Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e37382e302f32342d3234203d3e203631333137.roa
File:                     352e3235322e37382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          1q0V/k3wjhE6oGVaELx3Pz6hy6Of4Ii7agiDzhJ1B0Q=
Subject key identifier:   C2:B5:07:3A:4F:A4:CF:38:00:80:B8:B2:19:4B:54:95:B0:A3:3D:9C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       37867244C3F05DCA75BF839D69B3529ECBC2A910
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e37382e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 13 Dec 2021 15:10:05 +0000
ROA not before:           Mon 13 Dec 2021 15:05:05 +0000
ROA not after:            Mon 12 Dec 2022 15:10:05 +0000
asID:                     61317
IP address blocks:        5.252.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:86:72:44:c3:f0:5d:ca:75:bf:83:9d:69:b3:52:9e:cb:c2:a9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 13 15:05:05 2021 GMT
            Not After : Dec 12 15:10:05 2022 GMT
        Subject: CN=3082010A0282010100AF1E8E5DFEEB68450B53A6D8B3D1A57DFAC8EFB1115053E640A0967470E8077ACA6848A9E766EEDEC79AC9A98DE9336614964C21A826FD82DBF44F13B4DD8DA0A597437B1AA9C89100E54852F22A73350ED0C2DA1BFF34F11076470389600CF22153C25821E7857ACDDE9513974160114389ED44843D38E2D3C6A758FA118032A423ABED46641D6541507B822426B327800DA719D9F493A85AF1C4786DE93F804A1F7E0F10C12126FC44A7D2DC725258F16050D800E4B981A8FAB98C9C4AC4C670387B57DFBCD8764CC5749A746B7523C4DB211FDF46D0A51B48B29B04606443CFE09CE373C22478FE4DCCA6E5FA7F42259967D9523B8DFD2AE70B572CE9724D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:8e:5d:fe:eb:68:45:0b:53:a6:d8:b3:d1:
                    a5:7d:fa:c8:ef:b1:11:50:53:e6:40:a0:96:74:70:
                    e8:07:7a:ca:68:48:a9:e7:66:ee:de:c7:9a:c9:a9:
                    8d:e9:33:66:14:96:4c:21:a8:26:fd:82:db:f4:4f:
                    13:b4:dd:8d:a0:a5:97:43:7b:1a:a9:c8:91:00:e5:
                    48:52:f2:2a:73:35:0e:d0:c2:da:1b:ff:34:f1:10:
                    76:47:03:89:60:0c:f2:21:53:c2:58:21:e7:85:7a:
                    cd:de:95:13:97:41:60:11:43:89:ed:44:84:3d:38:
                    e2:d3:c6:a7:58:fa:11:80:32:a4:23:ab:ed:46:64:
                    1d:65:41:50:7b:82:24:26:b3:27:80:0d:a7:19:d9:
                    f4:93:a8:5a:f1:c4:78:6d:e9:3f:80:4a:1f:7e:0f:
                    10:c1:21:26:fc:44:a7:d2:dc:72:52:58:f1:60:50:
                    d8:00:e4:b9:81:a8:fa:b9:8c:9c:4a:c4:c6:70:38:
                    7b:57:df:bc:d8:76:4c:c5:74:9a:74:6b:75:23:c4:
                    db:21:1f:df:46:d0:a5:1b:48:b2:9b:04:60:64:43:
                    cf:e0:9c:e3:73:c2:24:78:fe:4d:cc:a6:e5:fa:7f:
                    42:25:99:67:d9:52:3b:8d:fd:2a:e7:0b:57:2c:e9:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B5:07:3A:4F:A4:CF:38:00:80:B8:B2:19:4B:54:95:B0:A3:3D:9C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e37382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:c2:41:d0:b1:90:43:8f:3a:0f:6a:13:d1:01:da:a1:06:
         15:5b:83:25:84:50:ba:82:92:94:24:40:bc:f4:7e:15:2c:39:
         a1:93:5c:2a:32:fa:3e:70:61:a4:1d:fe:0f:46:a1:26:96:1d:
         ec:85:4b:cc:96:11:77:52:f5:cc:39:11:4e:21:69:52:78:d6:
         05:13:54:17:42:51:2b:74:c9:5e:18:e0:f9:f0:76:a8:3a:21:
         2f:53:40:e2:a2:c7:fe:ff:db:e5:34:91:c8:77:0b:fc:c5:d4:
         ab:d9:65:5a:d9:69:4b:4e:9f:8a:83:88:cc:8b:02:98:26:66:
         fb:d5:71:11:f1:89:7b:56:3f:7a:05:06:56:49:72:28:2a:aa:
         81:ab:92:6e:5c:2f:9f:01:aa:3a:21:d3:7b:c7:90:37:db:17:
         42:7b:99:7c:e1:4a:03:11:07:d1:96:97:bc:bb:6f:48:c4:2b:
         b1:96:ef:1c:2e:33:7c:fa:05:8a:c3:0a:67:32:1f:1a:03:80:
         bb:1a:bd:14:dd:65:7d:e5:0e:b5:79:0b:1e:26:98:17:46:71:
         77:48:55:b0:8d:a8:0a:06:34:5a:c1:58:c3:63:5a:21:d3:56:
         1e:46:25:42:1e:7d:16:ac:ed:5e:21:e4:77:55:90:7c:0d:a6:
         e7:a2:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org