Route Origin Authorization

$ rpki-client -vvf k27.rrdp-rpki.athene-center.net/repo/k27-rpki-athene-center/0/3135382e3232302e3135362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          RcPFlsm4XETxvx4eN8LWmInoHlO5WYHVe9q9yxJijVc=
Subject key identifier:   A5:A2:D3:F5:0F:89:26:0E:7F:D1:B4:A4:CC:BC:BD:60:BF:89:B7:0F
Certificate issuer:       /CN=7B4CAEE6D3519824B06D3180C497DF34876780E4
Certificate serial:       25C6037688859CBB800BA35C08537C4940A814EC
Authority key identifier: 7B:4C:AE:E6:D3:51:98:24:B0:6D:31:80:C4:97:DF:34:87:67:80:E4
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/7B4CAEE6D3519824B06D3180C497DF34876780E4.cer
Subject info access:      rsync://k27.rrdp-rpki.athene-center.net/repo/k27-rpki-athene-center/0/3135382e3232302e3135362e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:42:48 +0000
ROA not before:           Wed 27 Mar 2024 19:37:48 +0000
ROA not after:            Wed 26 Mar 2025 19:42:48 +0000
asID:                     208162
IP address blocks:        158.220.156.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c6:03:76:88:85:9c:bb:80:0b:a3:5c:08:53:7c:49:40:a8:14:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B4CAEE6D3519824B06D3180C497DF34876780E4
        Validity
            Not Before: Mar 27 19:37:48 2024 GMT
            Not After : Mar 26 19:42:48 2025 GMT
        Subject: CN=A5A2D3F50F89260E7FD1B4A4CCBCBD60BF89B70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:06:00:86:92:7b:32:ac:8b:4d:f8:36:63:
                    25:6f:35:6c:f3:72:85:e5:7b:38:2d:26:ef:38:0f:
                    19:81:9b:8e:56:57:6f:c7:25:7c:9e:f9:9f:c8:12:
                    52:30:66:2b:c7:84:e4:14:fb:8f:13:04:1a:23:5f:
                    68:75:3a:6e:7d:85:69:66:9a:6f:88:c1:79:0e:2c:
                    a7:7f:3d:61:c2:28:37:34:c3:df:26:cf:e4:23:2a:
                    dd:08:b6:20:00:55:f8:bf:4e:f5:e1:20:11:2d:c9:
                    76:20:01:8d:bf:db:ac:22:ab:5c:5b:54:0c:a1:a1:
                    36:bc:45:10:77:76:50:c9:69:e4:91:54:9e:55:06:
                    51:da:0b:dc:e3:d4:5b:b4:5d:47:f2:6c:77:34:59:
                    f9:ac:15:96:b3:6b:53:c4:2f:68:ab:ca:33:71:c5:
                    60:4f:33:74:b8:9e:8e:1b:c1:d0:51:f9:b8:6a:8c:
                    12:a3:ec:e6:0a:6f:85:65:89:12:00:00:82:68:e0:
                    cd:2c:73:3b:7b:5a:79:72:78:f7:93:64:49:6b:95:
                    c7:34:76:d2:0f:4f:f9:67:57:20:8a:6b:bb:4d:80:
                    8b:34:07:42:ff:e5:d0:bc:dd:14:f9:10:0b:3b:9e:
                    33:01:d9:53:74:48:82:95:a4:14:2a:19:f8:ec:63:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A2:D3:F5:0F:89:26:0E:7F:D1:B4:A4:CC:BC:BD:60:BF:89:B7:0F
            X509v3 Authority Key Identifier:
