:16:f6:0c:02:
         fa:66:d2:5a:3f:a0:c3:cf:cb:e3:ff:b1:f8:11:d8:f9:cf:06:
         9d:34:bb:e2:39:18:49:b8:7c:41:b0:8f:ed:d8:72:4d:26:aa:
         ec:93:a8:c3:23:f3:1f:79:c8:88:fa:64:8f:62:00:9e:06:0d:
         4f:5f:db:ef:c9:c3:ba:4f:88:c8:07:a5:92:c1:db:a7:29:5a:
         d5:95:8d:ff:fb:8c:7b:46:ee:36:4a:59:47:ed:02:09:c3:f3:
         1d:16:bd:e2:b5:02:5f:c4:e7:7c:98:25:f0:11:0c:7b:e9:39:
         d4:15:4b:56:88:03:5a:a9:64:08:2e:f8:01:30:e4:3b:47:98:
         b1:6b:70:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 22:50:52 2024 by rpki-client on console-ams.rpki-client.org