Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33362e302f32322d3232203d3e203631333137.roa
File:                     352e34352e33362e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          yGrREMIzUhV6RYSV7ZRu2sv9YAnmHe/jlGDXO4TsS1c=
Subject key identifier:   D7:24:49:F1:EF:BF:96:4F:29:D6:5C:F9:A5:41:F4:F1:54:EA:9A:36
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       6EAD5731E9A79E02EAFE5044451B5C71F9CE8D6B
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33362e302f32322d3232203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     61317
IP address blocks:        5.45.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ad:57:31:e9:a7:9e:02:ea:fe:50:44:45:1b:5c:71:f9:ce:8d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject: CN=3082010A0282010100A38BFE043C0A2F63A908CD2C7C9F9C81BE7F93E17666A66AD4062EE12A2B1FD2714B919600C4FDF052D16DA3F7E649F1BF5D88B4887F8227E3CDA3AB4C77312AB787C3E956A59DDB5237462945F0B68615B912339A651CE6E9A4ABBD0A933500B9FBB52A2429674E997E8002BE8A4CF05AF700C16EB9CED3E085CA6FABA7C5042423209F4EB312332432E336156D2CF43A218A452C4B07FFDF2D7F9255A1305F2689D4EC865F0FADBE22CEA3E6D15C14A2B876A62C73AEB9641DC20FE5BA89C800699FF3507CF0E66BA5AEE98E4524072A2CF71FE1471A424C491925E7AB405ED453F75D48E0860AD4FD2F64D49BCF8729177C055DAD79A4D712DD34FDD63B610203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:fe:04:3c:0a:2f:63:a9:08:cd:2c:7c:9f:
                    9c:81:be:7f:93:e1:76:66:a6:6a:d4:06:2e:e1:2a:
                    2b:1f:d2:71:4b:91:96:00:c4:fd:f0:52:d1:6d:a3:
                    f7:e6:49:f1:bf:5d:88:b4:88:7f:82:27:e3:cd:a3:
                    ab:4c:77:31:2a:b7:87:c3:e9:56:a5:9d:db:52:37:
                    46:29:45:f0:b6:86:15:b9:12:33:9a:65:1c:e6:e9:
                    a4:ab:bd:0a:93:35:00:b9:fb:b5:2a:24:29:67:4e:
                    99:7e:80:02:be:8a:4c:f0:5a:f7:00:c1:6e:b9:ce:
                    d3:e0:85:ca:6f:ab:a7:c5:04:24:23:20:9f:4e:b3:
                    12:33:24:32:e3:36:15:6d:2c:f4:3a:21:8a:45:2c:
                    4b:07:ff:df:2d:7f:92:55:a1:30:5f:26:89:d4:ec:
                    86:5f:0f:ad:be:22:ce:a3:e6:d1:5c:14:a2:b8:76:
                    a6:2c:73:ae:b9:64:1d:c2:0f:e5:ba:89:c8:00:69:
                    9f:f3:50:7c:f0:e6:6b:a5:ae:e9:8e:45:24:07:2a:
                    2c:f7:1f:e1:47:1a:42:4c:49:19:25:e7:ab:40:5e:
                    d4:53:f7:5d:48:e0:86:0a:d4:fd:2f:64:d4:9b:cf:
                    87:29:17:7c:05:5d:ad:79:a4:d7:12:dd:34:fd:d6:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:24:49:F1:EF:BF:96:4F:29:D6:5C:F9:A5:41:F4:F1:54:EA:9A:36
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33362e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:1f:7f:e4:ad:35:0e:41:51:3f:2b:7e:57:1f:27:97:f9:31:
         1c:26:36:e7:e2:9f:39:7b:b7:6b:d9:9b:e0:cc:cc:91:71:9b:
         d2:85:87:77:33:05:8e:05:fc:65:67:7c:89:2a:85:6b:8c:f3:
         46:4e:d9:64:bd:1a:0a:cd:77:29:7e:54:e1:d7:b6:49:db:a1:
         13:75:61:55:01:5e:84:16:7e:87:57:b9:70:58:14:d5:de:40:
         3f:16:83:52:21:10:39:1a:ee:56:fa:12:67:5a:97:5b:f0:d8:
         13:b0:c3:57:35:ea:60:15:3b:96:9d:f3:64:9a:b8:fe:39:8a:
         32:b3:30:6c:ad:23:df:91:78:d8:fa:2a:5c:27:57:94:f9:d3:
         03:7a:d1:3b:37:d9:d5:aa:ff:45:2f:af:39:8d:ab:99:13:fc:
         aa:36:94:f5:1c:bf:53:7f:c2:1d:2c:b1:97:29:53:a1:d4:74:
         cf:a7:0d:50:4f:e3:f6:c7:65:cc:a6:2c:47:88:20:5a:a2:8f:
         3c:6b:a8:10:7e:26:69:1b:94:60:bd:3a:fc:07:27:ba:70:42:
         8b:5c:84:2f:f3:a3:40:92:9d:04:97:c2:b0:df:47:50:54:21:
         fc:95:71:5d:fc:34:72:7e:16:af:d0:e0:21:9e:24:69:60:46:
         df:68:0f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org