Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130393a346234303a3a2f32392d3438203d3e203631333137.roa
File:                     326130393a346234303a3a2f32392d3438203d3e203631333137.roa (raw, json)
Hash identifier:          2mApCp5EyjtD3tAbgAuHMj7AeVxWmxtZQ19Pxil7AFA=
Subject key identifier:   95:62:57:CD:1A:D0:B5:88:66:20:FC:F8:30:7B:3C:54:B3:7E:56:5C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       74FD2D54EFF9194E0432A96C2A40A875E774FD1C
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130393a346234303a3a2f32392d3438203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:17:41 +0000
ROA not before:           Mon 29 Nov 2021 08:12:41 +0000
ROA not after:            Mon 28 Nov 2022 08:17:41 +0000
asID:                     61317
IP address blocks:        2a09:4b40::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fd:2d:54:ef:f9:19:4e:04:32:a9:6c:2a:40:a8:75:e7:74:fd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 08:12:41 2021 GMT
            Not After : Nov 28 08:17:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:d5:c2:0e:e0:9b:3a:50:9b:0c:b8:7a:31:
                    e2:14:a8:85:ef:9d:98:b1:56:4a:08:4a:f9:21:d5:
                    96:16:00:4d:79:89:33:01:db:fa:86:bc:34:27:e8:
                    d6:74:12:45:eb:37:41:63:f4:45:62:07:8e:ff:6f:
                    0d:42:ef:95:e0:db:3b:82:eb:81:1d:44:0b:00:98:
                    56:6a:6b:e2:5a:f0:4a:a2:e4:de:ab:5c:5d:4c:36:
                    ff:ce:17:d4:40:3d:65:1b:45:72:4c:f4:a1:b3:97:
                    07:e1:0e:83:88:d9:f7:2d:da:0e:a9:3d:89:65:7a:
                    78:fc:d2:e6:ea:6c:37:42:44:b0:8e:4a:9d:d9:de:
                    41:37:9f:78:3c:ca:00:37:39:75:65:08:d2:64:8d:
                    19:e9:29:6d:4e:64:b8:04:7a:d4:b2:a2:da:db:7e:
                    9a:bc:57:d0:bb:3c:df:a2:8a:85:ee:48:de:42:fb:
                    29:b3:a0:bc:cf:e0:3b:66:cf:43:56:5d:cb:92:b0:
                    72:27:91:bc:cd:1a:54:d8:88:f2:4b:15:c8:b7:1a:
                    6f:3b:8c:f8:58:30:ee:07:fd:36:d8:76:ec:72:08:
                    3c:af:29:d5:d3:81:8a:81:8d:af:f5:2c:55:97:11:
                    d3:1a:66:b3:28:a0:9f:bb:8f:c6:11:23:3c:96:d5:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:62:57:CD:1A:D0:B5:88:66:20:FC:F8:30:7B:3C:54:B3:7E:56:5C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/326130393a346234303a3a2f32392d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:4b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:93:96:03:ac:04:f2:c6:53:d6:2e:87:0c:33:dd:9c:dd:3b:
         ee:e9:12:87:25:62:1d:79:b2:ef:84:c1:f4:7d:6c:06:b4:59:
         78:ef:00:e3:99:a0:d6:fc:5f:49:12:33:b4:ef:e6:4f:52:6b:
         25:3f:67:15:71:c8:d3:0b:3c:06:97:c6:14:2f:bc:86:45:0b:
         c1:4d:ec:79:60:b5:32:85:29:ed:5a:de:94:01:8c:27:bd:f7:
         6f:5f:18:80:22:88:ae:4b:52:dc:5c:97:a4:ea:55:97:13:ac:
         c3:df:f5:08:6d:d9:22:6f:47:d8:71:07:49:b6:f3:82:1b:3e:
         af:08:d7:05:b9:94:cb:6c:60:bd:ec:13:a5:b6:0a:a2:cd:89:
         8f:96:ca:6a:e3:0f:ef:fd:c3:5f:da:c3:cb:f6:0e:37:5b:f2:
         86:a4:0d:78:30:9c:65:d5:b6:fb:8e:52:1f:22:59:87:cd:59:
         70:d5:d0:fb:55:e0:0f:69:f9:26:b9:4e:7c:f6:f6:c3:12:9f:
         87:ab:69:da:a1:9d:80:eb:77:aa:e7:51:d6:a4:32:d3:00:ac:
         04:73:58:46:e0:45:1e:99:cc:c6:44:6a:3b:eb:5f:a1:01:f6:
         6b:23:b5:5a:64:50:2a:37:48:5c:8e:98:83:81:fa:4a:29:12:
         77:24:6a:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----