Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133332e302f32342d3234203d3e203631333137.roa
File:                     352e3138312e3133332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          5Es+rgRhNYxm54+RK5tfhkDpOtfi+Y1+XSf94i9AjKc=
Subject key identifier:   C9:EE:21:82:B3:16:1F:C4:F2:73:C5:3D:E4:C6:85:A5:73:82:E3:DB
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6E935764DCF115E1020F7C8C508EF2B20B30D27F
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133332e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 08 Dec 2021 15:05:38 +0000
ROA not before:           Wed 08 Dec 2021 15:00:38 +0000
ROA not after:            Wed 07 Dec 2022 15:05:38 +0000
asID:                     61317
IP address blocks:        5.181.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:93:57:64:dc:f1:15:e1:02:0f:7c:8c:50:8e:f2:b2:0b:30:d2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec  8 15:00:38 2021 GMT
            Not After : Dec  7 15:05:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:db:0e:77:25:2e:5b:85:73:05:33:05:01:
                    f4:28:e4:a7:9a:9b:ee:ac:04:b4:6c:09:b8:c0:29:
                    f7:69:86:ec:b7:5d:e5:a7:09:6a:92:c4:33:62:c7:
                    25:84:9e:98:a1:05:f3:93:bd:6b:5c:72:4a:1a:ee:
                    3b:51:97:75:8b:03:46:c7:72:f7:fe:7a:8b:66:3e:
                    7a:5e:a7:32:a4:94:3e:bb:fd:a6:fd:cf:bc:c4:e6:
                    08:d8:55:c1:2b:a6:3e:27:31:71:bc:ce:2f:6b:ac:
                    4d:78:cd:fc:32:55:95:8e:f1:d5:0f:a0:df:5f:ce:
                    7d:17:a6:1d:a0:df:5c:16:fc:bc:ff:1e:91:0e:bb:
                    b5:db:6b:29:e1:b7:58:25:e2:bc:ad:06:7e:6c:04:
                    b2:99:13:90:50:34:65:2f:1a:34:fe:9b:60:10:68:
                    7c:ea:2c:ef:5a:de:87:e8:42:98:7e:9b:9f:49:89:
                    41:62:7a:fe:a6:01:f7:85:68:54:6d:18:8d:20:39:
                    42:c9:6f:42:2d:47:0d:16:3f:11:c2:ce:0f:ef:1b:
                    f0:79:36:1c:dd:c3:e2:cc:a5:dd:e2:e6:a4:e2:ba:
                    48:90:d7:e4:d5:e6:1c:5f:bf:dc:ce:31:5b:0e:60:
                    ca:0c:27:dd:aa:91:7f:b9:ea:96:5c:eb:be:69:e2:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EE:21:82:B3:16:1F:C4:F2:73:C5:3D:E4:C6:85:A5:73:82:E3:DB
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:0e:74:3a:5b:93:3f:b3:27:3e:f9:7c:bb:31:b9:44:a1:
         70:a8:da:8c:10:78:ec:37:2d:ea:e4:fa:f5:74:7f:1f:38:05:
         15:f9:74:eb:98:9e:b4:b9:63:9c:15:ad:d5:e4:7a:06:d7:e7:
         70:b9:f1:0d:70:90:bb:9c:32:e5:a1:f5:94:4d:bf:de:f1:a5:
         e5:14:e6:7f:68:66:3c:83:88:23:80:c3:9b:12:3d:3b:4e:7a:
