Route Origin Authorization

$ rpki-client -vvf k27.pp-rpki.athene-center.net/repo/k27-rpki-athene-center/0/3135382e3232302e3135362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          C6GmArQnab4aeKaxMRJDS2/PesxKmkgD/IPEEk4o1sg=
Subject key identifier:   61:A2:B9:C0:F9:42:79:3A:DF:FF:28:20:E8:69:BD:8A:B5:19:C5:04
Certificate issuer:       /CN=D47091A26CF96B64F1D0662F50927785666A1C49
Certificate serial:       3C70604BDA1B22BC9789E52A2491C786071B34D6
Authority key identifier: D4:70:91:A2:6C:F9:6B:64:F1:D0:66:2F:50:92:77:85:66:6A:1C:49
Authority info access:    rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/D47091A26CF96B64F1D0662F50927785666A1C49.cer
Subject info access:      rsync://k27.pp-rpki.athene-center.net/repo/k27-rpki-athene-center/0/3135382e3232302e3135362e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 22 Mar 2024 10:29:12 +0000
ROA not before:           Fri 22 Mar 2024 10:24:12 +0000
ROA not after:            Fri 21 Mar 2025 10:29:12 +0000
asID:                     208162
IP address blocks:        158.220.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:70:60:4b:da:1b:22:bc:97:89:e5:2a:24:91:c7:86:07:1b:34:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D47091A26CF96B64F1D0662F50927785666A1C49
        Validity
            Not Before: Mar 22 10:24:12 2024 GMT
            Not After : Mar 21 10:29:12 2025 GMT
        Subject: CN=61A2B9C0F942793ADFFF2820E869BD8AB519C504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:0b:53:18:8d:80:45:b9:2f:56:b6:13:28:
                    ea:df:7f:74:98:b3:f6:bb:db:8f:f9:af:4b:18:c4:
                    8b:0a:aa:32:66:ed:93:20:6e:9e:c4:b4:b0:00:11:
                    86:75:88:75:1c:c5:a5:59:dd:1d:34:51:da:4c:ae:
                    42:f2:4a:60:99:b7:e4:18:c9:3e:7b:81:30:43:8d:
                    ef:34:6a:3e:7a:82:8b:1c:49:5d:8b:b9:4c:e8:a5:
                    a5:f7:1b:b0:13:06:4a:57:97:e6:7d:3d:c7:96:7a:
                    89:01:da:c1:3d:a3:10:33:48:71:42:8a:8f:c9:35:
                    17:a1:49:7b:a9:e1:58:35:73:d2:ed:fd:61:de:ba:
                    07:c8:94:17:7c:cd:4f:42:95:b8:d7:9b:20:10:09:
                    ef:ae:fe:6e:4f:27:6c:91:a2:05:75:e8:a6:d2:e5:
                    bf:81:71:66:7b:2e:c5:02:ba:f1:eb:13:ee:df:64:
                    f5:39:3d:39:01:05:80:9b:0d:05:10:c9:20:82:a4:
                    14:b7:b0:a6:0e:60:18:2b:db:b6:6c:ed:7e:f2:7a:
                    51:66:b0:87:d1:b2:ff:a0:be:93:f8:68:66:f6:55:
                    05:e8:fa:6e:a7:f3:71:33:d8:7b:3f:e1:69:f9:b5:
                    e2:2e:f7:c6:0c:f3:ef:9d:a9:c8:b1:54:c8:76:a1:
                    4b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A2:B9:C0:F9:42:79:3A:DF:FF:28:20:E8:69:BD:8A:B5:19:C5:04
            X509v3 Authority Key Identifier:
                keyid:D4:70:91:A2:6C:F9:6B:64:F1:D0:66:2F:50:92:77:85:66:6A:1C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k27.pp-rpki.athene-center.net/repo/k27-rpki-athene-center/0/D47091A26CF96B64F1D0662F50927785666A1C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.pp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/D47091A26CF96B64F1D0662F50927785666A1C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://k27.pp-rpki.athene-center.net/repo/k27-rpki-athene-center/0/3135382e3232302e3135362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:df:bf:36:dd:f7:f5:00:1d:99:22:40:92:08:cb:fb:d6:d4:
         97:fd:2e:29:45:4c:6e:c0:ce:89:ac:13:12:94:65:c8:16:f5:
         86:c5:ff:5f:fa:0c:54:e9:9a:a0:6c:5a:1d:84:e3:09:f7:96:
         2e:ec:ef:95:1b:2d:35:c6:15:ad:62:31:c3:de:7d:73:ff:aa:
         a1:af:73:bd:85:96:c2:76:b3:cf:ec:ff:15:60:fb:49:ec:09:
         cc:5a:8e:0f:9c:ab:c3:bc:5e:15:37:47:17:c0:73:05:62:83:
         32:f5:38:3a:9d:b0:fc:5a:c0:c9:5e:d7:5b:0b:27:6a:2e:48:
         06:92:e0:9c:da:d8:86:6e:ff:47:e9:14:85:bb:36:3b:ad:aa:
         70:4a:ce:de:5c:d3:cf:36:e5:25:99:fc:5a:85:65:e8:d1:3b:
         a6:ec:74:63:9e:e5:e3:ee:43:ff:61:45:bb:64:90:df:22:5c:
         4d:74:e9:f4:d5:6e:05:64:04:72:36:ad:8c:ed:01:ad:2f:1e:
         49:88:50:49:c8:91:3a:d4:6b:cc:37:f1:7f:21:d7:84:58:41:
         c4:6d:3b:91:ad:19:8e:ab:f3:34:7c:8e:16:23:b8:15:ae:23:
         8b:2b:60:c6:00:0b:a6:51:e6:70:35:c4:6d:5d:db:5b:22:37:
         16:a9:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org