Route Origin Authorization

$ rpki-client -vvf k26.rrdp-rpki.athene-center.net/repo/k26-rpki-athene-center/0/3135382e3232302e3135352e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135352e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          fVHNps4PcEh4TM0NVdupk7zxQuT7dAGtwIO2fKHewIg=
Subject key identifier:   EE:BF:13:14:2C:31:54:3E:FE:5F:9A:CE:54:27:20:75:BF:EA:51:51
Certificate issuer:       /CN=422DF6FABD1EC5A43840B97C8720C2054EB7053B
Certificate serial:       0FCAF3D06DBFCB96BF0DF2C0AE1F1DA4A5721851
Authority key identifier: 42:2D:F6:FA:BD:1E:C5:A4:38:40:B9:7C:87:20:C2:05:4E:B7:05:3B
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/422DF6FABD1EC5A43840B97C8720C2054EB7053B.cer
Subject info access:      rsync://k26.rrdp-rpki.athene-center.net/repo/k26-rpki-athene-center/0/3135382e3232302e3135352e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:42:36 +0000
ROA not before:           Wed 27 Mar 2024 19:37:36 +0000
ROA not after:            Wed 26 Mar 2025 19:42:36 +0000
asID:                     208162
IP address blocks:        158.220.155.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ca:f3:d0:6d:bf:cb:96:bf:0d:f2:c0:ae:1f:1d:a4:a5:72:18:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422DF6FABD1EC5A43840B97C8720C2054EB7053B
        Validity
            Not Before: Mar 27 19:37:36 2024 GMT
            Not After : Mar 26 19:42:36 2025 GMT
        Subject: CN=EEBF13142C31543EFE5F9ACE54272075BFEA5151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:a1:4a:b5:50:4f:ed:d4:c7:ba:8a:10:17:
                    1c:eb:8a:58:74:54:ff:05:b6:4a:4a:36:36:4a:71:
                    b3:bc:ca:58:0e:21:13:13:34:d7:fe:4f:0c:4b:bf:
                    f0:cd:18:2e:bf:c9:d3:db:61:7d:e3:b9:9d:01:bd:
                    9e:14:51:b7:5b:ea:0e:1c:5d:22:3b:8b:c1:e1:d6:
                    02:42:af:41:fd:e5:ef:e0:62:e7:ad:ac:34:1e:ef:
                    2b:4f:33:1d:3b:e9:12:28:3f:c4:d0:f9:46:a2:c2:
                    a0:42:50:ff:d5:e5:a7:6a:ce:67:c4:00:38:65:1a:
                    16:e7:f4:09:ab:27:5a:13:5a:9f:10:a9:22:4b:e8:
                    2c:c0:b6:8c:75:ac:9c:ba:99:fe:f4:bf:d2:91:18:
                    32:65:b7:79:4b:54:e4:a7:b8:bb:f0:7f:2f:cc:5c:
                    8e:26:89:a9:71:1e:5d:88:7f:d8:f6:b2:e6:2b:17:
                    ab:1f:e1:48:4d:ef:97:53:83:22:c7:9d:77:01:bd:
                    c3:da:9a:f3:17:1e:33:20:ff:75:21:94:c1:d9:f3:
                    71:85:e9:1a:4a:34:02:d2:29:c5:bf:ab:c6:49:5e:
                    46:ef:23:1c:49:4a:a7:eb:cf:09:21:d7:cb:3e:cc:
                    67:21:0a:12:48:4e:b7:e8:0d:a2:4c:50:f8:0c:35:
                    7f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BF:13:14:2C:31:54:3E:FE:5F:9A:CE:54:27:20:75:BF:EA:51:51
            X509v3 Authority Key Identifier:
                keyid:42:2D:F6:FA:BD:1E:C5:A4:38:40:B9:7C:87:20:C2:05:4E:B7:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k26.rrdp-rpki.athene-center.net/repo/k26-rpki-athene-center/0/422DF6FABD1EC5A43840B97C8720C2054EB7053B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/422DF6FABD1EC5A43840B97C8720C2054EB7053B.cer

