Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136312e302f32342d3234203d3e203631333137.roa
File:                     352e3235322e3136312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Z3sytIjhaUOLuZO6GkTE9jDUL5fctlgwxGiDsLBoExk=
Subject key identifier:   B9:FC:EB:04:07:21:F7:2A:B6:6E:67:BC:D2:89:A1:CA:63:15:09:8B
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       1F3D3BF8040C9280A09298F7B4FDB5E9C238F544
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136312e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:44 +0000
ROA not before:           Mon 29 Nov 2021 07:58:44 +0000
ROA not after:            Mon 28 Nov 2022 08:03:44 +0000
asID:                     61317
IP address blocks:        5.252.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3d:3b:f8:04:0c:92:80:a0:92:98:f7:b4:fd:b5:e9:c2:38:f5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:44 2021 GMT
            Not After : Nov 28 08:03:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:42:25:74:e7:e6:19:64:14:2d:54:84:94:30:
                    91:55:4d:30:e6:25:b7:c2:e6:99:27:fa:ed:c6:80:
                    59:5c:29:4d:75:fd:4d:4a:84:1b:21:39:4e:55:bb:
                    1d:c5:7f:55:84:84:89:97:e4:d9:33:6a:5e:12:72:
                    71:9e:ba:38:e7:19:e6:d1:83:8a:97:5d:87:46:9a:
                    fd:5d:0c:a0:f1:59:71:52:61:56:8b:38:85:39:c8:
                    ed:a0:a7:4e:22:6f:79:b2:74:86:30:51:4a:47:c1:
                    29:fb:0d:12:61:bb:c6:b2:ed:31:ae:cf:85:01:a6:
                    19:b3:fd:42:4e:d1:70:62:82:e7:1d:d9:e5:d9:09:
                    3a:74:f9:6a:6a:f3:3b:bc:10:2a:d7:e9:fc:82:06:
                    de:90:4d:ea:6d:8a:3b:2c:8b:a3:5f:04:90:2d:79:
                    d5:61:42:bc:5c:5c:b1:86:91:48:0c:f5:5b:08:56:
                    e3:f1:9b:56:61:76:36:e6:8d:5f:20:36:66:55:1e:
                    29:08:32:1c:be:33:b5:89:cf:79:c6:0c:6e:48:8e:
                    cb:2d:3c:07:34:ee:b2:c5:4f:c8:7c:59:ee:42:f9:
                    3c:31:ca:8b:50:5a:d5:c2:a7:0d:a7:48:b5:5e:ad:
                    43:04:d1:74:ec:4b:8a:8c:f6:59:04:8f:3a:35:f7:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:EB:04:07:21:F7:2A:B6:6E:67:BC:D2:89:A1:CA:63:15:09:8B
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e3136312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:c4:92:fe:66:8c:1d:45:32:e4:99:98:41:69:ad:ce:b2:
         38:1f:1e:fb:9c:cf:ed:cd:85:1b:ef:42:92:c9:f5:35:29:2b:
         13:32:33:cc:9c:07:10:22:f0:6e:2c:df:75:34:2d:41:fb:69:
         35:33:5f:77:19:5c:8f:c8:12:29:78:18:fd:06:3a:c1:22:62:
