Route Origin Authorization

$ rpki-client -vvf k51.rrdp-rpki.athene-center.net/repo/k51-rpki-athene-center/0/3135382e3232302e3138302e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3138302e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          /5ZXeEekF5XZbBVc5Pc8btkKmYkAqdyd7XAcZRlVVVw=
Subject key identifier:   C8:89:58:62:7D:0E:00:DB:E6:DE:E5:22:F1:C5:B3:8B:7D:99:16:0E
Certificate issuer:       /CN=79E8F6BCDF63E4737CFA32C771CD94FFEBC44EE2
Certificate serial:       6E988778A8EEC04E780718C1698FC639CB504BA0
Authority key identifier: 79:E8:F6:BC:DF:63:E4:73:7C:FA:32:C7:71:CD:94:FF:EB:C4:4E:E2
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/79E8F6BCDF63E4737CFA32C771CD94FFEBC44EE2.cer
Subject info access:      rsync://k51.rrdp-rpki.athene-center.net/repo/k51-rpki-athene-center/0/3135382e3232302e3138302e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:47:19 +0000
ROA not before:           Wed 27 Mar 2024 19:42:19 +0000
ROA not after:            Wed 26 Mar 2025 19:47:19 +0000
asID:                     208162
IP address blocks:        158.220.180.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:98:87:78:a8:ee:c0:4e:78:07:18:c1:69:8f:c6:39:cb:50:4b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E8F6BCDF63E4737CFA32C771CD94FFEBC44EE2
        Validity
            Not Before: Mar 27 19:42:19 2024 GMT
            Not After : Mar 26 19:47:19 2025 GMT
        Subject: CN=C88958627D0E00DBE6DEE522F1C5B38B7D99160E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:a8:ff:6c:e0:ad:20:0f:5f:5f:3b:45:e5:
                    0d:ce:c8:48:bd:aa:6f:88:68:35:5b:d0:4a:5c:d0:
                    75:40:c6:b9:a5:ba:0c:0c:88:28:f0:19:2b:c4:ae:
                    90:68:7d:df:ce:47:ce:e7:0a:47:e5:17:2a:a6:db:
                    14:a1:ff:c2:84:09:03:b9:ad:3c:8a:ae:8b:6b:70:
                    0a:73:b2:3f:61:8b:53:ea:ff:ed:f6:b2:f1:9e:a3:
                    44:69:b5:07:40:61:9d:c7:83:72:83:cf:57:91:8d:
                    62:2b:09:96:0a:78:81:b9:3c:87:d0:15:79:1a:e4:
                    33:b2:9c:93:37:50:ea:2f:95:c2:93:55:96:19:70:
                    e3:29:28:b6:19:dc:7d:5b:66:ea:ed:f0:37:44:99:
                    30:40:cb:28:d0:7b:f8:41:eb:94:a8:8a:dc:36:07:
                    a4:ab:2f:5d:19:f1:4e:c8:f8:90:0b:87:96:57:94:
                    a7:a7:4f:e6:49:5b:4f:25:6f:d5:2c:f2:92:f5:ab:
                    8e:20:60:39:54:2c:1f:f9:58:8c:56:1a:0d:03:12:
                    b5:ab:f5:5f:6e:b4:e6:ef:f1:4e:ca:f5:ea:6e:d8:
                    e6:9a:f3:b5:f5:46:d3:4c:e3:1b:d3:2a:b2:7b:f4:
                    31:e8:e5:67:22:e1:f0:1d:ba:5c:37:4c:37:35:9f:
                    b0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:89:58:62:7D:0E:00:DB:E6:DE:E5:22:F1:C5:B3:8B:7D:99:16:0E
            X509v3 Authority Key Identifier:
