Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38312e302e302f32322d3234203d3e203631333137.roa
File:                     34352e38312e302e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          ffgoSjeIrhrt3esg4omcU/2iYSM9PhfRND2hBpiSM18=
Subject key identifier:   FF:99:80:AD:4C:ED:D9:2F:76:EE:BA:B9:67:4D:06:64:83:5C:61:E0
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6E425D39E74F0B7DCB8ABEF62E9294FA4E8D1966
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38312e302e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:43 +0000
ROA not before:           Mon 29 Nov 2021 07:58:43 +0000
ROA not after:            Mon 28 Nov 2022 08:03:43 +0000
asID:                     61317
IP address blocks:        45.81.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:42:5d:39:e7:4f:0b:7d:cb:8a:be:f6:2e:92:94:fa:4e:8d:19:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:43 2021 GMT
            Not After : Nov 28 08:03:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:00:8b:75:bb:bd:aa:e3:ec:7b:a1:f1:3f:
                    f0:cf:a2:42:75:fa:ae:00:7c:97:67:fd:fb:3f:86:
                    03:06:88:c5:98:91:15:98:5f:95:4a:2e:e1:33:44:
                    32:62:b6:80:cf:c5:0c:8c:24:68:8e:fa:f6:6d:45:
                    c2:2a:03:16:08:30:63:bd:40:d0:8f:c9:b9:af:8d:
                    d0:25:9d:99:9a:2d:3c:3c:8f:86:c2:21:41:1c:56:
                    00:20:c1:ae:41:d4:90:c1:42:c0:52:b7:cb:28:83:
                    1e:bc:3a:5d:85:b9:f9:08:49:21:f4:7c:69:9e:4f:
                    e8:3c:10:8f:da:42:96:e0:41:94:3f:91:98:26:a1:
                    0a:6a:af:8b:e7:24:ee:dd:9f:8f:ce:82:a2:61:1d:
                    03:1d:71:bf:82:9b:31:da:60:d8:70:1b:8b:62:d7:
                    fd:a9:4e:cb:8d:1e:45:5c:7b:2b:96:c5:65:26:9b:
                    49:a2:c5:19:58:4e:e0:93:4e:c5:99:c4:e1:63:22:
                    ef:7a:c7:f4:93:f1:7a:a5:85:36:2c:28:61:94:e5:
                    d6:9d:a5:5a:d7:a3:09:57:bc:c8:b7:73:d6:5d:5d:
                    cb:4e:9b:b9:72:d0:c4:c4:58:c1:47:f1:94:59:cb:
                    e1:65:ef:47:53:c6:c2:e7:78:33:98:0a:46:be:ca:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:99:80:AD:4C:ED:D9:2F:76:EE:BA:B9:67:4D:06:64:83:5C:61:E0
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38312e302e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:0f:d5:ce:2c:cf:e8:30:bf:75:e3:65:5b:f9:c4:70:b5:44:
         ef:6e:cb:bb:8f:c9:01:b5:30:f0:f4:38:a8:eb:d2:16:f9:26:
         81:37:64:25:51:b1:b7:db:08:ed:4e:9d:6b:e1:07:4f:91:ee:
         b8:a1:7d:c2:6e:01:a7:3b:2e:26:1d:75:6a:e3:84:ec:c9:ea:
         29:98:03:35:33:52:e2:ae:50:b1:ef:16:56:56:40:48:ae:f6:
         12:4b:1b:ee:38:72:73:7e:70:16:9d:3b:c2:b7:0d:41:a4:00:
         a0:c3:5a:70:4d:fd:38:d5:d0:20:cf:87:bc:71:23:d5:42:01:
         f9:cf:07:31:34:a2:1e:84:66:91:a7:1e:5a:dd:3e:9e:1c:ac:
         2c:fd:a0:b5:91:ef:c8:79:3d:24:1b:3a:86:14:8c:e5:70:94:
         24:1e:39:94:da:32:c1:84:b9:b3:0f:1f:90:09:2c:63:38:6e:
         65:56:a5:18:62:a6:83:9d:a8:aa:2b:5e:33:57:84:3c:70:74:
         b4:93:16:5f:b6:3f:b3:40:c3:37:fc:2d:33:7f:fb:ba:9d:e6:
         6d:39:c5:3d:19:1e:d7:e4:2e:ec:eb:7c:4b:c9:a5:10:b6:0c:
         9b:9f:f2:a9:e8:fd:65:fe:db:47:78:eb:82:b5:02:06:08:c6:
         a2:74:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org