Route Origin Authorization

$ rpki-client -vvf k46.rrdp-rpki.athene-center.net/repo/k46-rpki-athene-center/0/3135382e3232302e3137352e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3137352e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          JPe1fvuIJ7EpTXMpvXO5PAuc+lxQXLUgaS2ncdUTZnc=
Subject key identifier:   8F:46:0B:4A:68:DB:4E:E4:E0:3A:1C:11:A9:62:85:CA:7A:2D:82:EE
Certificate issuer:       /CN=3BB18C98AF856E8F66AC89B8514E30DFECF88C61
Certificate serial:       4DE5583AF18AB22647A8B43D9F97BD05E288859E
Authority key identifier: 3B:B1:8C:98:AF:85:6E:8F:66:AC:89:B8:51:4E:30:DF:EC:F8:8C:61
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3BB18C98AF856E8F66AC89B8514E30DFECF88C61.cer
Subject info access:      rsync://k46.rrdp-rpki.athene-center.net/repo/k46-rpki-athene-center/0/3135382e3232302e3137352e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:46:22 +0000
ROA not before:           Wed 27 Mar 2024 19:41:22 +0000
ROA not after:            Wed 26 Mar 2025 19:46:22 +0000
asID:                     208162
IP address blocks:        158.220.175.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e5:58:3a:f1:8a:b2:26:47:a8:b4:3d:9f:97:bd:05:e2:88:85:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BB18C98AF856E8F66AC89B8514E30DFECF88C61
        Validity
            Not Before: Mar 27 19:41:22 2024 GMT
            Not After : Mar 26 19:46:22 2025 GMT
        Subject: CN=8F460B4A68DB4EE4E03A1C11A96285CA7A2D82EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:1c:e3:98:c2:d5:a3:11:11:56:8c:c1:42:
                    f0:d5:e9:ff:74:1a:b5:62:b5:c7:56:56:d5:b3:b0:
                    17:0e:ae:93:a5:49:c0:82:8a:3d:b1:7a:80:cd:0d:
                    60:58:90:7f:b6:c8:11:7e:ae:4f:a5:0e:b5:22:71:
                    5d:45:93:fb:39:fc:82:46:85:35:d0:c2:42:22:e3:
                    2d:57:72:4d:98:66:d6:b0:6a:1c:a0:16:02:fc:b0:
                    34:39:f2:60:40:96:96:94:ad:78:74:7e:5d:e7:a2:
                    fc:bd:f4:71:8e:8d:23:e1:09:04:83:e8:4f:ee:ab:
                    15:5c:2c:76:2a:68:f9:4e:95:f2:8b:7d:aa:8b:83:
                    fb:6f:0c:10:34:f5:24:3f:1f:1f:16:ad:32:aa:28:
                    0b:7b:00:95:ce:a9:7c:ea:a0:cb:c5:9f:07:a1:1a:
                    85:9f:dd:44:15:53:47:9d:1f:d4:4b:96:c8:f6:c8:
                    cb:1e:58:71:86:b7:1a:f4:d7:f4:5f:d3:ac:0c:51:
                    6c:99:1a:aa:b8:6c:01:3e:01:41:9f:77:1e:af:6b:
                    de:54:23:32:c0:5e:ff:72:f9:cb:a0:11:fe:73:23:
                    0b:fa:e1:05:61:29:a2:50:5e:32:f2:eb:8a:0f:8f:
                    33:2b:92:58:14:20:5d:f3:27:69:3a:2d:6c:c5:f6:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:46:0B:4A:68:DB:4E:E4:E0:3A:1C:11:A9:62:85:CA:7A:2D:82:EE
            X509v3 Authority Key Identifier:
                keyid:3B:B1:8C:98:AF:85:6E:8F:66:AC:89:B8:51:4E:30:DF:EC:F8:8C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k46.rrdp-rpki.athene-center.net/repo/k46-rpki-athene-center/0/3BB18C98AF856E8F66AC89B8514E30DFECF88C61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/3BB18C98AF856E8F66AC89B8514E30DFECF88C61.cer

            Subject Information Access:
                Signed Object - URI:rsync://k46.rrdp-rpki.athene-center.net/repo/k46-rpki-athene-center/0/3135382e3232302e3137352e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:e4:dd:cc:ba:18:9c:8e:c4:ef:81:6b:b1:71:c5:51:51:5a:
         96:e0:59:cd:57:28:a2:94:c3:bc:b1:ce:5a:7b:ef:1e:f9:d6:
         92:0a:7b:02:c9:27:68:6a:3c:b2:df:03:e7:16:a1:4a:6c:e6:
         25:cc:55:92:80:02:2f:d5:d3:98:fc:11:aa:ba:58:91:82:ed:
         63:7d:f4:0a:fe:ef:5c:64:63:c7:0d:22:88:de:fb:ef:93:a8:
         c6:9e:61:83:b1:2c:e5:ad:21:2c:70:3f:5e:41:81:a6:77:3f:
         27:10:e8:a2:ae:ba:1f:02:50:52:c0:ba:b6:88:d8:80:46:6c:
         4c:1e:e0:3f:83:c8:a0:cd:05:bf:0e:59:1d:05:1d:ff:89:c0:
         af:dc:74:63:ac:fd:d3:a2:c5:b1:92:77:59:47:e8:8e:b1:c5:
         13:2f:bf:fc:0a:90:e6:fa:8a:81:5a:6a:8f:16:e4:c0:23:bf:
         b0:a8:86:d9:ff:48:95:f7:19:fe:08:29:ab:6c:63:77:38:ce:
         54:4c:dc:52:b7:09:dd:5c:68:46:48:10:a3:e6:07:4f:76:76:
         8d:bd:92:c2:4a:70:ec:cc:b7:a9:f5:df:0f:61:61:c6:e0:41:
         d0:2e:7a:cc:db:34:97:ff:ed:fd:56:70:c0:6b:6d:42:12:66:
         57:df:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:24:03 2024 by rpki-client on console-ams.rpki-client.org