                keyid:7B:4C:AE:E6:D3:51:98:24:B0:6D:31:80:C4:97:DF:34:87:67:80:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k27.rrdp-rpki.athene-center.net/repo/k27-rpki-athene-center/0/7B4CAEE6D3519824B06D3180C497DF34876780E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/7B4CAEE6D3519824B06D3180C497DF34876780E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://k27.rrdp-rpki.athene-center.net/repo/k27-rpki-athene-center/0/3135382e3232302e3135362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:ee:18:da:6f:17:fa:ec:ea:e7:0f:65:11:08:8d:1f:f6:
         7e:52:a2:55:2e:28:b3:a9:bf:a6:bc:4c:ec:fb:bb:99:3c:f0:
         14:ba:a6:18:93:0d:69:f2:a5:14:9d:e7:1a:e0:c3:b8:37:e5:
         bb:11:dc:88:a3:59:84:99:89:35:f6:b4:fa:02:d9:99:44:75:
         80:99:79:b5:a2:67:b0:44:41:cc:8c:67:75:67:f5:d2:df:ef:
         7c:e5:a6:5c:36:ae:d3:06:14:aa:0a:ce:dc:f1:6b:3b:72:e3:
         77:22:b4:ce:e7:98:83:06:25:a0:be:5f:ae:99:d3:64:74:a7:
         2f:fb:d1:c7:78:2e:9a:e6:e5:00:cc:55:1a:85:d9:39:52:78:
         b7:65:3c:a6:15:77:db:cf:d0:58:5a:a5:bc:ef:3a:9a:bb:f2:
         39:6a:30:f5:97:6d:a3:df:71:62:2e:7f:37:99:49:be:72:39:
         47:b4:f8:54:28:06:3d:2d:ee:d2:c7:33:cd:b7:75:93:2d:ca:
         5d:a7:19:e9:2e:c5:c7:3e:dd:42:5d:7b:73:7d:df:4c:5b:60:
         71:78:03:3e:46:82:b7:68:a4:c7:08:f5:3e:1f:43:da:e3:89:
         c8:3e:6d:2a:ea:31:77:32:67:ee:6d:80:3a:cb:87:52:27:61:
         0d:eb:f7:3e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJcYDdoiFnLuAC6NcCFN8SUCoFOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I0Q0FFRTZEMzUxOTgyNEIwNkQzMTgwQzQ5N0RGMzQ4
NzY3ODBFNDAeFw0yNDAzMjcxOTM3NDhaFw0yNTAzMjYxOTQyNDhaMDMxMTAvBgNV
BAMTKEE1QTJEM0Y1MEY4OTI2MEU3RkQxQjRBNENDQkNCRDYwQkY4OUI3MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfQYAhpJ7MqyLTfg2YyVvNWzz
coXlezgtJu84DxmBm45WV2/HJXye+Z/IElIwZivHhOQU+48TBBojX2h1Om59hWlm
mm+IwXkOLKd/PWHCKDc0w98mz+QjKt0ItiAAVfi/TvXhIBEtyXYgAY2/26wiq1xb
VAyhoTa8RRB3dlDJaeSRVJ5VBlHaC9zj1Fu0XUfybHc0WfmsFZaza1PEL2iryjNx
xWBPM3S4no4bwdBR+bhqjBKj7OYKb4VliRIAAIJo4M0sczt7WnlyePeTZElrlcc0
dtIPT/lnVyCKa7tNgIs0B0L/5dC83RT5EAs7njMB2VN0SIKVpBQqGfjsY+V3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpaLT9Q+JJg5/0bSkzLy9YL+Jtw8wHwYDVR0j
BBgwFoAUe0yu5tNRmCSwbTGAxJffNIdngOQwDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2syNy5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rMjctcnBraS1hdGhlbmUtY2VudGVyLzAvN0I0Q0FFRTZEMzUx
OTgyNEIwNkQzMTgwQzQ5N0RGMzQ4NzY3ODBFNC5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvN0I0Q0FFRTZE
MzUxOTgyNEIwNkQzMTgwQzQ5N0RGMzQ4NzY3ODBFNC5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazI3LnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2syNy1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzNTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAntycMA0GCSqGSIb3DQEBCwUAA4IBAQA9cu4Y2m8X
+uzq5w9lEQiNH/Z+UqJVLiizqb+mvEzs+7uZPPAUuqYYkw1p8qUUneca4MO4N+W7
EdyIo1mEmYk19rT6AtmZRHWAmXm1omewREHMjGd1Z/XS3+985aZcNq7TBhSqCs7c
8Ws7cuN3IrTO55iDBiWgvl+umdNkdKcv+9HHeC6a5uUAzFUahdk5Uni3ZTymFXfb
z9BYWqW87zqau/I5ajD1l22j33FiLn83mUm+cjlHtPhUKAY9Le7SxzPNt3WTLcpd
pxnpLsXHPt1CXXtzfd9MW2BxeAM+RoK3aKTHCPU+H0Pa44nIPm0q6jF3MmfubYA6
y4dSJ2EN6/c+
-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org