Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e39352e31342e302f32342d3234203d3e2039303039.roa
File:                     34352e39352e31342e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          UgkcMdlHo+a7BAcgxjAZzj31t0e6Ysxcu5DOK05Tjfs=
Subject key identifier:   42:E4:1A:50:B5:4F:BF:38:B4:DC:85:81:72:C6:99:94:6A:27:69:0D
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       54124795CE28ABD899FD56CDA473EFAB19770D35
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e39352e31342e302f32342d3234203d3e2039303039.roa
Signing time:             Mon 29 Nov 2021 08:24:35 +0000
ROA not before:           Mon 29 Nov 2021 08:19:35 +0000
ROA not after:            Mon 28 Nov 2022 08:24:35 +0000
asID:                     9009
IP address blocks:        45.95.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:12:47:95:ce:28:ab:d8:99:fd:56:cd:a4:73:ef:ab:19:77:0d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 08:19:35 2021 GMT
            Not After : Nov 28 08:24:35 2022 GMT
        Subject: CN=3082010A0282010100BEF996E4CBD8AB2B3171262E231CB0F8C9C6378DDFF571E788B2C76A474F6DA58A79EC84CF1EC838B1431CD3B0D554DD1D0AB06C9F19815A76066A6B0E3AFEF0B4E3E00017514D5FF1DFC98CE631209289A9DC7E2CF5B543883B0036A023BD9818C5BC3DDD30988E01B7B4A72E3AFCB04635BF364040093C5430701EE9CE46E5FF624D35591724193AFDA670902B97900BF64F9EB5E9F81E4B966BC083655B498D38F8AD2F6EBB699A64DEA9778C8B0E332093F1C035088DEC76DDAA09B9547E8FAFFB7EC6B1BFFD18AA918FB599A10723A35C5621A1CABA5E05024197E9183243113F25BD54307C8EE207E850CEAB16A7B3465EA3847DBB984E99C6803E092B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:96:e4:cb:d8:ab:2b:31:71:26:2e:23:1c:
                    b0:f8:c9:c6:37:8d:df:f5:71:e7:88:b2:c7:6a:47:
                    4f:6d:a5:8a:79:ec:84:cf:1e:c8:38:b1:43:1c:d3:
                    b0:d5:54:dd:1d:0a:b0:6c:9f:19:81:5a:76:06:6a:
                    6b:0e:3a:fe:f0:b4:e3:e0:00:17:51:4d:5f:f1:df:
                    c9:8c:e6:31:20:92:89:a9:dc:7e:2c:f5:b5:43:88:
                    3b:00:36:a0:23:bd:98:18:c5:bc:3d:dd:30:98:8e:
                    01:b7:b4:a7:2e:3a:fc:b0:46:35:bf:36:40:40:09:
                    3c:54:30:70:1e:e9:ce:46:e5:ff:62:4d:35:59:17:
                    24:19:3a:fd:a6:70:90:2b:97:90:0b:f6:4f:9e:b5:
                    e9:f8:1e:4b:96:6b:c0:83:65:5b:49:8d:38:f8:ad:
                    2f:6e:bb:69:9a:64:de:a9:77:8c:8b:0e:33:20:93:
                    f1:c0:35:08:8d:ec:76:dd:aa:09:b9:54:7e:8f:af:
                    fb:7e:c6:b1:bf:fd:18:aa:91:8f:b5:99:a1:07:23:
                    a3:5c:56:21:a1:ca:ba:5e:05:02:41:97:e9:18:32:
                    43:11:3f:25:bd:54:30:7c:8e:e2:07:e8:50:ce:ab:
                    16:a7:b3:46:5e:a3:84:7d:bb:98:4e:99:c6:80:3e:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E4:1A:50:B5:4F:BF:38:B4:DC:85:81:72:C6:99:94:6A:27:69:0D
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/34352e39352e31342e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:77:b1:0e:09:80:4c:37:64:16:d2:95:93:7c:2d:d0:9c:8f:
         0b:f1:a5:a8:2a:be:e0:e4:87:be:40:1a:db:1a:7c:6d:f8:a8:
         58:db:89:0f:68:4a:a9:93:0a:df:57:fa:b2:94:d0:b7:d4:b2:
         61:3a:35:17:0b:6a:43:ac:31:bf:69:01:20:80:f9:09:53:33:
         d4:da:9c:c1:33:25:af:d2:1a:60:96:cb:93:b1:1b:a2:5b:74:
         10:23:14:12:7e:0e:7d:43:cd:1b:fb:59:b2:94:c4:b4:42:96:
         d4:07:86:c1:fb:ff:6e:d2:a8:ca:81:33:d0:67:4e:46:b2:86:
         2e:53:c0:89:ad:13:dd:c6:de:ad:a1:11:5e:c3:01:0a:1a:ab:
         49:53:e4:ab:13:35:02:42:9a:fe:a7:38:d7:4c:29:9c:d7:ba:
         7a:28:8c:8a:b4:20:43:c4:08:2d:ec:37:18:15:6e:41:e6:e0:
         e4:14:85:41:6c:8d:3e:33:12:80:d9:7a:f0:0a:0f:03:6f:32:
         be:11:6f:e0:36:b0:e4:e4:c3:1b:7a:5e:e4:a3:fd:a0:40:94:
         73:2b:e0:dc:f8:96:1b:ba:40:89:ad:02:eb:72:47:e5:fd:5e:
         78:66:08:47:da:c2:4c:d2:6b:b3:1a:2d:91:4d:5d:76:29:72:
         b5:fa:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org