Route Origin Authorization

$ rpki-client -vvf k29.rrdp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          18xnbhi+LbzDwNWWw+MXJkFgee4KaeC/bwvRnub1t1k=
Subject key identifier:   E2:28:93:3F:EE:8F:A8:E3:37:1A:B6:BD:23:78:29:70:DD:91:D8:77
Certificate issuer:       /CN=B768E0D460A3A8EC6306BB3D09CAB78787E4BB03
Certificate serial:       3A52BA6F171377F4102855623571E273AE1D2A5A
Authority key identifier: B7:68:E0:D4:60:A3:A8:EC:63:06:BB:3D:09:CA:B7:87:87:E4:BB:03
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B768E0D460A3A8EC6306BB3D09CAB78787E4BB03.cer
Subject info access:      rsync://k29.rrdp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:43:10 +0000
ROA not before:           Wed 27 Mar 2024 19:38:10 +0000
ROA not after:            Wed 26 Mar 2025 19:43:10 +0000
asID:                     208162
IP address blocks:        158.220.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:52:ba:6f:17:13:77:f4:10:28:55:62:35:71:e2:73:ae:1d:2a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B768E0D460A3A8EC6306BB3D09CAB78787E4BB03
        Validity
            Not Before: Mar 27 19:38:10 2024 GMT
            Not After : Mar 26 19:43:10 2025 GMT
        Subject: CN=E228933FEE8FA8E3371AB6BD23782970DD91D877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c6:f0:ec:93:03:2b:3f:39:af:f3:71:59:67:
                    80:10:1a:b6:13:2d:94:54:45:65:c7:11:db:e2:82:
                    e9:91:b1:51:0b:a3:63:f4:4e:9e:24:33:77:fb:1b:
                    8a:00:ca:18:90:57:45:8e:38:84:5c:26:94:37:9e:
                    9b:3c:72:0d:fc:70:ac:ee:06:aa:5a:26:a0:6f:a1:
                    8b:ec:a1:1e:60:c7:fb:5e:37:eb:15:d0:6f:91:26:
                    71:c6:6c:86:8c:36:bf:0a:cd:da:b1:1a:a6:f7:2c:
                    ad:c9:8e:d6:ee:1f:b5:0a:75:83:cc:ad:e1:74:8b:
                    9c:e0:bc:da:d2:48:7a:90:ae:66:5a:1b:d5:0a:e7:
                    83:41:98:6a:a8:25:09:a1:dd:06:52:76:f5:9d:b2:
                    a0:de:6d:f8:59:0c:3f:4f:31:dc:1a:37:de:25:58:
                    9b:34:c5:a4:c4:4c:2c:dc:74:f0:c5:d6:5a:aa:3a:
                    1f:85:f5:72:30:f7:ac:42:9e:07:a4:b0:b2:72:ad:
                    f7:0b:77:92:f7:df:90:10:b6:a5:05:1e:81:ee:01:
                    ad:58:b5:20:96:53:ca:eb:2a:78:1a:21:88:b5:18:
                    1e:8b:5e:88:96:ba:f6:9a:3b:e8:c0:fb:84:58:24:
                    11:7d:d0:e9:7b:82:5c:78:de:1f:7c:1d:61:9b:27:
                    96:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:28:93:3F:EE:8F:A8:E3:37:1A:B6:BD:23:78:29:70:DD:91:D8:77
            X509v3 Authority Key Identifier:
                keyid:B7:68:E0:D4:60:A3:A8:EC:63:06:BB:3D:09:CA:B7:87:87:E4:BB:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k29.rrdp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/B768E0D460A3A8EC6306BB3D09CAB78787E4BB03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/B768E0D460A3A8EC6306BB3D09CAB78787E4BB03.cer

            Subject Information Access:
                Signed Object - URI:rsync://k29.rrdp-rpki.athene-center.net/repo/k29-rpki-athene-center/0/3135382e3232302e3135382e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:e3:ec:88:f4:32:16:1f:45:b9:88:0e:3e:08:27:e1:fe:
         bc:54:02:04:e8:12:4a:0d:c3:c6:b1:aa:54:e3:c3:e3:b2:da:
         83:3b:37:53:02:36:c2:22:b3:9b:84:96:4c:7f:9b:2a:c5:bb:
         21:19:98:12:a5:f2:79:38:3c:39:d4:a1:74:cf:09:e3:e3:37:
         ef:cf:70:cf:5d:4d:52:03:d1:3b:2d:4b:9d:78:23:61:95:94:
         b4:fd:8d:34:00:67:e7:a0:61:ed:ab:dc:07:06:23:5e:07:69:
         8d:3c:50:21:5c:b2:49:75:68:d2:ef:01:af:79:5f:17:3a:ff:
         d2:85:5e:2c:c1:a0:0f:51:3b:56:e1:de:a3:ec:bd:cb:86:e0:
         50:71:77:1d:f1:82:08:ab:48:19:40:49:cb:3c:43:2e:cc:fa:
         02:2f:cc:a4:38:ca:a4:5d:0d:98:86:37:e4:68:cb:c9:f9:7a:
         de:f8:63:5b:13:73:22:b2:78:94:a6:40:e5:78:6d:f0:44:8a:
         a1:42:da:9b:3d:d1:94:39:4b:8c:3d:23:b4:54:0a:8a:48:7f:
         55:23:05:f3:d1:70:98:64:bd:99:c1:29:42:6f:cb:2f:3c:7d:
         66:3a:f6:8b:04:ba:73:ca:8d:24:ea:d3:ef:90:20:f4:69:fb:
         22:2c:af:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org