Route Origin Authorization

$ rpki-client -vvf k53.rrdp-rpki.athene-center.net/repo/k53-rpki-athene-center/0/3135382e3232302e3138322e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3138322e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          CT6qgfhUYy1S9Yo9CIgNZjuKEG8pwmd2Z9fXWxG0je4=
Subject key identifier:   5A:9D:34:3F:0C:51:6B:D2:2F:8D:8C:D0:72:9F:A9:5D:A8:82:C9:C9
Certificate issuer:       /CN=CE7A0999AB82BCA1DC2AC7C4988D47D343EBBA03
Certificate serial:       54234AC282D7156D49348B290A6C8CCDB493AF18
Authority key identifier: CE:7A:09:99:AB:82:BC:A1:DC:2A:C7:C4:98:8D:47:D3:43:EB:BA:03
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/CE7A0999AB82BCA1DC2AC7C4988D47D343EBBA03.cer
Subject info access:      rsync://k53.rrdp-rpki.athene-center.net/repo/k53-rpki-athene-center/0/3135382e3232302e3138322e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:47:41 +0000
ROA not before:           Wed 27 Mar 2024 19:42:41 +0000
ROA not after:            Wed 26 Mar 2025 19:47:41 +0000
asID:                     208162
IP address blocks:        158.220.182.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:23:4a:c2:82:d7:15:6d:49:34:8b:29:0a:6c:8c:cd:b4:93:af:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE7A0999AB82BCA1DC2AC7C4988D47D343EBBA03
        Validity
            Not Before: Mar 27 19:42:41 2024 GMT
            Not After : Mar 26 19:47:41 2025 GMT
        Subject: CN=5A9D343F0C516BD22F8D8CD0729FA95DA882C9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:90:82:72:ec:69:f6:98:85:8c:12:6a:11:
                    26:9d:ee:f9:40:2e:e2:a8:71:ff:d4:72:a4:7e:5c:
                    ed:ef:e8:93:3a:ec:dc:21:4e:ce:f3:07:9b:78:dc:
                    1b:a7:29:b2:4e:4c:1c:87:a7:af:5f:ff:56:c9:3e:
                    c1:46:bc:fd:24:3e:c7:88:af:da:bd:16:8f:3a:85:
                    29:79:f2:59:ae:1a:9d:1d:3a:c5:2e:66:ab:aa:92:
                    77:9e:71:06:70:9a:f9:a6:c9:2a:68:5d:82:0a:7b:
                    45:e9:b9:55:9f:82:3b:f5:9c:d0:5b:82:25:64:bc:
                    84:a6:10:b4:58:9f:5a:fe:8b:60:29:a1:c2:8b:98:
                    e0:59:c3:b4:05:3a:f5:04:57:dd:a3:79:bb:b5:0f:
                    3f:36:c7:9d:6e:9b:e7:fe:3e:b8:c8:5f:28:58:46:
                    06:4b:05:d4:0e:84:91:81:ce:16:3b:da:49:a9:50:
                    49:c7:07:a9:5d:c8:5a:1c:10:a9:83:a6:82:85:30:
                    94:86:80:ef:87:2d:1a:06:21:4e:dc:8f:17:9e:be:
                    ef:aa:b2:f6:52:8e:63:3c:6c:96:49:81:a7:af:78:
                    91:ef:a2:f9:43:b1:fc:9d:e5:ff:fa:83:6d:e4:16:
                    6c:b1:c4:31:74:e9:39:b4:44:37:40:67:2a:8d:cf:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9D:34:3F:0C:51:6B:D2:2F:8D:8C:D0:72:9F:A9:5D:A8:82:C9:C9
            X509v3 Authority Key Identifier:
                keyid:CE:7A:09:99:AB:82:BC:A1:DC:2A:C7:C4:98:8D:47:D3:43:EB:BA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k53.rrdp-rpki.athene-center.net/repo/k53-rpki-athene-center/0/CE7A0999AB82BCA1DC2AC7C4988D47D343EBBA03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/CE7A0999AB82BCA1DC2AC7C4988D47D343EBBA03.cer

            Subject Information Access:
                Signed Object - URI:rsync://k53.rrdp-rpki.athene-center.net/repo/k53-rpki-athene-center/0/3135382e3232302e3138322e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:71:ff:55:7f:1e:4b:72:cb:ca:a1:62:a1:24:c3:db:04:a4:
         e6:08:e2:81:81:42:8c:8f:ff:98:e0:bd:39:5f:16:52:b3:44:
         ae:99:58:13:e7:43:91:5b:2a:96:d8:4f:79:f7:b8:a5:c4:2c:
         5f:d4:3c:5b:48:df:be:0f:fa:82:28:ba:8e:fd:16:a6:62:3a:
         62:86:8e:be:19:4c:10:d3:5c:8f:58:e9:c1:b7:8c:20:ce:8b:
         b0:f0:7a:5d:8e:92:48:f4:89:6c:15:cb:a9:d1:a2:8e:1c:e3:
         fc:53:28:6d:4e:f8:b5:8a:8e:3d:48:33:7c:a1:53:00:b9:fb:
         42:9e:b7:0d:ec:40:2c:9e:2a:4e:24:7c:79:a7:89:16:df:1f:
         01:a6:27:ca:a6:d4:8b:ed:22:c5:aa:e2:2d:e2:97:3a:da:ee:
         44:55:0c:75:37:36:05:c4:66:18:4e:17:b2:b6:d1:23:d7:9a:
         c8:00:3d:f7:f7:d8:16:d5:e2:72:84:56:60:57:8e:19:72:c7:
         22:9f:55:b4:22:06:85:5e:01:50:70:55:bc:fc:1c:be:2a:c9:
         14:03:4a:8e:0e:53:6d:91:ad:2d:74:b0:eb:fc:5f:5c:a9:14:
         e1:5d:19:3d:c6:bd:c4:df:16:a2:88:a9:30:2d:ef:1e:b1:35:
         f5:29:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 01:06:46 2024 by rpki-client on console-ams.rpki-client.org