Route Origin Authorization

$ rpki-client -vvf k28.rrdp-rpki.athene-center.net/repo/k28-rpki-athene-center/0/3135382e3232302e3135372e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3135372e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          dzP7biuqP46g0ZOofFCk+rkp+Kg89LSkotOQYbGa+wc=
Subject key identifier:   45:5E:8D:F9:0E:FF:09:E1:1E:B3:D7:5F:68:C5:53:4C:7C:E1:89:00
Certificate issuer:       /CN=E3B73906EB979FB832ACD51E3E4C766A0C0E533C
Certificate serial:       2BE88D378CBC8FA2CE3B2A830C0C4BE7D13559A3
Authority key identifier: E3:B7:39:06:EB:97:9F:B8:32:AC:D5:1E:3E:4C:76:6A:0C:0E:53:3C
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E3B73906EB979FB832ACD51E3E4C766A0C0E533C.cer
Subject info access:      rsync://k28.rrdp-rpki.athene-center.net/repo/k28-rpki-athene-center/0/3135382e3232302e3135372e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:42:59 +0000
ROA not before:           Wed 27 Mar 2024 19:37:59 +0000
ROA not after:            Wed 26 Mar 2025 19:42:59 +0000
asID:                     208162
IP address blocks:        158.220.157.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e8:8d:37:8c:bc:8f:a2:ce:3b:2a:83:0c:0c:4b:e7:d1:35:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B73906EB979FB832ACD51E3E4C766A0C0E533C
        Validity
            Not Before: Mar 27 19:37:59 2024 GMT
            Not After : Mar 26 19:42:59 2025 GMT
        Subject: CN=455E8DF90EFF09E11EB3D75F68C5534C7CE18900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:6c:74:c3:5a:3b:31:83:d2:85:20:30:e5:
                    7b:35:ac:23:52:20:69:c3:5b:a9:44:85:a1:95:0e:
                    a7:08:1c:07:cf:63:51:bc:03:11:bd:0f:7d:f6:a3:
                    e3:4a:e1:a2:c9:e1:d2:a9:90:d5:c7:c9:7a:2a:c3:
                    cb:74:e0:67:52:b6:cc:5b:1f:7b:d8:86:de:cd:a8:
                    cd:86:9b:96:55:d5:ad:57:f3:60:92:48:ab:5d:b3:
                    98:81:8f:c1:68:d4:e1:7a:f4:d9:d3:58:fa:53:a0:
                    65:a4:11:f6:8d:34:7b:cd:74:1c:00:e7:bf:2c:fb:
                    1c:c0:02:c6:0d:de:3d:81:27:ce:fd:2b:3d:e9:01:
                    48:08:ff:74:21:cc:cd:1d:2f:26:dc:e5:09:2d:81:
                    f2:9a:bd:ba:30:9f:f3:f0:4c:bb:92:bd:07:c5:39:
                    e6:5b:27:71:26:c2:4a:f5:1e:29:de:3f:7f:6e:51:
                    82:3a:36:b6:da:da:b2:72:88:7d:c4:47:6a:5c:5b:
                    04:3f:36:c4:3d:fb:f0:9f:a1:08:44:9e:d2:50:2d:
                    88:2f:9d:1d:fe:b7:36:fa:16:70:b3:ff:16:37:13:
                    9d:e4:b8:88:a6:14:75:bc:7c:39:86:cf:5d:ef:61:
                    47:40:c9:77:2d:be:f6:6d:b3:47:d3:58:68:54:f0:
                    60:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5E:8D:F9:0E:FF:09:E1:1E:B3:D7:5F:68:C5:53:4C:7C:E1:89:00
            X509v3 Authority Key Identifier:
                keyid:E3:B7:39:06:EB:97:9F:B8:32:AC:D5:1E:3E:4C:76:6A:0C:0E:53:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k28.rrdp-rpki.athene-center.net/repo/k28-rpki-athene-center/0/E3B73906EB979FB832ACD51E3E4C766A0C0E533C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/E3B73906EB979FB832ACD51E3E4C766A0C0E533C.cer

