Route Origin Authorization

$ rpki-client -vvf k58.rrdp-rpki.athene-center.net/repo/k58-rpki-athene-center/0/3135382e3232302e3138372e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3138372e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          gHY8mUT0Lbwzc4LK54nfz+OOc4kOpegH+r1NknT0sXw=
Subject key identifier:   59:B8:8B:01:D1:7C:AD:FD:C3:DC:DE:BF:79:08:6B:38:A1:23:EE:E1
Certificate issuer:       /CN=5E539C1A190855A34F0500E10FD812902EFB5D93
Certificate serial:       124E8BA0EC9348E09A4BBEA46F1C46EDBCEE3E70
Authority key identifier: 5E:53:9C:1A:19:08:55:A3:4F:05:00:E1:0F:D8:12:90:2E:FB:5D:93
Authority info access:    rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/5E539C1A190855A34F0500E10FD812902EFB5D93.cer
Subject info access:      rsync://k58.rrdp-rpki.athene-center.net/repo/k58-rpki-athene-center/0/3135382e3232302e3138372e302f32342d3234203d3e20323038313632.roa
Signing time:             Wed 27 Mar 2024 19:48:38 +0000
ROA not before:           Wed 27 Mar 2024 19:43:38 +0000
ROA not after:            Wed 26 Mar 2025 19:48:38 +0000
asID:                     208162
IP address blocks:        158.220.187.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4e:8b:a0:ec:93:48:e0:9a:4b:be:a4:6f:1c:46:ed:bc:ee:3e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E539C1A190855A34F0500E10FD812902EFB5D93
        Validity
            Not Before: Mar 27 19:43:38 2024 GMT
            Not After : Mar 26 19:48:38 2025 GMT
        Subject: CN=59B88B01D17CADFDC3DCDEBF79086B38A123EEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:e1:ad:31:1d:2d:f8:f7:16:8b:e9:5d:3a:
                    2a:33:ec:a5:18:8f:cd:20:7f:d0:f6:33:00:17:e9:
                    80:15:a5:87:e1:40:49:59:40:55:a9:1f:23:7d:63:
                    55:9c:45:53:a9:91:c8:cb:f4:4b:fa:a3:f3:9f:bf:
                    1e:54:bb:ab:04:26:0f:28:75:3c:bc:ae:10:1e:7d:
                    15:50:77:66:d7:2e:de:09:c3:c9:0f:af:ac:9b:9d:
                    e0:a4:46:19:23:1a:36:f9:dc:f7:10:42:f7:86:5a:
                    6f:95:59:f1:fa:f8:16:78:93:21:c5:28:e5:0c:97:
                    53:58:f1:9c:26:68:a1:df:38:c9:47:d4:cf:92:66:
                    fd:89:ef:f7:b2:1f:1a:e9:d4:c6:1c:ac:3e:22:a4:
                    80:81:53:08:8e:d9:28:f0:e9:4a:3a:db:06:c6:18:
                    67:b2:34:93:68:83:95:f4:8f:00:be:b0:2e:1d:09:
                    0f:71:b2:aa:01:fc:ea:fb:ea:bb:a6:0e:68:94:bd:
                    95:e1:1e:d7:2d:17:1d:c5:46:da:54:bd:ec:ed:d0:
                    12:9b:f0:e2:3b:f7:f2:3c:1b:20:a5:e2:4d:ef:ce:
                    a6:e8:2e:52:42:ab:3b:30:8b:6f:b0:72:d6:13:4b:
                    fe:f2:2b:e5:63:72:6c:f5:f4:44:3d:84:b1:63:99:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B8:8B:01:D1:7C:AD:FD:C3:DC:DE:BF:79:08:6B:38:A1:23:EE:E1
            X509v3 Authority Key Identifier:
                keyid:5E:53:9C:1A:19:08:55:A3:4F:05:00:E1:0F:D8:12:90:2E:FB:5D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k58.rrdp-rpki.athene-center.net/repo/k58-rpki-athene-center/0/5E539C1A190855A34F0500E10FD812902EFB5D93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/0/5E539C1A190855A34F0500E10FD812902EFB5D93.cer

