Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33362e302f32342d3234203d3e203631333137.roa
File:                     352e34352e33362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          8zsjKrU1ctQqtXBiPYVFioIQVzYyl7RzuqBHzllpnxE=
Subject key identifier:   34:FF:39:1A:A2:94:E4:70:CE:86:1D:DD:BF:9E:3B:26:BE:0C:D1:FE
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       46D5C75AD43B1D246C882FAD6AD22602E6C9DA5A
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33362e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 26 May 2022 14:40:39 +0000
ROA not before:           Thu 26 May 2022 14:35:39 +0000
ROA not after:            Thu 25 May 2023 14:40:39 +0000
asID:                     61317
IP address blocks:        5.45.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d5:c7:5a:d4:3b:1d:24:6c:88:2f:ad:6a:d2:26:02:e6:c9:da:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 26 14:35:39 2022 GMT
            Not After : May 25 14:40:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:ac:3a:b6:c4:e0:64:f3:39:6a:06:5c:3e:
                    e1:9f:7c:7d:d9:4b:b5:f2:9e:3f:6b:aa:0b:67:75:
                    c6:13:48:17:5d:6f:95:4b:e8:1f:9f:98:a6:7f:7d:
                    0b:dd:60:a8:37:26:f7:ea:35:7a:a8:e9:31:bb:a9:
                    7e:4d:0b:ef:cb:e5:80:4c:0b:d1:0e:b0:87:2d:bb:
                    da:a9:2f:b1:99:96:2d:78:25:53:cf:90:84:e6:90:
                    33:f5:73:c3:5f:1a:0d:21:5a:ac:12:9f:53:74:50:
                    d2:7c:bf:01:bc:55:8c:17:d6:2a:0d:b4:6f:32:35:
                    94:ae:2c:81:0a:28:4a:2b:9b:d8:f8:87:1e:4d:7c:
                    34:1d:11:76:27:f7:f5:df:b8:4c:0c:c2:ac:2c:fa:
                    0f:1d:ae:f6:c8:b8:77:c7:04:86:78:98:fb:47:74:
                    07:f6:b9:04:bf:64:47:7d:6a:5a:ff:a5:c6:d2:d2:
                    0e:60:14:24:fc:6a:01:02:71:98:df:eb:7c:bd:48:
                    9e:23:0d:b9:5e:03:0b:4b:cb:60:5a:bd:40:f0:7e:
                    6a:ca:68:18:50:fc:d6:87:c9:00:db:29:f2:e6:90:
                    da:b9:ca:76:34:03:81:39:df:5b:4f:55:2a:54:dd:
                    72:00:fd:0c:1d:61:88:43:a1:81:1e:fa:9f:91:92:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FF:39:1A:A2:94:E4:70:CE:86:1D:DD:BF:9E:3B:26:BE:0C:D1:FE
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/352e34352e33362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b3:a5:fc:85:14:a6:db:69:d4:35:1b:09:b5:6a:cb:1e:69:
         c9:95:23:70:48:0c:ee:48:36:66:ee:51:78:44:9b:72:db:c1:
         e7:07:be:82:aa:4b:60:39:6d:e1:48:f3:12:b0:59:25:e6:fb:
         0a:23:1e:97:93:e2:3f:39:83:5f:e9:22:ab:f6:b9:6a:6d:28:
         08:60:c9:5a:70:be:d2:f5:3d:23:1e:6b:e1:ef:5b:28:d3:e1:
         48:f0:fd:0e:d3:8a:72:8e:74:43:8b:e7:1a:a6:b6:b4:54:c2:
         10:83:b5:40:b3:f3:11:cc:20:1b:a9:10:aa:b9:69:82:03:c2:
         6f:ef:4a:69:43:d8:5d:c7:73:b6:1c:bf:d7:f0:71:ff:f6:8b:
         4d:b7:25:a5:77:50:8f:e1:65:13:43:2d:f2:e9:57:86:8f:7b:
         62:57:de:98:8a:1d:36:ac:ab:c0:67:76:35:03:2f:f8:48:60:
         9d:b5:90:e4:30:86:55:31:61:36:b6:be:6e:b7:49:90:ec:4a:
         20:6e:47:da:72:ca:8f:b8:9d:fd:0b:2e:1d:ab:34:5c:02:62:
         cb:13:ff:e9:24:b5:c8:22:b0:95:ff:62:16:82:f1:83:a2:49:
         7c:05:d2:7c:b0:df:43:34:a0:7f:be:92:d0:11:05:21:7a:b3:
         c7:ca:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org