Route Origin Authorization

$ rpki-client -vvf k59.rrdp-rpki.athene-center.net/repo/k59-rpki-athene-center/0/3135382e3232302e3138382e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3138382e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          FgRYM9HZtVvsTgmQUj47cPveDKWjsyW8Agnek19bFKA=
Subject key identifier:   94:73:AB:BA:60:54:43:3C:04:D5:1C:C5:E7:20:39:4C:7A:A4:F4:36
Certificate issuer:       /CN=E8122B589B258C5FA703116F049BC1F8215D8AF1
Certificate serial:       7BCACA2BE20B7E4D68CD757AA5C359856DC1E63D
Authority key identifier: E8:12:2B:58:9B:25:8C:5F:A7:03:11:6F:04:9B:C1:F8:21:5D:8A:F1
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E8122B589B258C5FA703116F049BC1F8215D8AF1.cer
Subject info access:      rsync://k59.rrdp-rpki.athene-center.net/repo/k59-rpki-athene-center/0/3135382e3232302e3138382e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:48:49 +0000
ROA not before:           Wed 27 Mar 2024 19:43:49 +0000
ROA not after:            Wed 26 Mar 2025 19:48:49 +0000
asID:                     208162
IP address blocks:        158.220.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ca:ca:2b:e2:0b:7e:4d:68:cd:75:7a:a5:c3:59:85:6d:c1:e6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8122B589B258C5FA703116F049BC1F8215D8AF1
        Validity
            Not Before: Mar 27 19:43:49 2024 GMT
            Not After : Mar 26 19:48:49 2025 GMT
        Subject: CN=9473ABBA6054433C04D51CC5E720394C7AA4F436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:d1:eb:fd:90:c5:46:49:bc:de:00:04:53:
                    7b:06:a2:1a:40:0c:01:7f:de:98:4a:5b:8e:ff:8e:
                    12:20:f4:e8:67:3d:1a:fe:8c:72:a8:fe:04:89:35:
                    22:72:ad:09:b1:cb:e5:03:a8:70:48:54:ac:07:b2:
                    a4:9b:c5:f8:7f:cc:87:fe:fa:8f:ee:4e:c4:db:bd:
                    23:bb:db:49:16:61:80:51:92:df:73:bd:4d:d3:1f:
                    0e:38:a1:1c:1c:9b:25:f3:98:40:7a:b8:a5:24:f1:
                    55:bf:16:87:c4:39:e5:96:4a:e8:74:b6:77:d1:5e:
                    8c:03:ca:4f:5c:3d:f3:d1:37:32:a0:8a:a8:f0:b5:
                    16:27:fa:89:72:75:c5:81:c1:41:dc:3a:ce:05:c9:
                    35:50:39:21:d0:c5:1d:53:8c:b2:54:46:0a:a5:18:
                    93:88:ef:68:83:e9:48:1d:fe:cc:27:5c:68:90:9e:
                    ed:a4:6f:cc:c0:60:0f:8e:28:b2:e0:a5:e0:8b:8b:
                    96:fc:8d:f5:0b:f9:8e:62:f1:28:14:82:7f:0c:97:
                    7b:2d:7f:3f:d4:8c:34:b5:87:6a:b6:43:f3:8b:40:
                    d3:2c:57:e5:c2:76:15:2f:ec:de:35:58:e5:1e:32:
                    5b:b8:d0:d6:d5:a3:26:c1:49:cc:f0:7f:17:52:20:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:73:AB:BA:60:54:43:3C:04:D5:1C:C5:E7:20:39:4C:7A:A4:F4:36
            X509v3 Authority Key Identifier:
                keyid:E8:12:2B:58:9B:25:8C:5F:A7:03:11:6F:04:9B:C1:F8:21:5D:8A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k59.rrdp-rpki.athene-center.net/repo/k59-rpki-athene-center/0/E8122B589B258C5FA703116F049BC1F8215D8AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E8122B589B258C5FA703116F049BC1F8215D8AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://k59.rrdp-rpki.athene-center.net/repo/k59-rpki-athene-center/0/3135382e3232302e3138382e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:4f:24:43:da:ea:86:2a:7d:2f:94:fb:6b:ca:88:c0:8f:c9:
         35:09:fa:68:a2:14:4e:4a:36:ff:94:77:2a:5f:2d:a5:18:8d:
         4d:f2:89:58:3a:48:78:dc:09:e2:75:09:24:d8:13:b7:44:7b:
         76:35:81:33:59:09:31:90:fa:63:b0:b8:b0:14:4d:e6:eb:4b:
         13:81:aa:0d:e5:86:79:7f:1a:92:bc:66:80:da:62:83:39:b3:
         56:62:25:f8:52:6d:2f:b0:91:66:3d:7f:17:de:30:68:a3:d5:
         db:a5:1c:09:03:fb:00:c6:d3:df:ca:c3:0d:2a:b0:1c:ff:24:
         d6:ae:cb:1f:6f:9b:fe:be:00:f0:bf:35:33:e9:c1:06:3f:18:
         05:9f:2a:ab:3e:67:52:87:a9:42:df:7b:53:6e:c8:33:a9:ff:
         b5:87:9f:3b:80:a0:74:04:99:44:09:64:59:3a:25:85:5f:74:
         4b:72:41:0a:58:f8:f2:d6:1e:54:5b:dd:b7:8a:ef:b0:2d:7a:
         24:78:e3:f3:bc:60:5e:0a:88:47:be:64:42:b7:ad:0f:24:88:
         92:5b:60:41:93:e8:0e:da:1e:2a:18:7b:c7:2b:b7:31:ea:01:
         f3:b9:79:0b:29:13:76:bd:f5:5e:3d:29:34:bc:03:3e:9d:64:
         c9:25:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org