         1d:77:35:c6:bb:8a:4c:a1:1d:f2:19:6a:bf:a1:48:07:db:8c:
         d8:a7:3b:ae:d3:b5:26:db:8e:f6:53:f6:21:c8:ff:dd:4b:39:
         1e:d4:95:22:0b:da:83:e6:7f:f6:cb:e1:79:29:9a:82:f4:58:
         37:81:d6:79:5b:e0:4e:9d:9f:4d:c7:c3:53:6c:15:aa:60:07:
         7f:ab:53:35:77:0f:cd:ac:5f:ce:f6:77:69:bc:a1:8e:50:6f:
         22:e3:93:ee:3e:a3:a6:78:83:31:1e:11:ee:0a:54:13:bd:37:
         6e:ab:ac:26:e2:92:77:86:3c:57:54:fe:83:00:16:b6:aa:15:
         c8:cb:28:46:4d:01:4f:70:8f:32:10:ce:a6:dd:b3:36:68:ab:
         47:33:bb:51:7e:2d:7d:a0:fd:c1:af:eb:2c:64:9c:d1:d2:33:
         16:ff:d6:7b:c8:c6:b6:c4:a7:c5:45:1c:da:6f:f9:bc:8a:67:
         6b:6c:9c:91
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUHz07+AQMkoCgkpj3tP216cI49UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTExMjkwNzU4NDRaFw0yMjExMjgwODAzNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUI0MjI1NzRFN0U2MTk2NDE0
MkQ1NDg0OTQzMDkxNTU0RDMwRTYyNUI3QzJFNjk5MjdGQUVEQzY4MDU5NUMyOTRE
NzVGRDRENEE4NDFCMjEzOTRFNTVCQjFEQzU3RjU1ODQ4NDg5OTdFNEQ5MzM2QTVF
MTI3MjcxOUVCQTM4RTcxOUU2RDE4MzhBOTc1RDg3NDY5QUZENUQwQ0EwRjE1OTcx
NTI2MTU2OEIzODg1MzlDOEVEQTBBNzRFMjI2Rjc5QjI3NDg2MzA1MTRBNDdDMTI5
RkIwRDEyNjFCQkM2QjJFRDMxQUVDRjg1MDFBNjE5QjNGRDQyNEVEMTcwNjI4MkU3
MUREOUU1RDkwOTNBNzRGOTZBNkFGMzNCQkMxMDJBRDdFOUZDODIwNkRFOTA0REVB
NkQ4QTNCMkM4QkEzNUYwNDkwMkQ3OUQ1NjE0MkJDNUM1Q0IxODY5MTQ4MENGNTVC
MDg1NkUzRjE5QjU2NjE3NjM2RTY4RDVGMjAzNjY2NTUxRTI5MDgzMjFDQkUzM0I1
ODlDRjc5QzYwQzZFNDg4RUNCMkQzQzA3MzRFRUIyQzU0RkM4N0M1OUVFNDJGOTND
MzFDQThCNTA1QUQ1QzJBNzBEQTc0OEI1NUVBRDQzMDREMTc0RUM0QjhBOENGNjU5
MDQ4RjNBMzVGN0RCQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA60IldOfmGWQULVSElDCRVU0w5iW3wuaZJ/rtxoBZXClNdf1NSoQb
ITlOVbsdxX9VhISJl+TZM2peEnJxnro45xnm0YOKl12HRpr9XQyg8VlxUmFWiziF
OcjtoKdOIm95snSGMFFKR8Ep+w0SYbvGsu0xrs+FAaYZs/1CTtFwYoLnHdnl2Qk6
dPlqavM7vBAq1+n8ggbekE3qbYo7LIujXwSQLXnVYUK8XFyxhpFIDPVbCFbj8ZtW
YXY25o1fIDZmVR4pCDIcvjO1ic95xgxuSI7LLTwHNO6yxU/IfFnuQvk8McqLUFrV
wqcNp0i1Xq1DBNF07EuKjPZZBI86NffbuwIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FLn86wQHIfcqtm5nvNKJocpjFQmLMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zNTJlMzIzNTMy
MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQABfyhMA0GCSqGSIb3DQEBCwUAA4IBAQAsocSS/maMHUUy5JmYQWmtzrI4
Hx77nM/tzYUb70KSyfU1KSsTMjPMnAcQIvBuLN91NC1B+2k1M193GVyPyBIpeBj9
BjrBImIddzXGu4pMoR3yGWq/oUgH24zYpzuu07Um2472U/YhyP/dSzke1JUiC9qD
5n/2y+F5KZqC9Fg3gdZ5W+BOnZ9Nx8NTbBWqYAd/q1M1dw/NrF/O9ndpvKGOUG8i
45PuPqOmeIMxHhHuClQTvTduq6wm4pJ3hjxXVP6DABa2qhXIyyhGTQFPcI8yEM6m
3bM2aKtHM7tRfi19oP3Br+ssZJzR0jMW/9Z7yMa2xKfFRRzab/m8imdrbJyR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org