Route Origin Authorization

$ rpki-client -vvf k15.rrdp-rpki.athene-center.net/repo/k15-rpki-athene-center/0/3135382e3232302e3134342e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3134342e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          /S7XGI5S7D6LUnOn/hgRmvHrY9KA4Q1enIHVVAtp6Nk=
Subject key identifier:   3C:D6:12:26:F4:3F:A5:96:0B:34:A4:25:EF:40:91:8E:2A:7A:15:F6
Certificate issuer:       /CN=62D5B91EC1AEF128F9ADD1EFA2A1410B49514417
Certificate serial:       35C2A19FC60C3EB5B665A49CDDD22720863581AA
Authority key identifier: 62:D5:B9:1E:C1:AE:F1:28:F9:AD:D1:EF:A2:A1:41:0B:49:51:44:17
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/62D5B91EC1AEF128F9ADD1EFA2A1410B49514417.cer
Subject info access:      rsync://k15.rrdp-rpki.athene-center.net/repo/k15-rpki-athene-center/0/3135382e3232302e3134342e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:40:32 +0000
ROA not before:           Wed 27 Mar 2024 19:35:32 +0000
ROA not after:            Wed 26 Mar 2025 19:40:32 +0000
asID:                     208162
IP address blocks:        158.220.144.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c2:a1:9f:c6:0c:3e:b5:b6:65:a4:9c:dd:d2:27:20:86:35:81:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D5B91EC1AEF128F9ADD1EFA2A1410B49514417
        Validity
            Not Before: Mar 27 19:35:32 2024 GMT
            Not After : Mar 26 19:40:32 2025 GMT
        Subject: CN=3CD61226F43FA5960B34A425EF40918E2A7A15F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:cf:4e:a8:63:22:af:d9:6a:4a:18:66:ea:
                    80:49:6d:df:44:68:ab:58:84:72:cc:3f:54:e9:2d:
                    62:e8:93:9a:c2:79:d4:7c:14:19:88:0d:fa:04:15:
                    4c:b9:6e:32:e8:bc:c7:2e:ba:6f:71:56:1f:3a:c7:
                    8b:1d:5c:56:eb:b6:f5:6b:c7:d9:25:79:d7:ff:fb:
                    e7:93:3b:5a:4e:7d:2f:6b:56:35:69:b0:6a:0c:fd:
                    ce:2f:54:fe:db:8b:02:f7:e6:a0:de:f1:fe:b1:49:
                    8f:07:b2:fc:57:ee:86:d0:10:8c:94:17:c8:2a:82:
                    2b:32:f4:72:eb:80:ce:d2:13:12:86:e9:a8:c5:bf:
                    aa:bf:b8:2f:87:77:a5:8f:0f:58:58:79:df:e3:f1:
                    13:40:8c:4a:23:1a:1e:98:e5:84:2b:02:af:04:90:
                    ce:4a:65:d8:87:a9:7a:84:2c:44:66:fe:ad:16:15:
                    f2:63:42:3c:67:a0:27:61:86:17:2b:fe:82:19:9d:
                    f9:30:c5:92:36:94:50:be:6c:57:1f:c2:b6:13:1c:
                    7a:cb:42:17:60:c2:8a:e7:ac:68:c5:bc:73:f4:09:
                    1c:6e:0e:3c:96:5c:26:36:8b:24:ab:0d:6b:ea:bc:
                    69:87:20:3e:9d:63:52:da:40:f6:16:d6:2e:db:08:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D6:12:26:F4:3F:A5:96:0B:34:A4:25:EF:40:91:8E:2A:7A:15:F6
            X509v3 Authority Key Identifier:
                keyid:62:D5:B9:1E:C1:AE:F1:28:F9:AD:D1:EF:A2:A1:41:0B:49:51:44:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k15.rrdp-rpki.athene-center.net/repo/k15-rpki-athene-center/0/62D5B91EC1AEF128F9ADD1EFA2A1410B49514417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/62D5B91EC1AEF128F9ADD1EFA2A1410B49514417.cer