            Subject Information Access:
                Signed Object - URI:rsync://k28.rrdp-rpki.athene-center.net/repo/k28-rpki-athene-center/0/3135382e3232302e3135372e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:91:31:4c:05:58:86:7d:dc:c3:18:3e:0b:4e:43:1b:fe:0a:
         5a:03:37:68:fd:de:d5:f5:51:11:bb:85:0c:74:1a:b8:6c:66:
         94:a1:e4:60:dd:20:81:fd:8d:17:ba:92:69:0d:c0:ed:8f:61:
         94:de:9a:d5:c3:7c:f2:2c:6a:2b:b7:b9:2c:00:f5:35:0e:73:
         87:8d:37:55:b4:f0:3a:7b:3f:01:4e:db:3b:a4:a2:02:01:fe:
         35:d9:53:96:cd:a5:18:34:e3:89:e4:9d:54:4f:08:19:40:8b:
         99:1c:b2:47:2b:58:1b:da:4c:87:76:aa:80:94:bc:6d:0e:77:
         17:d2:3a:04:5d:32:9a:5d:8b:cd:f5:dc:ec:d5:0d:45:4f:c4:
         d9:88:12:64:7a:04:f5:c3:57:0a:07:3d:c8:33:ec:11:4a:98:
         07:b8:93:d9:e4:07:97:7a:dc:6a:d9:a3:b6:b4:36:56:a2:b3:
         d7:64:f3:57:dc:ef:61:ab:ef:2e:ca:40:37:84:99:cc:68:d8:
         47:12:a0:9d:92:03:1d:b7:5a:fa:57:f6:33:72:b9:98:59:2b:
         53:55:d0:1e:4d:39:86:f3:c8:56:fc:ed:81:b3:4a:db:1c:db:
         cd:72:aa:5b:a9:bf:a5:58:67:15:68:24:9a:1a:f6:f7:0d:fa:
         db:5e:d8:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK+iNN4y8j6LOOyqDDAxL59E1WaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNCNzM5MDZFQjk3OUZCODMyQUNENTFFM0U0Qzc2NkEw
QzBFNTMzQzAeFw0yNDAzMjcxOTM3NTlaFw0yNTAzMjYxOTQyNTlaMDMxMTAvBgNV
BAMTKDQ1NUU4REY5MEVGRjA5RTExRUIzRDc1RjY4QzU1MzRDN0NFMTg5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUmx0w1o7MYPShSAw5Xs1rCNS
IGnDW6lEhaGVDqcIHAfPY1G8AxG9D332o+NK4aLJ4dKpkNXHyXoqw8t04GdStsxb
H3vYht7NqM2Gm5ZV1a1X82CSSKtds5iBj8Fo1OF69NnTWPpToGWkEfaNNHvNdBwA
578s+xzAAsYN3j2BJ879Kz3pAUgI/3QhzM0dLybc5QktgfKavbown/PwTLuSvQfF
OeZbJ3Emwkr1HineP39uUYI6Nrba2rJyiH3ER2pcWwQ/NsQ9+/CfoQhEntJQLYgv
nR3+tzb6FnCz/xY3E53kuIimFHW8fDmGz13vYUdAyXctvvZts0fTWGhU8GAbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURV6N+Q7/CeEes9dfaMVTTHzhiQAwHwYDVR0j
BBgwFoAU47c5BuuXn7gyrNUePkx2agwOUzwwDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2syOC5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rMjgtcnBraS1hdGhlbmUtY2VudGVyLzAvRTNCNzM5MDZFQjk3
OUZCODMyQUNENTFFM0U0Qzc2NkEwQzBFNTMzQy5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvRTNCNzM5MDZF
Qjk3OUZCODMyQUNENTFFM0U0Qzc2NkEwQzBFNTMzQy5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazI4LnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2syOC1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAntydMA0GCSqGSIb3DQEBCwUAA4IBAQBikTFMBViG
fdzDGD4LTkMb/gpaAzdo/d7V9VERu4UMdBq4bGaUoeRg3SCB/Y0XupJpDcDtj2GU
3prVw3zyLGort7ksAPU1DnOHjTdVtPA6ez8BTts7pKICAf412VOWzaUYNOOJ5J1U
TwgZQIuZHLJHK1gb2kyHdqqAlLxtDncX0joEXTKaXYvN9dzs1Q1FT8TZiBJkegT1
w1cKBz3IM+wRSpgHuJPZ5AeXetxq2aO2tDZWorPXZPNX3O9hq+8uykA3hJnMaNhH
EqCdkgMdt1r6V/YzcrmYWStTVdAeTTmG88hW/O2Bs0rbHNvNcqpbqb+lWGcVaCSa
Gvb3DfrbXthE
-----END CERTIFICATE-----
Generated at Thu Apr 4 00:12:54 2024 by rpki-client on console-ams.rpki-client.org