Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e20323131353838.roa
File:                     352e3138312e3133342e302f32342d3234203d3e20323131353838.roa (raw, json)
Hash identifier:          wuFXiDv58anxUeShiv5nh0621AuiMm80qdGQxoo6Grg=
Subject key identifier:   A9:BD:5F:C6:F7:90:62:C1:D2:30:EE:FE:61:1A:DC:E8:91:23:9E:9A
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1993DA628B4AF94A0FA7670CB04044D6C1DEA82C
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e20323131353838.roa
Signing time:             Wed 23 Feb 2022 21:10:54 +0000
ROA not before:           Wed 23 Feb 2022 21:05:54 +0000
ROA not after:            Wed 22 Feb 2023 21:10:54 +0000
asID:                     211588
IP address blocks:        5.181.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:93:da:62:8b:4a:f9:4a:0f:a7:67:0c:b0:40:44:d6:c1:de:a8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Feb 23 21:05:54 2022 GMT
            Not After : Feb 22 21:10:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:9b:e5:c1:84:fd:16:ce:02:fa:12:f3:b3:
                    0d:8f:51:f1:cb:68:35:12:13:d6:09:29:4b:5f:04:
                    52:a3:5c:22:b5:ed:09:6e:a2:c7:d0:51:81:6b:69:
                    e0:95:cf:3f:cc:64:60:f5:19:12:8d:14:e8:2b:e5:
                    57:59:ec:29:26:cb:f1:df:56:31:9a:df:4d:11:91:
                    2d:35:1f:c1:b2:c2:26:ba:27:b9:32:91:5a:ec:74:
                    d5:f9:83:c8:3f:f9:d5:00:ce:5e:d3:02:25:15:35:
                    ab:03:94:ad:e6:19:e8:c4:33:c8:49:9c:71:f5:09:
                    e2:18:c7:e3:8e:bb:97:24:95:66:00:ea:68:a3:3b:
                    b1:67:6c:6d:65:84:c9:94:f9:44:76:86:1a:8b:0e:
                    16:7b:b4:f6:a8:99:3d:0b:6f:6a:f7:36:e0:52:1e:
                    ae:46:26:ed:fa:54:c4:3d:ff:e9:64:20:1f:ce:04:
                    86:28:b9:5e:aa:2b:d1:d3:48:39:e8:a9:ea:75:a5:
                    f6:29:8f:42:7f:3a:bc:06:2c:12:8c:50:a4:e1:aa:
                    60:82:7d:95:9b:24:08:a2:59:17:3a:56:dc:4a:88:
                    5f:46:ff:1d:86:9d:9a:03:ca:56:ce:71:8e:6c:1d:
                    0a:ef:e0:10:be:b1:15:1c:1f:bd:56:e0:85:c0:12:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:5F:C6:F7:90:62:C1:D2:30:EE:FE:61:1A:DC:E8:91:23:9E:9A
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3138312e3133342e302f32342d3234203d3e20323131353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:96:98:e2:58:bb:88:44:35:01:f2:62:b4:9b:ad:56:7d:54:
         9e:fc:39:00:bf:33:4a:9e:9b:15:c7:0f:d6:06:b3:67:e9:38:
         e2:f0:76:7c:bc:dd:93:ab:52:c9:2e:e2:74:7d:50:f3:2a:ca:
         d8:df:e6:57:b2:f4:40:18:d5:60:78:0d:b7:c0:fb:35:e8:af:
         14:10:35:6e:d7:1f:6d:86:f8:dc:f2:32:ad:ff:bf:a2:7c:0d:
         ab:ab:a1:73:93:55:b1:cb:53:d7:ed:b6:80:9c:c1:00:52:75:
         91:f3:6f:44:26:93:e8:7b:8c:03:5a:25:7a:f5:0b:ce:83:ca:
         b5:1c:fd:60:d1:26:47:92:bd:63:e0:0c:2f:5f:e4:0a:10:46:
         b5:73:c1:49:e1:bf:b4:4a:33:34:d6:a8:34:9f:10:53:5d:db:
         9b:c5:64:a7:76:dd:dc:1c:1e:f4:39:f4:a6:c1:b4:4d:51:e3:
         df:58:42:16:3c:7c:db:02:7e:fe:5e:4d:06:9d:9e:28:73:f1:
         53:51:0c:7c:64:71:ea:35:3e:4f:ab:68:13:de:5f:a8:a5:74:
         64:61:d0:27:9a:f0:75:05:90:f5:09:9a:8c:b5:8a:49:47:3d:
         9b:bf:51:b3:d2:25:65:78:d4:6d:8f:c2:68:5e:35:a7:ea:58:
         d8:78:56:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org