Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39362e302f32342d3234203d3e203438303235.roa
File:                     34352e38382e39362e302f32342d3234203d3e203438303235.roa (raw, json)
Hash identifier:          GhGR3DC8ZU2WMjDQUmYX7uWaXzLww3lbQW5CsviU850=
Subject key identifier:   39:55:A7:6D:08:4C:C2:67:10:5E:7A:21:57:86:2C:83:34:DE:F9:88
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       02789E71942696B0E7882ACE51451302648D0B2C
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39362e302f32342d3234203d3e203438303235.roa
Signing time:             Fri 11 Feb 2022 04:58:50 +0000
ROA not before:           Fri 11 Feb 2022 04:53:50 +0000
ROA not after:            Fri 10 Feb 2023 04:58:50 +0000
asID:                     48025
IP address blocks:        45.88.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:78:9e:71:94:26:96:b0:e7:88:2a:ce:51:45:13:02:64:8d:0b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Feb 11 04:53:50 2022 GMT
            Not After : Feb 10 04:58:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:6a:52:f0:df:96:d5:99:54:51:d6:26:48:
                    92:04:25:ff:bf:6f:c6:fa:69:4d:2f:e6:34:94:60:
                    56:5b:8c:8e:3a:78:13:a9:17:2c:7e:d7:1a:24:53:
                    92:1c:0e:6e:2c:01:87:f9:82:47:6c:e8:58:2d:38:
                    72:9f:4b:ce:50:10:69:73:46:5c:65:8d:6f:29:b9:
                    4d:42:79:9e:78:c7:29:a1:7a:c8:db:e8:b6:3c:af:
                    c0:94:81:49:fa:66:95:36:14:77:65:ac:61:83:7d:
                    69:d2:5e:98:4e:f2:eb:96:68:a5:23:42:e7:bc:ac:
                    04:e6:ec:f8:6a:48:ea:5e:34:85:da:7f:82:e6:e9:
                    11:f0:e5:75:b3:a3:c4:60:66:6c:ff:88:9d:a2:bf:
                    34:ad:fb:00:ea:0d:bb:8b:00:da:8e:f8:0b:ea:cd:
                    a1:83:68:2e:59:f9:8f:97:f8:6d:6f:03:e5:f3:34:
                    ae:fd:90:48:b8:a6:5b:9c:48:35:b7:f1:15:dc:76:
                    6a:0e:68:91:3b:a8:00:f9:39:f3:6f:b8:db:bd:d9:
                    d5:e6:e0:6a:ad:a9:e4:30:7d:32:2f:ca:4f:6d:61:
                    43:6f:37:3c:4e:73:1e:60:30:0e:2a:10:fa:eb:bc:
                    d2:c4:24:94:75:b9:22:90:95:23:7a:2f:d3:64:15:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:55:A7:6D:08:4C:C2:67:10:5E:7A:21:57:86:2C:83:34:DE:F9:88
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38382e39362e302f32342d3234203d3e203438303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:2d:18:c1:f9:10:61:bf:c6:ee:d2:07:f3:c4:9c:c7:c6:f9:
         21:cb:74:8b:4c:d5:f1:a7:84:7c:67:54:11:cc:68:98:d9:ae:
         c7:72:a1:4a:d2:a2:3d:02:3f:e8:72:82:6a:5b:7d:4a:47:82:
         45:3b:f3:6b:23:cf:82:67:80:80:f2:59:df:bb:a7:56:cd:5f:
         af:70:f2:11:47:16:55:83:87:2a:9d:0e:84:5e:b8:de:53:91:
         74:01:51:ba:f1:a5:71:37:74:51:f3:fc:9f:2c:a2:78:97:a9:
         4f:a0:e0:a6:ae:3c:1f:5b:57:0a:ca:83:5d:3b:e4:73:2f:63:
         23:3b:e8:60:cb:73:31:fd:4a:be:ef:e3:dc:2f:a8:e1:4c:68:
         59:a6:58:70:15:f8:e9:63:33:6f:9b:65:22:45:63:8f:ac:25:
         c3:92:f6:fd:73:c8:dc:6e:2c:bb:47:f4:31:8b:02:2e:8f:12:
         54:62:00:77:e8:72:78:08:f0:14:66:f8:2c:d7:25:0d:4c:72:
         8f:98:d4:af:c6:08:65:fe:0e:0f:9f:0f:f1:f0:e2:e8:13:6e:
         40:5a:76:d9:ce:97:af:25:71:84:98:58:7f:16:a3:94:19:bd:
         59:d5:5d:51:72:8b:54:af:e1:fc:e3:e1:f3:36:37:90:14:83:
         9b:d6:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org