Route Origin Authorization

$ rpki-client -vvf k37.rrdp-rpki.athene-center.net/repo/k37-rpki-athene-center/0/3135382e3232302e3136362e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3136362e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          7w1Rm1LR9X7/bpI3PkdovkzbevnIGSgbb4F4jMJiw4I=
Subject key identifier:   93:0A:F8:FC:89:A7:99:E0:6D:4B:B6:B4:87:E6:BB:8F:B7:9C:46:4D
Certificate issuer:       /CN=62E6F7E28EEACC1E26A7ECD4C3305DED191C1395
Certificate serial:       060EC9557692B58C736DDF81A1CC204B20FCC7A2
Authority key identifier: 62:E6:F7:E2:8E:EA:CC:1E:26:A7:EC:D4:C3:30:5D:ED:19:1C:13:95
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/62E6F7E28EEACC1E26A7ECD4C3305DED191C1395.cer
Subject info access:      rsync://k37.rrdp-rpki.athene-center.net/repo/k37-rpki-athene-center/0/3135382e3232302e3136362e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:44:41 +0000
ROA not before:           Wed 27 Mar 2024 19:39:41 +0000
ROA not after:            Wed 26 Mar 2025 19:44:41 +0000
asID:                     208162
IP address blocks:        158.220.166.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0e:c9:55:76:92:b5:8c:73:6d:df:81:a1:cc:20:4b:20:fc:c7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E6F7E28EEACC1E26A7ECD4C3305DED191C1395
        Validity
            Not Before: Mar 27 19:39:41 2024 GMT
            Not After : Mar 26 19:44:41 2025 GMT
        Subject: CN=930AF8FC89A799E06D4BB6B487E6BB8FB79C464D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:eb:39:9c:ee:36:3d:f0:32:11:d5:39:04:
                    44:97:bd:5f:b7:e1:f0:0f:55:9f:70:2e:64:94:b9:
                    11:bd:34:69:ad:05:af:a0:ec:82:64:f7:3d:45:af:
                    51:25:a1:29:37:5c:a8:8f:a5:73:2e:87:68:32:3c:
                    86:12:6d:f8:64:b5:b7:80:42:75:15:c4:fe:96:e0:
                    40:87:d7:b0:46:87:7c:e4:ce:9f:e2:6a:e6:f4:0b:
                    55:e5:82:9c:2d:40:81:09:8f:b9:1f:40:bc:c5:4d:
                    a7:5f:57:34:8c:e3:05:44:e1:8b:0f:16:d8:e3:bf:
                    e8:46:f8:0d:4d:2f:a9:be:c2:d7:50:84:89:a2:3a:
                    e3:af:e7:90:6a:b7:c9:81:2a:ab:5b:29:ea:59:9f:
                    47:68:cb:e0:ae:8f:79:0a:95:da:97:4b:dd:8d:65:
                    94:aa:1e:ed:88:ce:40:ba:b3:5f:6a:20:7e:21:85:
                    1d:2e:d0:d4:bb:5e:a3:64:a6:ea:39:94:c0:40:74:
                    f8:3c:c9:8d:f1:46:79:0c:5c:87:c9:8a:bf:a7:df:
                    25:d5:fd:3f:e4:f7:0f:56:56:f7:7c:7d:d0:bc:65:
                    f2:80:25:f7:fd:e3:41:aa:46:6e:15:14:63:f1:83:
                    2f:c3:b9:89:83:9d:3e:15:eb:33:1a:bb:a5:a9:12:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0A:F8:FC:89:A7:99:E0:6D:4B:B6:B4:87:E6:BB:8F:B7:9C:46:4D
            X509v3 Authority Key Identifier:
                keyid:62:E6:F7:E2:8E:EA:CC:1E:26:A7:EC:D4:C3:30:5D:ED:19:1C:13:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k37.rrdp-rpki.athene-center.net/repo/k37-rpki-athene-center/0/62E6F7E28EEACC1E26A7ECD4C3305DED191C1395.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/62E6F7E28EEACC1E26A7ECD4C3305DED191C1395.cer

            Subject Information Access:
                Signed Object - URI:rsync://k37.rrdp-rpki.athene-center.net/repo/k37-rpki-athene-center/0/3135382e3232302e3136362e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:73:dd:f8:ed:f3:bf:ae:14:c6:61:64:f1:41:2f:87:19:7f:
         bf:2f:45:6b:34:67:52:91:75:eb:8f:af:09:8a:cb:77:72:9c:
         d9:8c:cd:4c:65:82:ad:60:26:be:4c:e0:37:80:39:a5:81:5f:
         7f:d3:a1:31:26:b5:67:1a:a4:21:c1:62:5a:e7:cb:85:85:be:
         fb:1f:14:1e:0d:c8:37:84:b9:51:09:8c:e0:ca:b9:53:13:f0:
         37:9f:fe:ec:bf:74:e2:a5:cb:70:e0:1f:7a:2e:c9:e1:7b:f3:
         6d:00:d5:06:89:17:a6:55:50:76:d8:6f:a5:5a:aa:2b:fc:06:
         31:43:94:7b:c5:a6:87:db:32:7a:c5:cd:e1:db:e2:e8:46:bf:
         de:ed:38:ca:dc:47:0b:6b:f2:b9:3c:07:49:21:11:10:97:1f:
         06:c0:a4:cc:e2:9e:7f:71:ec:9e:8a:2b:13:2e:0c:f5:a7:b7:
         01:dc:92:70:9e:1c:1c:a4:e3:f9:18:8e:aa:3c:ef:60:ef:00:
         12:2c:57:c0:dd:7c:a0:ef:09:1d:b3:a7:ff:12:ca:2f:ed:63:
         9a:59:dc:09:57:6b:18:ae:53:ce:70:f3:f6:92:8a:0c:83:41:
         66:ba:b5:a1:26:ed:dc:ca:6d:7f:ad:bc:e3:be:fe:ca:35:b9:
         ea:d2:fd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org