Route Origin Authorization

$ rpki-client -vvf k41.rrdp-rpki.athene-center.net/repo/k41-rpki-athene-center/0/3135382e3232302e3137302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3137302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          T0l9P3dD54rCnLa0ncoxGmSB3kZtQ6KhZtfSO2eA9oo=
Subject key identifier:   5E:29:26:D0:21:58:3C:EA:12:DC:EC:2A:E0:99:E5:12:36:F2:8A:A3
Certificate issuer:       /CN=7F7EEA255FF976523EFA3D275DB4E03434D83634
Certificate serial:       75A7A50A59790BF04156E6CA0A720B73184A40A6
Authority key identifier: 7F:7E:EA:25:5F:F9:76:52:3E:FA:3D:27:5D:B4:E0:34:34:D8:36:34
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/7F7EEA255FF976523EFA3D275DB4E03434D83634.cer
Subject info access:      rsync://k41.rrdp-rpki.athene-center.net/repo/k41-rpki-athene-center/0/3135382e3232302e3137302e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:45:25 +0000
ROA not before:           Wed 27 Mar 2024 19:40:25 +0000
ROA not after:            Wed 26 Mar 2025 19:45:25 +0000
asID:                     208162
IP address blocks:        158.220.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a7:a5:0a:59:79:0b:f0:41:56:e6:ca:0a:72:0b:73:18:4a:40:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7EEA255FF976523EFA3D275DB4E03434D83634
        Validity
            Not Before: Mar 27 19:40:25 2024 GMT
            Not After : Mar 26 19:45:25 2025 GMT
        Subject: CN=5E2926D021583CEA12DCEC2AE099E51236F28AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:c7:87:49:a0:03:db:c8:db:a2:b9:79:cd:
                    8c:78:34:e4:2a:81:54:2b:96:82:4a:3e:2f:d2:7c:
                    40:cc:c1:da:f1:7c:89:81:22:ff:94:77:4e:a3:a1:
                    dc:67:53:5c:d6:99:15:18:6e:5f:2c:a9:7e:b1:e8:
                    e0:1d:f3:12:f7:42:76:91:6e:b3:a6:e3:bb:ba:3a:
                    3f:a9:eb:99:52:28:7b:33:b2:19:f9:44:db:fa:0b:
                    23:f0:f1:63:87:0a:aa:47:14:6c:2f:a8:cd:36:a5:
                    1c:1d:7e:e5:29:f6:18:74:fd:2e:bb:21:18:ee:c8:
                    ed:01:fd:2b:29:d0:57:17:24:ea:71:e8:cc:85:9c:
                    b8:9e:12:0b:6e:d4:70:a4:e9:aa:65:48:f6:05:dd:
                    37:7d:ac:ed:ac:5e:d4:c1:c2:28:4f:39:74:5f:69:
                    9e:6b:89:47:a9:f1:12:8e:d3:61:1c:40:09:37:e0:
                    87:41:55:45:6d:cf:0a:c7:b0:3a:e3:9d:ee:3f:e2:
                    ee:f0:6b:05:bf:d3:ab:88:7e:6b:3f:87:46:8e:d4:
                    13:f9:b2:ba:dd:31:94:39:7d:30:d5:98:9c:08:33:
                    e0:3c:9b:95:d2:01:63:de:57:6c:8d:2e:5e:0c:2b:
                    c4:3f:0c:3b:76:1c:93:ed:27:5b:ec:02:67:1e:56:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:29:26:D0:21:58:3C:EA:12:DC:EC:2A:E0:99:E5:12:36:F2:8A:A3
            X509v3 Authority Key Identifier:
                keyid:7F:7E:EA:25:5F:F9:76:52:3E:FA:3D:27:5D:B4:E0:34:34:D8:36:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k41.rrdp-rpki.athene-center.net/repo/k41-rpki-athene-center/0/7F7EEA255FF976523EFA3D275DB4E03434D83634.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/7F7EEA255FF976523EFA3D275DB4E03434D83634.cer

            Subject Information Access:
                Signed Object - URI:rsync://k41.rrdp-rpki.athene-center.net/repo/k41-rpki-athene-center/0/3135382e3232302e3137302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:ff:8e:bb:18:c4:4a:07:51:ac:3f:7d:30:30:24:dd:be:
         94:d8:fe:44:3c:b1:c8:58:03:90:cb:6f:4c:f0:2d:a9:0c:fa:
         a4:48:58:72:5f:df:48:55:8b:00:90:87:1a:9a:50:30:74:6f:
         15:a6:25:2c:b9:d9:ae:92:98:dc:1d:c0:37:be:cd:a1:63:ff:
         5d:b6:ff:60:00:5c:16:c2:cd:cb:ad:b7:f4:f1:62:e6:20:10:
         8e:3d:d4:0a:c8:b5:9c:49:74:b6:68:c7:3f:47:c9:9c:9c:06:
         74:cf:90:71:73:74:f9:6f:4c:31:7c:75:5a:96:e4:dd:a9:53:
         56:70:d7:28:eb:e8:5c:62:74:57:32:5e:6e:39:f3:fb:b7:ed:
         45:78:9e:21:47:81:24:7e:9a:62:71:e0:3b:89:fe:d0:89:4a:
         e5:83:8f:17:c0:9b:0b:ad:8c:2f:3a:c9:e6:e1:c9:0d:6d:f6:
         3b:1b:7d:46:fc:4a:da:d0:80:f2:10:7f:a7:d1:77:cc:75:88:
         8e:f2:b0:82:a9:1d:9f:29:f9:a7:1d:d4:e0:91:0e:38:28:c2:
         f5:9f:4c:f2:85:c6:fa:c5:ff:5e:77:7a:e6:14:99:13:e2:e5:
         b9:52:59:ba:35:ea:09:52:35:15:4b:c3:7e:a8:89:f5:24:d0:
         b8:9c:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org