Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/322e35382e3137322e302f32322d3234203d3e203631333137.roa
File:                     322e35382e3137322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          WIVaKdqWEkXWag5YgWhH5XhEpv0m8nuTVgRl1wVxl6k=
Subject key identifier:   92:DF:1F:83:0B:36:34:39:D7:B9:86:08:8D:76:29:05:6A:C7:93:BA
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       20C5F92F0CE39C82A387015C44526F1FF695713B
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/322e35382e3137322e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 07:58:39 +0000
ROA not before:           Mon 29 Nov 2021 07:53:39 +0000
ROA not after:            Mon 28 Nov 2022 07:58:39 +0000
asID:                     61317
IP address blocks:        2.58.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:f9:2f:0c:e3:9c:82:a3:87:01:5c:44:52:6f:1f:f6:95:71:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:53:39 2021 GMT
            Not After : Nov 28 07:58:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:e0:a1:a7:b6:0f:59:19:59:f4:89:fb:e4:
                    0c:ec:b9:54:f0:83:74:e9:6d:71:2d:cf:9f:90:ec:
                    3e:e4:bf:0c:24:bc:31:04:2e:29:15:08:48:6c:6e:
                    1e:d8:94:f3:d0:07:30:ea:6d:ba:42:3b:77:b7:39:
                    2d:0a:c6:48:7a:46:b5:bd:57:da:37:9d:93:42:58:
                    fd:68:88:86:64:61:6d:a5:6b:91:39:fb:20:40:b7:
                    39:f0:bd:7c:38:96:1c:6c:d8:2b:a7:78:0a:fd:60:
                    7b:fc:cf:8f:d9:25:66:eb:0e:9a:42:01:cb:51:11:
                    e0:27:cc:51:6e:73:2e:4c:41:47:55:0b:99:4d:19:
                    6e:ad:eb:e2:6c:5b:b9:b9:11:ea:94:cd:a1:b3:7c:
                    00:30:49:88:ca:34:64:75:71:24:20:f6:59:63:40:
                    61:b7:cd:7a:91:96:3d:14:da:8d:33:60:a7:41:b4:
                    03:b1:6c:75:9d:b3:50:b6:53:23:5f:c8:58:38:d4:
                    35:e6:d4:76:83:41:e1:da:1f:75:7d:66:f5:b2:e9:
                    93:30:c2:23:5a:68:06:96:9b:10:39:a7:71:21:64:
                    25:8c:2f:c1:26:08:ce:66:ff:0c:68:00:81:7a:04:
                    0a:a3:d0:c5:c7:c5:07:b8:4f:d3:03:a0:1b:aa:d1:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DF:1F:83:0B:36:34:39:D7:B9:86:08:8D:76:29:05:6A:C7:93:BA
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/322e35382e3137322e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:26:5a:24:40:2f:3c:81:c2:ba:8d:d6:f6:59:07:e2:32:66:
         a2:82:f8:86:26:db:77:27:96:6c:2f:85:0c:7e:70:17:1e:b9:
         6b:35:bb:4a:5b:f1:3a:f3:24:1d:cb:80:4c:b0:ef:b2:ef:bb:
         1e:43:8f:f6:64:87:59:27:35:37:db:1c:12:f8:7b:c5:38:b4:
         37:17:28:a3:68:b6:5f:bc:61:78:97:d9:14:2b:99:b0:3f:e5:
         a9:46:65:79:62:d5:8c:b5:8d:2b:d5:08:fa:a7:3e:3d:c0:17:
         20:28:30:10:9c:5c:15:d0:59:ef:d7:d0:5a:60:dd:a2:3d:f2:
         d4:b4:ec:5b:e0:3e:c1:97:3f:75:1f:16:15:f0:3d:ba:87:aa:
         8b:2a:f9:52:2d:5f:30:fe:d4:93:41:05:a8:ac:d5:5d:24:08:
         b4:f1:90:53:16:eb:8b:39:73:18:28:b2:bf:66:2c:3f:f4:42:
         ea:f3:56:17:30:d3:17:74:b3:31:31:dd:a7:7f:28:ba:8b:67:
         56:50:53:5b:10:af:e0:7f:c8:fc:15:05:a7:a2:e3:ed:7f:73:
         15:be:a3:99:93:98:51:b3:30:dd:73:d3:df:69:ef:f7:3a:34:
         6d:c1:d8:94:2d:fb:80:14:92:f4:79:43:a0:49:c4:31:9c:0a:
         77:c4:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org