Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/322e35382e3137322e302f32342d3234203d3e2039303039.roa
File:                     322e35382e3137322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          iZgaqA8Ivib41jsaqL6q6JyI9+DWuKXvPoNz7GcYt8c=
Subject key identifier:   1C:15:E2:A0:B8:B8:70:22:B1:39:4F:7E:2B:57:35:51:0D:3B:77:D3
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3518454F38882C12EC812504DC31668698D8D2AB
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/322e35382e3137322e302f32342d3234203d3e2039303039.roa
Signing time:             Mon 07 Feb 2022 10:35:45 +0000
ROA not before:           Mon 07 Feb 2022 10:30:45 +0000
ROA not after:            Mon 06 Feb 2023 10:35:45 +0000
asID:                     9009
IP address blocks:        2.58.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:18:45:4f:38:88:2c:12:ec:81:25:04:dc:31:66:86:98:d8:d2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Feb  7 10:30:45 2022 GMT
            Not After : Feb  6 10:35:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:ba:60:a9:3b:15:d1:2b:8a:8c:c7:96:c6:
                    0e:34:6e:91:1f:1c:4f:de:1d:18:a6:f2:a7:b4:ea:
                    3d:2f:60:6f:d0:a3:81:b2:a6:14:07:ff:fe:db:0c:
                    db:79:2a:03:77:ee:e2:b4:40:ea:b2:ff:99:04:35:
                    53:a6:0e:dc:30:9f:a5:f5:d5:d1:81:4a:d5:a2:a6:
                    28:51:77:ea:f8:ec:e6:51:d7:ab:c0:91:2a:85:d5:
                    d3:50:92:37:6b:c6:ee:ec:ac:a0:e3:be:95:72:81:
                    89:4d:62:67:bd:51:75:a7:b0:28:81:05:7d:1e:52:
                    52:33:8e:40:11:fe:1b:eb:4c:04:1f:79:26:f3:97:
                    53:c2:de:be:2e:05:e6:3f:90:bb:1f:8c:b8:ef:8b:
                    7c:95:85:12:34:66:22:c3:52:f2:c2:6b:26:e1:db:
                    d4:23:a1:a1:dd:72:ba:2c:6e:16:54:d1:29:89:8d:
                    1e:b2:0c:32:a9:85:3f:3c:9d:4c:82:81:29:e8:11:
                    da:01:1b:70:7d:9d:1e:5a:e8:ba:4f:6a:81:d9:33:
                    60:15:d0:64:40:65:9d:b4:3d:5a:eb:d5:b9:bb:ba:
                    b2:5c:0b:df:45:d4:69:e6:ee:d3:86:86:73:3d:ed:
                    dd:16:ab:23:54:e0:bc:00:15:e8:7f:1d:93:16:41:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:15:E2:A0:B8:B8:70:22:B1:39:4F:7E:2B:57:35:51:0D:3B:77:D3
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/322e35382e3137322e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:c4:99:fb:0c:ca:ca:45:44:31:3b:e5:28:a5:5d:22:a9:68:
         06:cb:f9:1b:3b:79:e0:dd:57:9c:26:9f:b9:03:94:d8:eb:79:
         95:ed:fd:20:05:99:d4:3f:a0:30:09:6f:de:b3:33:30:b3:ab:
         da:98:9d:37:8b:37:00:3e:5a:40:75:9c:69:40:20:57:a2:d8:
         d4:f7:f2:d6:f2:bd:d9:d6:ca:a4:8a:c5:4a:6a:9f:2d:ba:ac:
         bc:dc:1c:12:3d:f3:b4:4b:fe:fa:17:8a:62:1e:e6:32:32:da:
         15:e0:3f:ca:bb:c1:a6:9f:2c:65:fc:a2:3f:40:2c:6d:b7:c3:
         8e:be:02:48:8e:22:bc:f4:60:68:9f:36:c7:5e:99:d5:d6:3b:
         3a:a9:66:66:25:5e:08:19:35:0d:9b:b5:36:e8:7f:88:74:87:
         c1:86:ea:39:fd:f2:2e:2f:56:f0:c8:c7:50:20:15:af:62:7e:
         0c:dd:94:68:3f:c7:13:b3:08:dc:01:69:c3:d0:3b:a4:ac:a8:
         20:b9:97:d2:7a:fd:62:50:31:c5:50:62:13:78:05:69:19:68:
         e4:d6:5f:1a:83:a9:81:3d:e8:52:9c:48:e3:a5:3f:1c:73:5c:
         f9:a8:3b:96:8e:d5:ab:6f:12:1a:ee:77:c3:fc:ac:77:0e:6f:
         53:a9:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org