            Subject Information Access:
                Signed Object - URI:rsync://k58.rrdp-rpki.athene-center.net/repo/k58-rpki-athene-center/0/3135382e3232302e3138372e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:1b:9f:a0:3d:4d:ed:d4:a4:36:59:e7:13:54:95:1f:7c:
         a3:4a:f5:8d:64:b8:05:18:d8:63:9c:c9:ed:6c:1d:bc:56:44:
         c8:9f:21:4a:f8:5a:f3:60:fb:e9:eb:d4:4f:f7:60:a8:73:2e:
         59:db:0f:aa:62:e7:25:a3:2f:82:73:b2:f2:1f:9a:5f:49:a2:
         bb:7d:8f:9f:68:8f:4a:03:58:f4:49:93:86:f2:7e:78:b3:ad:
         b6:ed:18:43:4b:a1:3d:23:7a:37:27:64:d4:1c:83:ee:63:91:
         1b:8e:c9:c6:e5:fb:34:e3:b2:6e:cd:99:3d:86:6a:15:8e:1d:
         a6:62:25:12:08:cb:8f:d8:ea:5c:58:b2:cf:12:85:58:9c:4b:
         fa:e5:9f:90:7c:36:cf:27:3d:2c:43:aa:16:3d:b5:bc:27:66:
         0e:a2:28:59:82:e9:93:15:7a:9d:32:b0:37:1a:49:b8:8d:10:
         28:68:b5:a5:0b:72:ed:2a:ee:9f:aa:6d:d6:5a:b0:e3:e7:a2:
         b1:b3:b1:46:65:9a:0d:6f:e3:e0:eb:cb:69:98:9a:55:49:74:
         77:52:e6:7f:0a:fa:38:67:70:e1:59:58:0d:9f:0f:df:39:eb:
         ed:4e:e4:12:68:3b:0c:f0:2b:ad:0e:13:3f:15:e6:f9:bc:db:
         35:f8:b3:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEk6LoOyTSOCaS76kbxxG7bzuPnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU1MzlDMUExOTA4NTVBMzRGMDUwMEUxMEZEODEyOTAy
RUZCNUQ5MzAeFw0yNDAzMjcxOTQzMzhaFw0yNTAzMjYxOTQ4MzhaMDMxMTAvBgNV
BAMTKDU5Qjg4QjAxRDE3Q0FERkRDM0RDREVCRjc5MDg2QjM4QTEyM0VFRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WeGtMR0t+PcWi+ldOioz7KUY
j80gf9D2MwAX6YAVpYfhQElZQFWpHyN9Y1WcRVOpkcjL9Ev6o/Ofvx5Uu6sEJg8o
dTy8rhAefRVQd2bXLt4Jw8kPr6ybneCkRhkjGjb53PcQQveGWm+VWfH6+BZ4kyHF
KOUMl1NY8ZwmaKHfOMlH1M+SZv2J7/eyHxrp1MYcrD4ipICBUwiO2Sjw6Uo62wbG
GGeyNJNog5X0jwC+sC4dCQ9xsqoB/Or76rumDmiUvZXhHtctFx3FRtpUvezt0BKb
8OI79/I8GyCl4k3vzqboLlJCqzswi2+wctYTS/7yK+Vjcmz19EQ9hLFjmbpLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWbiLAdF8rf3D3N6/eQhrOKEj7uEwHwYDVR0j
BBgwFoAUXlOcGhkIVaNPBQDhD9gSkC77XZMwDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2s1OC5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rNTgtcnBraS1hdGhlbmUtY2VudGVyLzAvNUU1MzlDMUExOTA4
NTVBMzRGMDUwMEUxMEZEODEyOTAyRUZCNUQ5My5jcmwwgZAGCCsGAQUFBwEBBIGD
MIGAMH4GCCsGAQUFBzAChnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNl
bnRlci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzAvNUU1MzlDMUEx
OTA4NTVBMzRGMDUwMEUxMEZEODEyOTAyRUZCNUQ5My5jZXIwgaQGCCsGAQUFBwEL
BIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vazU4LnJyZHAtcnBraS5hdGhl
bmUtY2VudGVyLm5ldC9yZXBvL2s1OC1ycGtpLWF0aGVuZS1jZW50ZXIvMC8zMTM1
MzgyZTMyMzIzMDJlMzEzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4
MzEzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAnty7MA0GCSqGSIb3DQEBCwUAA4IBAQBMIBufoD1N
7dSkNlnnE1SVH3yjSvWNZLgFGNhjnMntbB28VkTInyFK+FrzYPvp69RP92Cocy5Z
2w+qYucloy+Cc7LyH5pfSaK7fY+faI9KA1j0SZOG8n54s6227RhDS6E9I3o3J2TU
HIPuY5EbjsnG5fs047JuzZk9hmoVjh2mYiUSCMuP2OpcWLLPEoVYnEv65Z+QfDbP
Jz0sQ6oWPbW8J2YOoihZgumTFXqdMrA3Gkm4jRAoaLWlC3LtKu6fqm3WWrDj56Kx
s7FGZZoNb+Pg68tpmJpVSXR3UuZ/Cvo4Z3DhWVgNnw/fOevtTuQSaDsM8CutDhM/
Feb5vNs1+LMp
-----END CERTIFICATE-----
Generated at Thu Apr 4 00:12:55 2024 by rpki-client on console-ams.rpki-client.org