the input key file, by default it should be an RSA private key. ... the input file is an RSA public key. ... Consider the self signed example in certs/pca-cert.pem .
www.openssl.org