Route Origin Authorization

$ rpki-client -vvf k21.rrdp-rpki.athene-center.net/repo/k21-rpki-athene-center/0/3135382e3232302e3135302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          7qCDgiN0W8p0tUH2VeR3xEo3hfnJ9bgK/6spYd0/9ew=
Subject key identifier:   7A:B3:48:87:00:9F:07:75:A8:04:15:D4:CF:B9:EF:7B:49:57:1E:1D
Certificate issuer:       /CN=53E6A7311D8C1131EBD2FCA37E3C27958ED99D5B
Certificate serial:       4E9445002C78E62A885968B3E4C3C7A52A48593F
Authority key identifier: 53:E6:A7:31:1D:8C:11:31:EB:D2:FC:A3:7E:3C:27:95:8E:D9:9D:5B
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/53E6A7311D8C1131EBD2FCA37E3C27958ED99D5B.cer
Subject info access:      rsync://k21.rrdp-rpki.athene-center.net/repo/k21-rpki-athene-center/0/3135382e3232302e3135302e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:41:40 +0000
ROA not before:           Wed 27 Mar 2024 19:36:40 +0000
ROA not after:            Wed 26 Mar 2025 19:41:40 +0000
asID:                     208162
IP address blocks:        158.220.150.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:94:45:00:2c:78:e6:2a:88:59:68:b3:e4:c3:c7:a5:2a:48:59:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53E6A7311D8C1131EBD2FCA37E3C27958ED99D5B
        Validity
            Not Before: Mar 27 19:36:40 2024 GMT
            Not After : Mar 26 19:41:40 2025 GMT
        Subject: CN=7AB34887009F0775A80415D4CFB9EF7B49571E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ed:c8:b8:43:de:8f:c7:0e:03:bc:60:40:ea:
                    e0:b7:85:02:1d:98:7f:8b:b5:c5:b5:b7:fa:76:f1:
                    70:32:00:16:cd:11:8a:e2:d7:62:3b:19:84:8e:2e:
                    88:eb:7f:9b:54:f1:45:58:f9:77:3d:10:70:ac:9e:
                    8e:5f:ba:b9:22:d0:41:62:fd:dd:f8:d2:ad:38:ae:
                    67:e3:56:c7:e6:c8:f4:85:19:bf:b8:f1:f3:0a:64:
                    f5:85:85:da:e7:6b:d1:b3:a8:b1:65:d3:c8:6f:9e:
                    0a:ef:76:27:79:c2:b6:75:98:ae:71:4b:17:74:82:
                    44:3d:6a:f8:72:06:f0:95:c2:11:8f:fa:10:e6:16:
                    7e:db:74:53:f2:a2:06:7f:fb:fb:69:4d:7c:d1:34:
                    65:21:60:14:83:1f:41:40:b5:67:69:60:1b:68:a1:
                    27:d6:e7:81:01:63:a7:23:79:b8:8b:57:a4:19:52:
                    1c:78:db:43:3f:56:c0:9c:5d:b8:d4:a0:52:64:68:
                    12:dd:6a:c9:15:32:36:41:d4:99:c4:8c:1c:2b:93:
                    8c:5d:7d:97:1e:48:8d:82:0a:96:97:8c:fc:a1:bf:
                    1a:b4:17:67:7b:95:8b:27:52:ed:36:b5:0e:7b:bd:
                    c7:13:5d:1a:ed:33:7c:0f:7f:c6:3b:a2:f0:48:41:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B3:48:87:00:9F:07:75:A8:04:15:D4:CF:B9:EF:7B:49:57:1E:1D
            X509v3 Authority Key Identifier:
