Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3234392e302f32342d3234203d3e20323033373236.roa
File:                     34352e38392e3234392e302f32342d3234203d3e20323033373236.roa (raw, json)
Hash identifier:          dkX6U2y4M8R4sHvNoHVFbIqwxkHNt/ZC5IjMtN2Hp38=
Subject key identifier:   EE:BE:63:2D:DF:20:F2:A5:2A:62:F1:B3:28:CB:A8:0A:79:0C:80:2C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       75A1E18A3A13EEABC2EC66B8FEECA59E266D8186
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3234392e302f32342d3234203d3e20323033373236.roa
Signing time:             Mon 03 Jan 2022 17:05:36 +0000
ROA not before:           Mon 03 Jan 2022 17:00:36 +0000
ROA not after:            Mon 02 Jan 2023 17:05:36 +0000
asID:                     203726
IP address blocks:        45.89.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a1:e1:8a:3a:13:ee:ab:c2:ec:66:b8:fe:ec:a5:9e:26:6d:81:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jan  3 17:00:36 2022 GMT
            Not After : Jan  2 17:05:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:34:1e:ac:9b:84:04:7c:69:1b:3c:b7:07:9f:
                    d8:30:80:a0:9a:5e:f0:bd:f6:cf:df:4d:5f:8e:91:
                    ff:8c:d6:65:25:7c:d4:9c:10:12:0d:ed:94:7b:c7:
                    ca:9d:cf:9e:6e:3e:5c:5c:89:f6:47:d0:e9:de:15:
                    f7:b7:fb:ed:8f:6c:88:d9:98:bb:aa:29:b5:f2:a7:
                    83:29:d8:78:a5:e6:87:6b:86:48:8e:1b:e5:88:2a:
                    53:5d:60:4a:b5:92:92:f3:c5:1b:ba:43:23:e7:33:
                    66:f5:9b:00:e0:8a:67:c8:86:3f:28:8d:3c:82:c2:
                    b8:ab:a3:cb:97:40:65:5a:be:89:6a:1d:d8:4d:78:
                    09:0b:95:fa:20:7d:48:58:0c:bd:54:32:c1:83:e9:
                    c1:89:ae:e3:07:c2:cf:2d:06:12:33:81:ef:76:82:
                    54:7f:26:14:6a:fa:27:08:86:ef:62:21:2e:b6:84:
                    c4:ef:b5:79:5a:78:3e:80:98:a4:ee:1d:89:55:ef:
                    ab:bd:a3:3c:61:d0:b9:f3:81:d3:da:4b:6a:ff:9f:
                    a3:3c:16:86:50:0d:56:3b:24:0b:5c:03:ac:6e:e5:
                    55:3b:22:27:fd:d8:79:e5:76:66:fa:d2:5d:e6:3c:
                    57:4a:b2:28:da:cd:b1:b4:af:67:30:13:5f:82:f5:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:63:2D:DF:20:F2:A5:2A:62:F1:B3:28:CB:A8:0A:79:0C:80:2C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e38392e3234392e302f32342d3234203d3e20323033373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:3b:dd:d2:71:34:1d:6b:c3:cf:de:1f:f5:2f:97:b9:d8:
         75:27:7e:f3:ac:34:bf:ef:43:55:fa:41:10:11:12:07:22:d3:
         3d:94:d6:51:02:35:3e:d7:4e:36:b1:f5:86:da:b2:33:3d:dd:
         e5:dd:64:49:92:1f:c2:c1:ed:a0:85:7d:e8:9e:f7:f0:97:44:
         b2:a3:4f:67:3c:a9:d2:c0:7c:84:6d:5f:8e:1a:95:dc:85:9b:
         e6:fc:7a:30:47:a2:85:12:31:2e:cd:7a:e3:92:46:0c:7d:f4:
         d0:41:69:cc:f5:4d:3f:bd:90:7c:f4:14:7b:65:bd:79:fc:40:
         3a:9e:d6:03:3e:0e:48:5e:6e:8e:a4:23:d0:e8:94:f0:0b:46:
         af:36:5d:3f:74:8e:e2:8d:15:ca:2f:10:79:63:ad:52:63:17:
         71:7d:1d:a3:b2:2a:10:00:34:00:f4:e0:0d:69:3a:0e:05:c5:
         61:78:41:0d:a9:b4:59:9b:51:6f:8a:50:7b:8d:4c:01:f3:cb:
         12:1a:c7:cb:8f:84:26:87:22:12:03:14:3e:3c:39:6a:cb:4a:
         98:16:44:4d:53:c1:dd:47:0e:8d:f4:49:67:59:be:8e:8e:3b:
         e3:04:c2:7f:55:2c:89:4d:ef:1d:5a:e1:68:3d:6f:28:a4:f0:
         c6:f3:79:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org