                keyid:79:E8:F6:BC:DF:63:E4:73:7C:FA:32:C7:71:CD:94:FF:EB:C4:4E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k51.rrdp-rpki.athene-center.net/repo/k51-rpki-athene-center/0/79E8F6BCDF63E4737CFA32C771CD94FFEBC44EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/79E8F6BCDF63E4737CFA32C771CD94FFEBC44EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://k51.rrdp-rpki.athene-center.net/repo/k51-rpki-athene-center/0/3135382e3232302e3138302e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:47:57:53:4c:25:c1:c2:7d:e8:dc:3f:ca:b6:ac:59:55:ed:
         3f:f0:2e:54:a5:cb:5f:4e:21:4f:f5:a2:f7:4c:6c:c9:31:6a:
         2b:42:2f:a2:59:71:3b:e2:77:5a:34:66:19:97:05:57:4e:b4:
         ea:d3:44:28:b4:52:68:32:1c:8d:22:ab:74:6f:85:ce:b6:15:
         4a:87:5f:5b:10:d5:09:ae:64:e0:00:81:06:b7:a4:9b:91:dd:
         d2:21:5e:fa:78:d7:85:07:0b:dc:a3:c0:03:2e:e0:d7:82:7a:
         87:1f:1c:88:ff:cd:e2:89:07:3f:ed:13:ac:a2:ed:d3:4b:0b:
         b1:2a:0e:ac:d7:22:c0:1e:96:54:72:43:96:d1:2f:24:d6:5c:
         50:37:0c:c7:ff:ed:a6:83:42:5f:bd:20:14:7c:71:d1:b2:25:
         e8:46:cd:c5:74:ac:9b:53:8d:0b:ca:48:b7:4f:1b:76:6f:51:
         7f:38:53:2c:1f:aa:71:bd:f6:4a:66:73:8c:00:c1:df:0d:83:
         75:09:f5:de:33:75:7b:4e:92:62:77:a9:5c:97:64:dd:57:0f:
         e8:df:42:08:db:73:a5:d0:8d:70:3e:df:19:25:47:40:6a:ab:
         82:2e:e7:86:24:a9:2a:3a:d9:e0:06:70:1c:96:a9:a5:ad:5f:
         80:73:24:7b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbpiHeKjuwE54BxjBaY/GOctQS6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlFOEY2QkNERjYzRTQ3MzdDRkEzMkM3NzFDRDk0RkZF
QkM0NEVFMjAeFw0yNDAzMjcxOTQyMTlaFw0yNTAzMjYxOTQ3MTlaMDMxMTAvBgNV
BAMTKEM4ODk1ODYyN0QwRTAwREJFNkRFRTUyMkYxQzVCMzhCN0Q5OTE2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+Kj/bOCtIA9fXztF5Q3OyEi9
qm+IaDVb0Epc0HVAxrmlugwMiCjwGSvErpBofd/OR87nCkflFyqm2xSh/8KECQO5
rTyKrotrcApzsj9hi1Pq/+32svGeo0RptQdAYZ3Hg3KDz1eRjWIrCZYKeIG5PIfQ
FXka5DOynJM3UOovlcKTVZYZcOMpKLYZ3H1bZurt8DdEmTBAyyjQe/hB65Soitw2
B6SrL10Z8U7I+JALh5ZXlKenT+ZJW08lb9Us8pL1q44gYDlULB/5WIxWGg0DErWr
9V9utObv8U7K9epu2Oaa87X1RtNM4xvTKrJ79DHo5Wci4fAdulw3TDc1n7CBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyIlYYn0OANvm3uUi8cWzi32ZFg4wHwYDVR0j
BBgwFoAUeej2vN9j5HN8+jLHcc2U/+vETuIwDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2s1MS5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rNTEtcnBraS1hdGhlbmUtY2VudGVyLzAvNzlFOEY2QkNERjYz
RTQ3MzdDRkEzMkM3NzFDRDk0RkZFQkM0NEVFMi5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvNzlFOEY2QkNE
RjYzRTQ3MzdDRkEzMkM3NzFDRDk0RkZFQkM0NEVFMi5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazUxLnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2s1MS1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAnty0MA0GCSqGSIb3DQEBCwUAA4IBAQCYR1dTTCXB
wn3o3D/KtqxZVe0/8C5UpctfTiFP9aL3TGzJMWorQi+iWXE74ndaNGYZlwVXTrTq
00QotFJoMhyNIqt0b4XOthVKh19bENUJrmTgAIEGt6Sbkd3SIV76eNeFBwvco8AD
LuDXgnqHHxyI/83iiQc/7ROsou3TSwuxKg6s1yLAHpZUckOW0S8k1lxQNwzH/+2m
g0JfvSAUfHHRsiXoRs3FdKybU40Lyki3Txt2b1F/OFMsH6pxvfZKZnOMAMHfDYN1
CfXeM3V7TpJid6lcl2TdVw/o30II23Ol0I1wPt8ZJUdAaquCLueGJKkqOtngBnAc
lqmlrV+AcyR7
-----END CERTIFICATE-----
Generated at Mon Apr 1 18:49:45 2024 by rpki-client on console-ams.rpki-client.org