Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-5/0/34352e3233312e3230362e302f32332d3234203d3e203631333137.roa
File:                     34352e3233312e3230362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier:          qc979I+qL03xWyuS7lWdmeCoNfF8rS7ActKGOQVnfD4=
Subject key identifier:   C9:95:2E:21:95:C8:8C:C2:4A:A9:0E:14:7F:B7:E8:BA:74:39:D3:DA
Certificate issuer:       /CN=B91C843B4D06A8EDD1FF2FAFAE907057AE22A536
Certificate serial:       2E9F7BDD0F26EABDB185558948DC13709B229621
Authority key identifier: B9:1C:84:3B:4D:06:A8:ED:D1:FF:2F:AF:AE:90:70:57:AE:22:A5:36
Authority info access:    rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-3/1/B91C843B4D06A8EDD1FF2FAFAE907057AE22A536.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-5/0/34352e3233312e3230362e302f32332d3234203d3e203631333137.roa
Signing time:             Mon 13 Jun 2022 06:40:40 +0000
ROA not before:           Mon 13 Jun 2022 06:35:40 +0000
ROA not after:            Mon 12 Jun 2023 06:40:40 +0000
asID:                     61317
IP address blocks:        45.231.206.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9f:7b:dd:0f:26:ea:bd:b1:85:55:89:48:dc:13:70:9b:22:96:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B91C843B4D06A8EDD1FF2FAFAE907057AE22A536
        Validity
            Not Before: Jun 13 06:35:40 2022 GMT
            Not After : Jun 12 06:40:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9c:1d:48:02:53:24:7a:41:8a:52:d5:fa:83:
                    cf:1a:53:c6:4a:d7:54:b8:6d:58:c7:21:84:df:f4:
                    eb:16:69:6a:c5:f6:bb:5b:72:ef:c0:01:55:00:74:
                    ea:c5:6b:53:6e:e9:e7:a6:aa:72:33:91:bc:9c:7f:
                    5d:46:79:de:44:26:05:94:9f:e7:eb:eb:ac:cf:48:
                    11:68:f1:d9:90:6f:41:97:26:ef:20:2b:ce:12:ca:
                    f5:9a:e9:13:20:41:5a:2c:fb:08:c7:54:de:15:41:
                    0d:e2:68:79:d9:9f:ce:ee:e1:00:a4:ed:c4:13:f9:
                    13:36:62:9d:b8:ef:c7:2e:3a:b5:65:3b:f5:6b:d9:
                    8e:28:c3:d3:10:6c:a3:0f:91:66:3c:5c:4a:0e:33:
                    44:c8:88:c4:24:43:2b:7e:ce:41:ee:7d:46:7b:23:
                    f1:e3:0d:d9:c7:51:32:67:0a:05:a7:4e:20:3d:28:
                    95:02:5b:ac:ed:75:7d:01:91:a4:f4:35:22:b5:ad:
                    9c:df:83:b3:20:2a:29:de:23:0f:c9:7b:15:17:78:
                    12:26:36:20:89:d9:b0:39:82:46:5c:85:e8:3b:19:
                    fd:e8:7e:6a:04:be:96:e0:fb:66:a1:a1:b1:9b:b0:
                    f7:00:4d:3d:59:b8:88:e0:96:f5:a8:4b:ec:43:70:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:2E:21:95:C8:8C:C2:4A:A9:0E:14:7F:B7:E8:BA:74:39:D3:DA
            X509v3 Authority Key Identifier:
                keyid:B9:1C:84:3B:4D:06:A8:ED:D1:FF:2F:AF:AE:90:70:57:AE:22:A5:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-5/0/B91C843B4D06A8EDD1FF2FAFAE907057AE22A536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-3/1/B91C843B4D06A8EDD1FF2FAFAE907057AE22A536.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/09bcfdcc-6872-459d-974d-00472b9b33ae-5/0/34352e3233312e3230362e302f32332d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:69:73:cb:8f:90:7b:4d:bd:cc:49:f2:cb:8e:ef:09:8c:
         6b:84:1f:31:87:92:16:98:93:40:18:94:07:fc:47:df:72:43:
         29:9c:22:39:ac:8b:ae:9a:5a:75:be:7e:7d:80:3b:fd:e1:e0:
         90:e6:1e:52:2d:ff:75:a3:58:f8:28:44:f3:73:9a:d4:0e:e0:
         47:ab:fb:a2:fd:44:b4:0f:5f:ac:78:ac:69:d8:ea:39:57:72:
         4b:7b:0d:5a:1a:da:79:73:6e:63:85:83:40:d8:5f:32:6d:2a:
         9c:d3:be:66:65:1d:95:d4:e1:d1:e6:43:90:79:f5:80:27:54:
         07:bb:73:a9:53:9a:9c:60:14:d5:69:50:bf:44:a1:3d:fc:50:
         5a:ac:b4:c9:ac:05:9e:36:c4:6c:bd:86:cd:c9:7f:86:e5:0b:
         7d:57:7b:9c:37:c2:d4:5f:ad:ee:aa:05:ed:4c:48:95:82:28:
         b6:f8:1f:08:47:e5:71:da:ae:08:8e:69:e0:2b:6c:22:5c:2a:
         84:ae:8d:40:e5:9b:78:f3:95:ee:b2:e5:d6:6e:e3:43:f2:23:
         71:7d:ea:75:8d:d2:79:2e:df:bc:ae:df:b1:bc:6f:93:4f:a0:
         37:67:dd:65:c1:78:be:f1:97:9b:67:aa:b5:f5:82:1a:00:f9:
         80:27:f5:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:17 2025 by rpki-client