         68:44:ef:86:85:b4:69:92:fe:63:3c:c6:6f:a2:fc:59:2d:45:
         2c:59:70:62:5f:a5:55:44:ba:a1:7e:d6:a4:73:4c:33:a1:b1:
         4f:db:bc:09:f4:a8:f0:68:a9:91:4a:a9:15:d1:fb:87:8a:89:
         78:b0:07:e1:fd:47:58:40:f1:d6:9f:5a:66:33:6f:8e:6a:24:
         c7:f9:61:46:af:37:3f:ba:fa:40:80:22:d1:95:f9:2c:30:24:
         ec:dd:e5:64:a0:09:e5:cc:8e:26:28:55:f3:ea:a4:a1:77:92:
         77:b4:93:78:59:8d:32:ba:e3:7f:49:2f:1b:4a:63:46:3e:8e:
         c3:e1:e4:af:bc:d2:7a:bc:d9:5c:90:fe:47:21:05:6c:24:78:
         ba:1b:55:a3:ef:b1:26:25:3d:dc:f7:d5:ca:6d:b4:a1:5f:b6:
         62:3a:9d:c5
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUbpNXZNzxFeECD3yMUI7ysgsw0n8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTEyMDgxNTAwMzhaFw0yMjEyMDcxNTA1MzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUExOERCMEU3NzI1MkU1Qjg1
NzMwNTMzMDUwMUY0MjhFNEE3OUE5QkVFQUMwNEI0NkMwOUI4QzAyOUY3Njk4NkVD
Qjc1REU1QTcwOTZBOTJDNDMzNjJDNzI1ODQ5RTk4QTEwNUYzOTNCRDZCNUM3MjRB
MUFFRTNCNTE5Nzc1OEIwMzQ2Qzc3MkY3RkU3QThCNjYzRTdBNUVBNzMyQTQ5NDNF
QkJGREE2RkRDRkJDQzRFNjA4RDg1NUMxMkJBNjNFMjczMTcxQkNDRTJGNkJBQzRE
NzhDREZDMzI1NTk1OEVGMUQ1MEZBMERGNUZDRTdEMTdBNjFEQTBERjVDMTZGQ0JD
RkYxRTkxMEVCQkI1REI2QjI5RTFCNzU4MjVFMkJDQUQwNjdFNkMwNEIyOTkxMzkw
NTAzNDY1MkYxQTM0RkU5QjYwMTA2ODdDRUEyQ0VGNUFERTg3RTg0Mjk4N0U5QjlG
NDk4OTQxNjI3QUZFQTYwMUY3ODU2ODU0NkQxODhEMjAzOTQyQzk2RjQyMkQ0NzBE
MTYzRjExQzJDRTBGRUYxQkYwNzkzNjFDRERDM0UyQ0NBNURERTJFNkE0RTJCQTQ4
OTBEN0U0RDVFNjFDNUZCRkRDQ0UzMTVCMEU2MENBMEMyN0REQUE5MTdGQjlFQTk2
NUNFQkJFNjlFMjMxOTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqhjbDnclLluFcwUzBQH0KOSnmpvurAS0bAm4wCn3aYbst13lpwlq
ksQzYsclhJ6YoQXzk71rXHJKGu47UZd1iwNGx3L3/nqLZj56XqcypJQ+u/2m/c+8
xOYI2FXBK6Y+JzFxvM4va6xNeM38MlWVjvHVD6DfX859F6YdoN9cFvy8/x6RDru1
22sp4bdYJeK8rQZ+bASymROQUDRlLxo0/ptgEGh86izvWt6H6EKYfpufSYlBYnr+
pgH3hWhUbRiNIDlCyW9CLUcNFj8Rws4P7xvweTYc3cPizKXd4uak4rpIkNfk1eYc
X7/czjFbDmDKDCfdqpF/ueqWXOu+aeIxmQIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FMnuIYKzFh/E8nPFPeTGhaVzguPbMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zNTJlMzEzODMx
MmUzMTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQABbWFMA0GCSqGSIb3DQEBCwUAA4IBAQBdGw50OluTP7MnPvl8uzG5RKFw
qNqMEHjsNy3q5Pr1dH8fOAUV+XTrmJ60uWOcFa3V5HoG1+dwufENcJC7nDLlofWU
Tb/e8aXlFOZ/aGY8g4gjgMObEj07TnpoRO+GhbRpkv5jPMZvovxZLUUsWXBiX6VV
RLqhftakc0wzobFP27wJ9KjwaKmRSqkV0fuHiol4sAfh/UdYQPHWn1pmM2+OaiTH
+WFGrzc/uvpAgCLRlfksMCTs3eVkoAnlzI4mKFXz6qShd5J3tJN4WY0yuuN/SS8b
SmNGPo7D4eSvvNJ6vNlckP5HIQVsJHi6G1Wj77EmJT3c99XKbbShX7ZiOp3F
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org