                keyid:53:E6:A7:31:1D:8C:11:31:EB:D2:FC:A3:7E:3C:27:95:8E:D9:9D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k21.rrdp-rpki.athene-center.net/repo/k21-rpki-athene-center/0/53E6A7311D8C1131EBD2FCA37E3C27958ED99D5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/53E6A7311D8C1131EBD2FCA37E3C27958ED99D5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://k21.rrdp-rpki.athene-center.net/repo/k21-rpki-athene-center/0/3135382e3232302e3135302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:91:c6:b7:4b:f9:19:4d:66:43:95:cb:b0:e9:81:83:1a:c9:
         b5:ab:2c:37:68:45:70:46:cd:32:2f:e6:a7:72:a5:b6:58:8e:
         2f:13:4a:05:ff:14:14:e1:99:8a:aa:0f:a6:58:38:2b:9f:e3:
         07:d1:02:b9:fa:cd:c0:83:d7:55:dd:89:38:5d:06:25:05:74:
         59:f2:ec:59:4c:75:99:d8:e2:6c:de:40:b6:11:bb:b4:be:69:
         4f:f4:d4:00:0a:50:6f:a5:45:40:e2:c1:db:34:c1:db:ec:ae:
         30:3f:f0:22:33:c2:3c:dd:f4:39:34:d7:4a:24:46:3c:32:08:
         01:7b:9a:65:e4:60:51:16:e5:6c:e4:f3:cd:a7:af:7c:6a:88:
         47:a7:e4:8a:5a:81:36:20:2a:7d:0a:22:1a:c6:d6:e8:e4:ad:
         8d:69:43:6c:b6:a4:f8:08:b7:d3:a7:1e:8d:77:4e:30:0f:56:
         e0:8f:f0:8a:2f:20:8e:c4:26:10:89:71:33:a0:4e:da:5f:c1:
         61:1f:2f:a0:04:00:d4:99:48:9f:f5:07:85:24:f6:57:bd:42:
         22:0b:e7:5b:a8:45:aa:f0:32:2b:93:82:8c:c8:ee:b1:fd:31:
         dc:cb:20:19:e1:9c:d7:28:b6:05:bb:b5:1e:b0:4f:b5:95:4d:
         22:7a:a6:85
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTpRFACx45iqIWWiz5MPHpSpIWT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNFNkE3MzExRDhDMTEzMUVCRDJGQ0EzN0UzQzI3OTU4
RUQ5OUQ1QjAeFw0yNDAzMjcxOTM2NDBaFw0yNTAzMjYxOTQxNDBaMDMxMTAvBgNV
BAMTKDdBQjM0ODg3MDA5RjA3NzVBODA0MTVENENGQjlFRjdCNDk1NzFFMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV7ci4Q96Pxw4DvGBA6uC3hQId
mH+LtcW1t/p28XAyABbNEYri12I7GYSOLojrf5tU8UVY+Xc9EHCsno5furki0EFi
/d340q04rmfjVsfmyPSFGb+48fMKZPWFhdrna9GzqLFl08hvngrvdid5wrZ1mK5x
Sxd0gkQ9avhyBvCVwhGP+hDmFn7bdFPyogZ/+/tpTXzRNGUhYBSDH0FAtWdpYBto
oSfW54EBY6cjebiLV6QZUhx420M/VsCcXbjUoFJkaBLdaskVMjZB1JnEjBwrk4xd
fZceSI2CCpaXjPyhvxq0F2d7lYsnUu02tQ57vccTXRrtM3wPf8Y7ovBIQZTJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUerNIhwCfB3WoBBXUz7nve0lXHh0wHwYDVR0j
BBgwFoAUU+anMR2METHr0vyjfjwnlY7ZnVswDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2syMS5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rMjEtcnBraS1hdGhlbmUtY2VudGVyLzAvNTNFNkE3MzExRDhD
MTEzMUVCRDJGQ0EzN0UzQzI3OTU4RUQ5OUQ1Qi5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvNTNFNkE3MzEx
RDhDMTEzMUVCRDJGQ0EzN0UzQzI3OTU4RUQ5OUQ1Qi5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazIxLnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2syMS1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAntyWMA0GCSqGSIb3DQEBCwUAA4IBAQCWkca3S/kZ
TWZDlcuw6YGDGsm1qyw3aEVwRs0yL+ancqW2WI4vE0oF/xQU4ZmKqg+mWDgrn+MH
0QK5+s3Ag9dV3Yk4XQYlBXRZ8uxZTHWZ2OJs3kC2Ebu0vmlP9NQAClBvpUVA4sHb
NMHb7K4wP/AiM8I83fQ5NNdKJEY8MggBe5pl5GBRFuVs5PPNp698aohHp+SKWoE2
ICp9CiIaxtbo5K2NaUNstqT4CLfTpx6Nd04wD1bgj/CKLyCOxCYQiXEzoE7aX8Fh
Hy+gBADUmUif9QeFJPZXvUIiC+dbqEWq8DIrk4KMyO6x/THcyyAZ4ZzXKLYFu7Ue
sE+1lU0ieqaF
-----END CERTIFICATE-----
Generated at Wed Apr 3 22:21:52 2024 by rpki-client on console-ams.rpki-client.org