            Subject Information Access:
                Signed Object - URI:rsync://k15.rrdp-rpki.athene-center.net/repo/k15-rpki-athene-center/0/3135382e3232302e3134342e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:bd:38:d6:78:29:aa:d1:96:2f:73:35:d3:b7:d8:5c:4d:
         81:bb:3e:e2:98:95:1c:86:5b:cd:4f:89:5d:c8:ab:ea:33:39:
         16:03:e1:d8:9e:20:4a:d0:b6:50:b3:af:92:6f:78:88:65:81:
         5a:68:7a:e0:03:61:b2:34:61:03:2d:b6:b0:e4:e6:9f:c5:b8:
         a7:a4:2d:3a:ce:56:a5:e0:8f:71:c0:95:07:a6:b7:7e:9a:0d:
         46:5e:6d:e2:bc:60:0c:1b:f1:c8:1b:bc:2f:0f:e0:e5:c3:56:
         84:af:ce:f0:e9:86:d9:0b:ce:bb:9f:bd:8e:1d:e1:62:6e:f5:
         02:03:c9:61:c3:15:01:80:ba:d3:64:59:af:1b:af:cb:d9:b6:
         1f:44:2b:b1:f7:f8:60:4a:b7:ff:cf:ad:b7:a1:c6:f3:b7:82:
         45:2a:6d:69:62:1d:8e:f8:8b:40:ab:01:00:72:85:70:ab:ae:
         ae:15:ed:b0:d1:c1:d0:e1:54:50:f9:c4:8a:31:85:f8:d6:dc:
         92:21:52:ba:0f:3a:df:7e:da:01:67:43:85:37:8f:3f:9a:67:
         ac:6c:a1:fa:9d:8c:ed:bf:19:d6:b5:15:b1:75:10:67:3b:99:
         70:e8:8e:b1:25:1c:d1:6a:82:68:b7:a6:b0:42:0b:12:a1:51:
         54:f1:fd:46
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNcKhn8YMPrW2ZaSc3dInIIY1gaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJENUI5MUVDMUFFRjEyOEY5QUREMUVGQTJBMTQxMEI0
OTUxNDQxNzAeFw0yNDAzMjcxOTM1MzJaFw0yNTAzMjYxOTQwMzJaMDMxMTAvBgNV
BAMTKDNDRDYxMjI2RjQzRkE1OTYwQjM0QTQyNUVGNDA5MThFMkE3QTE1RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFL89OqGMir9lqShhm6oBJbd9E
aKtYhHLMP1TpLWLok5rCedR8FBmIDfoEFUy5bjLovMcuum9xVh86x4sdXFbrtvVr
x9kledf/++eTO1pOfS9rVjVpsGoM/c4vVP7biwL35qDe8f6xSY8HsvxX7obQEIyU
F8gqgisy9HLrgM7SExKG6ajFv6q/uC+Hd6WPD1hYed/j8RNAjEojGh6Y5YQrAq8E
kM5KZdiHqXqELERm/q0WFfJjQjxnoCdhhhcr/oIZnfkwxZI2lFC+bFcfwrYTHHrL
QhdgwornrGjFvHP0CRxuDjyWXCY2iySrDWvqvGmHID6dY1LaQPYW1i7bCPVhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPNYSJvQ/pZYLNKQl70CRjip6FfYwHwYDVR0j
BBgwFoAUYtW5HsGu8Sj5rdHvoqFBC0lRRBcwDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2sxNS5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rMTUtcnBraS1hdGhlbmUtY2VudGVyLzAvNjJENUI5MUVDMUFF
RjEyOEY5QUREMUVGQTJBMTQxMEI0OTUxNDQxNy5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvNjJENUI5MUVD
MUFFRjEyOEY5QUREMUVGQTJBMTQxMEI0OTUxNDQxNy5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazE1LnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2sxNS1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAntyQMA0GCSqGSIb3DQEBCwUAA4IBAQCRa7041ngp
qtGWL3M107fYXE2Buz7imJUchlvNT4ldyKvqMzkWA+HYniBK0LZQs6+Sb3iIZYFa
aHrgA2GyNGEDLbaw5OafxbinpC06zlal4I9xwJUHprd+mg1GXm3ivGAMG/HIG7wv
D+Dlw1aEr87w6YbZC867n72OHeFibvUCA8lhwxUBgLrTZFmvG6/L2bYfRCux9/hg
Srf/z623ocbzt4JFKm1pYh2O+ItAqwEAcoVwq66uFe2w0cHQ4VRQ+cSKMYX41tyS
IVK6DzrfftoBZ0OFN48/mmesbKH6nYztvxnWtRWxdRBnO5lw6I6xJRzRaoJot6aw
QgsSoVFU8f1G
-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org