Route Origin Authorization

$ rpki-client -vvf k14.rrdp-rpki.athene-center.net/repo/k14-rpki-athene-center/0/3135382e3232302e3134332e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134332e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          oA+onVpmmSGuyL9LGIkp2KPjv2dcwHOISGQKtdVtPsM=
Subject key identifier:   E1:9C:41:2B:64:CE:56:62:78:90:BD:2B:46:1C:82:68:2A:4B:09:8B
Certificate issuer:       /CN=A5B77BE2FB244F1116EFD02255D7395FA405EED6
Certificate serial:       4EEF831EE2088EFCB74AE19AF50E91DEA1954049
Authority key identifier: A5:B7:7B:E2:FB:24:4F:11:16:EF:D0:22:55:D7:39:5F:A4:05:EE:D6
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/A5B77BE2FB244F1116EFD02255D7395FA405EED6.cer
Subject info access:      rsync://k14.rrdp-rpki.athene-center.net/repo/k14-rpki-athene-center/0/3135382e3232302e3134332e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:40:21 +0000
ROA not before:           Wed 27 Mar 2024 19:35:21 +0000
ROA not after:            Wed 26 Mar 2025 19:40:21 +0000
asID:                     208162
IP address blocks:        158.220.143.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ef:83:1e:e2:08:8e:fc:b7:4a:e1:9a:f5:0e:91:de:a1:95:40:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B77BE2FB244F1116EFD02255D7395FA405EED6
        Validity
            Not Before: Mar 27 19:35:21 2024 GMT
            Not After : Mar 26 19:40:21 2025 GMT
        Subject: CN=E19C412B64CE56627890BD2B461C82682A4B098B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:fc:73:69:57:32:d8:e7:27:4f:02:4e:e2:
                    1d:c5:43:fc:9a:5b:e7:e8:f0:30:96:a6:dc:99:8c:
                    0d:74:29:0e:92:51:f7:67:d7:e3:94:a3:56:4d:6a:
                    7b:01:50:6c:69:ab:42:ab:a0:83:5e:6a:2f:6b:31:
                    50:cf:75:67:86:dc:fd:4c:93:e3:fa:e7:c3:54:1a:
                    6e:0e:6c:8a:99:92:9b:a3:13:66:ed:26:a2:8b:53:
                    e3:e0:12:44:b1:ba:a0:7a:25:f2:60:be:a9:1c:83:
                    7e:45:4c:68:e5:44:ea:0a:eb:40:7a:52:7a:4f:85:
                    7d:23:7c:80:85:c5:3b:4e:be:91:47:62:bc:62:cc:
                    5f:8f:1a:fc:79:a0:06:7c:e8:d3:60:d3:38:e8:45:
                    6b:1e:21:4b:1f:fa:de:8b:36:ad:19:c9:35:cc:fb:
                    dd:f8:89:ed:c8:89:42:13:7b:da:c8:8f:71:b0:e6:
                    97:cd:ae:6e:03:67:f0:fa:87:89:74:99:86:90:dc:
                    75:b4:27:6f:1c:fe:1f:8d:4d:19:c3:f7:ea:fc:7e:
                    70:5a:99:df:b9:5d:d2:b8:c9:f5:9a:33:1f:da:b1:
                    bc:3f:ff:39:b1:91:e8:b8:9b:eb:c6:1a:fc:5e:6a:
                    3a:59:3b:fe:e6:34:c5:80:c7:b9:e5:b6:e1:1a:a8:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9C:41:2B:64:CE:56:62:78:90:BD:2B:46:1C:82:68:2A:4B:09:8B
            X509v3 Authority Key Identifier:
                keyid:A5:B7:7B:E2:FB:24:4F:11:16:EF:D0:22:55:D7:39:5F:A4:05:EE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k14.rrdp-rpki.athene-center.net/repo/k14-rpki-athene-center/0/A5B77BE2FB244F1116EFD02255D7395FA405EED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/A5B77BE2FB244F1116EFD02255D7395FA405EED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://k14.rrdp-rpki.athene-center.net/repo/k14-rpki-athene-center/0/3135382e3232302e3134332e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:96:9e:9a:f7:06:e6:da:3d:5b:f8:b6:eb:b0:5c:23:e9:fb:
         95:7c:54:8c:23:ef:dc:60:1b:cf:74:15:34:8b:fc:f0:3e:99:
         ca:0b:bf:d8:7c:07:11:76:14:26:35:2f:6c:bb:68:8c:ea:2b:
         b5:62:93:13:7f:7e:01:64:79:71:10:4c:ff:a4:29:ca:f1:e7:
         54:2f:1c:a7:30:70:1e:ea:9a:c6:37:ce:9a:03:ec:31:61:7e:
         3c:55:ac:89:8f:71:f8:98:e6:49:51:de:ae:5c:07:2e:73:71:
         2f:a7:3f:11:19:db:2f:d0:23:6a:de:6b:e8:24:b7:d4:77:22:
         c7:e2:f7:ed:9b:c6:65:7a:af:cf:07:db:cf:c6:0d:bf:bd:b7:
         26:cf:5c:a3:cd:62:71:54:cf:fa:13:34:d3:b3:71:e3:64:de:
         48:31:c7:ff:32:eb:41:a4:a1:6b:f1:b3:83:34:36:71:53:57:
         6f:08:ec:5e:1a:8f:c7:29:4c:ce:c4:4f:aa:e4:66:a7:2a:d4:
         3d:73:37:af:bd:e2:10:28:eb:31:42:b0:62:bb:4d:41:06:49:
         d8:24:84:e2:72:07:17:04:82:40:e2:5b:ab:d3:2a:e4:8d:db:
         02:26:bb:cd:a4:6e:dd:27:88:2b:78:17:a0:4b:55:5c:e1:83:
         2a:e0:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org