Route Origin Authorization

$ rpki-client -vvf k04.rrdp-rpki.athene-center.net/repo/k04-rpki-athene-center/0/3135382e3232302e3133332e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3133332e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          C2kjom/pc8BhSwWvb+Dz+7t1tWGa3PCjci1OsVguW2g=
Subject key identifier:   F2:23:4A:FC:E9:02:04:C1:E6:7B:DB:B1:8D:A7:E5:C2:E0:64:D2:0B
Certificate issuer:       /CN=CA0754033650C40F23734C1A6FB1706BB9DF6D1A
Certificate serial:       082C15619BEDFA8C1DC534041305FA454A53983F
Authority key identifier: CA:07:54:03:36:50:C4:0F:23:73:4C:1A:6F:B1:70:6B:B9:DF:6D:1A
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/CA0754033650C40F23734C1A6FB1706BB9DF6D1A.cer
Subject info access:      rsync://k04.rrdp-rpki.athene-center.net/repo/k04-rpki-athene-center/0/3135382e3232302e3133332e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:38:28 +0000
ROA not before:           Wed 27 Mar 2024 19:33:28 +0000
ROA not after:            Wed 26 Mar 2025 19:38:28 +0000
asID:                     208162
IP address blocks:        158.220.133.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2c:15:61:9b:ed:fa:8c:1d:c5:34:04:13:05:fa:45:4a:53:98:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA0754033650C40F23734C1A6FB1706BB9DF6D1A
        Validity
            Not Before: Mar 27 19:33:28 2024 GMT
            Not After : Mar 26 19:38:28 2025 GMT
        Subject: CN=F2234AFCE90204C1E67BDBB18DA7E5C2E064D20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:f0:98:72:5f:2d:23:25:35:7d:06:bf:2e:
                    2e:2e:71:1a:0e:2a:a3:69:ed:40:a1:b6:74:73:4f:
                    ca:7a:3e:77:95:6f:b8:a7:d1:26:02:b9:e0:30:2e:
                    05:06:7b:de:ec:aa:e9:fe:1d:af:92:98:f3:44:b2:
                    73:a2:87:7f:f8:d1:3b:db:aa:9e:ce:56:65:f2:73:
                    45:e2:7a:e5:1b:1c:b9:9a:66:11:b7:8e:74:60:d5:
                    f0:c4:bf:b0:e4:8e:9b:3a:73:54:41:da:20:a2:ec:
                    02:3a:6a:da:71:1b:88:a8:d8:82:13:a9:b0:91:52:
                    ee:db:d2:4b:c0:f7:79:62:88:f7:54:87:2f:eb:5c:
                    c0:cb:57:1f:12:76:d9:ef:49:89:95:1c:fe:92:4f:
                    8e:32:8c:6e:68:e2:cf:31:6c:21:da:4a:ac:0b:ad:
                    d5:d3:8a:17:29:dd:ec:9f:75:76:9f:7b:d0:93:93:
                    30:a1:c3:4e:d9:2d:c0:6f:6a:b3:0e:14:db:d0:69:
                    78:db:c5:4d:f8:69:c5:a6:2c:32:5f:75:f3:10:f9:
                    e1:dc:3a:8f:70:56:de:d0:72:72:7f:a3:d4:4d:24:
                    a2:24:f1:c1:c6:21:23:2d:a8:6e:14:d3:21:4d:74:
                    af:bf:bd:14:55:22:da:03:bd:18:b4:59:d6:ec:d4:
                    76:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:4A:FC:E9:02:04:C1:E6:7B:DB:B1:8D:A7:E5:C2:E0:64:D2:0B
            X509v3 Authority Key Identifier:
                keyid:CA:07:54:03:36:50:C4:0F:23:73:4C:1A:6F:B1:70:6B:B9:DF:6D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k04.rrdp-rpki.athene-center.net/repo/k04-rpki-athene-center/0/CA0754033650C40F23734C1A6FB1706BB9DF6D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/CA0754033650C40F23734C1A6FB1706BB9DF6D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://k04.rrdp-rpki.athene-center.net/repo/k04-rpki-athene-center/0/3135382e3232302e3133332e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:71:82:f8:fc:92:07:a0:bf:56:48:cf:09:4b:a9:bc:bf:
         a8:96:9a:5c:f9:6a:a1:9f:a2:3a:b5:34:d8:39:a7:09:1a:b9:
         70:cc:c1:ef:de:2a:48:ae:a3:31:91:9c:81:a7:40:db:16:56:
         c8:59:c4:27:32:b7:ad:c1:5c:c0:21:b2:b4:0d:37:ce:c3:5a:
         cd:77:05:4f:a0:a5:b7:3e:70:27:06:ec:8e:1a:58:7c:eb:ed:
         9e:41:cf:54:46:65:b4:50:6b:0a:2b:59:3a:11:a7:52:a7:5c:
         d1:46:1a:00:ab:29:c4:bb:92:58:7b:f2:f0:f6:01:62:90:98:
         24:86:03:77:d2:3f:8f:ed:90:4c:cf:07:07:6e:70:54:16:cf:
         89:e6:21:47:83:b8:af:50:28:e5:c4:d4:b9:c2:35:7d:c3:99:
         a9:3f:35:8d:ec:50:47:a5:b3:57:75:da:50:df:42:49:e9:1f:
         94:dd:e7:73:26:5e:49:9c:86:ad:8f:18:d6:0a:bd:72:89:7a:
         6e:61:6f:91:59:4c:85:45:47:1b:95:90:2c:18:fb:5a:06:d1:
         de:8f:23:cc:d7:7a:dc:d3:56:ef:00:aa:b5:28:6f:84:32:02:
         c1:92:6b:01:c9:b7:0c:4a:77:42:64:92:0d:8f:34:46:98:92:
         f1:32:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 19:36:02 2024 by rpki-client on console-ams.rpki-client.org