Route Origin Authorization

$ rpki-client -vvf k34.rrdp-rpki.athene-center.net/repo/k34-rpki-athene-center/0/3135382e3232302e3136332e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136332e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          PrkpGO9LyOiXK5eOzwJ5l0bnQzFjgCWqGLOxdkCdQhY=
Subject key identifier:   38:A6:AD:66:06:3A:2A:E9:46:68:A0:45:2F:40:83:77:59:10:DE:0E
Certificate issuer:       /CN=394AA61A0147B7F3363644034F7CE789A9F9B165
Certificate serial:       17C3BA63CE2DE6AA82D0056FC889ED2731440758
Authority key identifier: 39:4A:A6:1A:01:47:B7:F3:36:36:44:03:4F:7C:E7:89:A9:F9:B1:65
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/394AA61A0147B7F3363644034F7CE789A9F9B165.cer
Subject info access:      rsync://k34.rrdp-rpki.athene-center.net/repo/k34-rpki-athene-center/0/3135382e3232302e3136332e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:44:07 +0000
ROA not before:           Wed 27 Mar 2024 19:39:07 +0000
ROA not after:            Wed 26 Mar 2025 19:44:07 +0000
asID:                     208162
IP address blocks:        158.220.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c3:ba:63:ce:2d:e6:aa:82:d0:05:6f:c8:89:ed:27:31:44:07:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=394AA61A0147B7F3363644034F7CE789A9F9B165
        Validity
            Not Before: Mar 27 19:39:07 2024 GMT
            Not After : Mar 26 19:44:07 2025 GMT
        Subject: CN=38A6AD66063A2AE94668A0452F4083775910DE0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:24:2c:77:db:78:96:ce:95:0a:ee:d4:91:
                    98:2e:e2:23:d3:d2:2a:e1:fc:75:7f:a9:96:77:b6:
                    90:16:e9:a3:02:77:98:f1:fb:ae:0d:25:b7:c8:76:
                    6d:63:37:08:ed:13:6f:40:66:48:12:e2:52:db:4b:
                    9f:79:53:78:31:5e:86:f6:53:a8:a1:97:7d:98:8a:
                    0c:0c:b2:81:91:53:0a:27:e5:03:56:f9:3c:5b:78:
                    c8:74:c1:f1:fe:e4:3d:27:93:0b:c1:ac:db:3e:7b:
                    06:0b:a7:d9:6c:ab:11:51:68:46:2b:46:97:22:aa:
                    c2:ef:77:8d:e3:0f:15:4b:8f:43:27:fc:dc:bd:7b:
                    cf:73:45:f1:08:99:87:4e:9f:2a:59:af:d2:9a:2e:
                    35:26:00:01:97:fa:b1:63:52:42:a4:17:7c:76:6b:
                    7f:2c:74:49:df:96:8b:3a:75:a7:a1:7e:0a:74:16:
                    b6:df:01:bd:e8:84:4c:ea:a6:c5:1f:20:1a:47:7c:
                    c7:b7:a8:32:da:ba:9e:aa:cd:b2:78:bc:86:bd:e5:
                    7f:33:92:80:08:03:0b:67:26:c2:c8:24:0f:92:ff:
                    87:7c:07:29:42:ff:36:b3:76:fa:82:b3:20:29:f4:
                    6f:c7:c3:a1:d3:74:2e:21:a7:9b:5f:82:cf:d2:04:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A6:AD:66:06:3A:2A:E9:46:68:A0:45:2F:40:83:77:59:10:DE:0E
            X509v3 Authority Key Identifier:
                keyid:39:4A:A6:1A:01:47:B7:F3:36:36:44:03:4F:7C:E7:89:A9:F9:B1:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k34.rrdp-rpki.athene-center.net/repo/k34-rpki-athene-center/0/394AA61A0147B7F3363644034F7CE789A9F9B165.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/394AA61A0147B7F3363644034F7CE789A9F9B165.cer

            Subject Information Access:
                Signed Object - URI:rsync://k34.rrdp-rpki.athene-center.net/repo/k34-rpki-athene-center/0/3135382e3232302e3136332e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:8b:b4:24:e4:a6:a0:2a:97:8a:a0:b2:2c:ab:64:b7:78:43:
         e3:5b:76:ba:21:54:56:e8:cc:76:a2:b0:53:5b:c2:5c:97:58:
         c7:5a:3d:5d:b6:f0:84:8a:0c:9f:1f:35:8c:ed:90:a8:e6:3f:
         ab:5d:11:d1:a1:0f:76:b8:3f:7e:5e:25:a0:fe:cf:5a:d9:f5:
         7e:60:19:33:7d:8e:33:c5:95:53:32:e9:cd:a8:82:06:e4:c7:
         9c:a8:4e:1c:c3:39:08:ef:1a:2c:df:b8:c3:2a:83:c8:f5:42:
         06:67:3e:da:a0:11:64:02:fa:da:93:fd:d5:0b:61:6e:eb:62:
         d1:e8:a4:1f:ee:ac:2d:e4:bf:db:8c:e6:50:db:47:39:6b:15:
         1f:3c:ba:6c:88:29:46:7d:c7:41:1a:8b:58:a1:ec:65:e1:c2:
         45:dc:f6:67:21:b1:b8:4f:1c:a9:d7:db:af:e9:d2:ad:54:8a:
         97:d2:49:82:12:89:6d:d2:ba:ad:a6:2b:7b:bf:12:4b:06:05:
         ca:1d:89:c5:b0:14:f9:7b:31:34:a2:3e:52:e8:f4:59:cd:af:
         4c:36:9f:6e:98:42:38:2b:97:6f:da:08:47:02:9e:8c:7e:49:
         1f:30:8f:d0:a2:11:11:ae:d8:03:a9:24:b6:61:f6:61:f3:5e:
         e2:2a:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 02:11:39 2024 by rpki-client on console-ams.rpki-client.org