            Subject Information Access:
                Signed Object - URI:rsync://k26.rrdp-rpki.athene-center.net/repo/k26-rpki-athene-center/0/3135382e3232302e3135352e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:32:59:3a:c6:12:df:36:fb:21:a2:bc:92:d2:82:28:26:
         a0:a7:54:9d:47:77:c2:4f:36:5a:91:45:d8:8b:da:1e:db:16:
         18:e5:7c:82:51:9e:56:8d:de:d3:86:a7:3f:1e:9e:82:95:4a:
         bc:0c:78:4b:80:c9:e3:ee:f3:68:ab:3e:67:2f:68:6f:89:78:
         45:e7:26:03:cd:94:79:67:a2:a3:cf:d6:1c:f6:5c:b1:c4:73:
         bb:05:7a:cc:82:23:a1:44:01:8a:5b:db:21:dc:e0:51:25:75:
         2e:c7:20:be:28:30:58:39:02:d1:03:91:ef:cd:85:af:fe:db:
         35:5e:ac:7c:dd:79:83:c5:a4:a2:6c:a7:7c:85:2b:04:5e:db:
         6c:33:c3:73:76:b6:6e:03:8c:87:45:13:4c:ae:36:4d:60:aa:
         5d:e4:07:a3:f0:5d:64:45:0e:62:99:6d:c3:09:a7:0e:3c:2c:
         db:96:5e:a4:8c:79:4d:9a:28:b9:eb:29:77:16:f8:6c:0a:04:
         63:2c:9e:5d:f8:c0:ea:2b:b3:a2:6c:78:06:4e:d5:d8:6e:17:
         b9:14:98:f5:2b:48:2c:62:e8:77:c2:13:2e:d5:1e:8f:ee:74:
         55:67:ab:14:63:8a:95:e1:c7:ef:58:f7:6e:c8:91:1b:03:11:
         35:66:f9:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD8rz0G2/y5a/DfLArh8dpKVyGFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIyREY2RkFCRDFFQzVBNDM4NDBCOTdDODcyMEMyMDU0
RUI3MDUzQjAeFw0yNDAzMjcxOTM3MzZaFw0yNTAzMjYxOTQyMzZaMDMxMTAvBgNV
BAMTKEVFQkYxMzE0MkMzMTU0M0VGRTVGOUFDRTU0MjcyMDc1QkZFQTUxNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgKFKtVBP7dTHuooQFxzrilh0
VP8FtkpKNjZKcbO8ylgOIRMTNNf+TwxLv/DNGC6/ydPbYX3juZ0BvZ4UUbdb6g4c
XSI7i8Hh1gJCr0H95e/gYuetrDQe7ytPMx076RIoP8TQ+UaiwqBCUP/V5adqzmfE
ADhlGhbn9AmrJ1oTWp8QqSJL6CzAtox1rJy6mf70v9KRGDJlt3lLVOSnuLvwfy/M
XI4mialxHl2If9j2suYrF6sf4UhN75dTgyLHnXcBvcPamvMXHjMg/3UhlMHZ83GF
6RpKNALSKcW/q8ZJXkbvIxxJSqfrzwkh18s+zGchChJITrfoDaJMUPgMNX+pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7r8TFCwxVD7+X5rOVCcgdb/qUVEwHwYDVR0j
BBgwFoAUQi32+r0exaQ4QLl8hyDCBU63BTswDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2syNi5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rMjYtcnBraS1hdGhlbmUtY2VudGVyLzAvNDIyREY2RkFCRDFF
QzVBNDM4NDBCOTdDODcyMEMyMDU0RUI3MDUzQi5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvNDIyREY2RkFC
RDFFQzVBNDM4NDBCOTdDODcyMEMyMDU0RUI3MDUzQi5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazI2LnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2syNi1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAntybMA0GCSqGSIb3DQEBCwUAA4IBAQAw5TJZOsYS
3zb7IaK8ktKCKCagp1SdR3fCTzZakUXYi9oe2xYY5XyCUZ5Wjd7Thqc/Hp6ClUq8
DHhLgMnj7vNoqz5nL2hviXhF5yYDzZR5Z6Kjz9Yc9lyxxHO7BXrMgiOhRAGKW9sh
3OBRJXUuxyC+KDBYOQLRA5HvzYWv/ts1Xqx83XmDxaSibKd8hSsEXttsM8NzdrZu
A4yHRRNMrjZNYKpd5Aej8F1kRQ5imW3DCacOPCzbll6kjHlNmii56yl3FvhsCgRj
LJ5d+MDqK7OibHgGTtXYbhe5FJj1K0gsYuh3whMu1R6P7nRVZ6sUY4qV4cfvWPdu
yJEbAxE1ZvlR
-----END CERTIFICATE-----
Generated at Wed Apr 3 19:36:02 2024 by rpki-client on console-ams.rpki-client.org