Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38302e302f32322d3234203d3e203631333137.roa
File:                     352e3235322e38302e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +1F20y/g6d9Dk8tDEhQ9u2r7WbXs9CnyUf5LoSgARZg=
Subject key identifier:   EF:DA:AD:13:1D:26:1E:ED:22:4E:67:50:2B:B0:A8:0A:3E:3C:E4:EB
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       552AA61CBA75539CFBEC6E764DE429D8F1D711A8
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38302e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 29 Nov 2021 08:03:43 +0000
ROA not before:           Mon 29 Nov 2021 07:58:43 +0000
ROA not after:            Mon 28 Nov 2022 08:03:43 +0000
asID:                     61317
IP address blocks:        5.252.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2a:a6:1c:ba:75:53:9c:fb:ec:6e:76:4d:e4:29:d8:f1:d7:11:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Nov 29 07:58:43 2021 GMT
            Not After : Nov 28 08:03:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:e9:eb:ce:bd:bd:67:1b:2a:c6:d2:bc:2d:
                    95:94:bb:42:b7:1d:e8:f5:42:7d:a0:35:74:6a:b3:
                    fe:64:1d:bd:7d:e2:72:3a:fc:c8:42:0f:07:29:03:
                    17:84:e5:f8:0b:22:45:f4:a7:63:01:63:84:9f:5b:
                    ec:ce:b1:f2:48:f4:3a:5c:6d:fc:a2:e7:5c:11:8a:
                    28:93:d6:e8:9f:e7:83:87:30:e0:bd:8d:d3:5f:08:
                    97:8c:41:01:97:b5:42:d8:bc:af:98:32:bd:cb:5e:
                    ad:99:4f:eb:5e:1c:bc:73:51:22:5f:ff:b6:cf:0c:
                    5a:81:f8:13:eb:ce:e1:10:17:ff:b5:92:f7:46:e3:
                    42:30:26:36:36:62:fc:a4:8f:74:f7:9f:95:47:1e:
                    cf:d3:c1:43:8f:02:e4:2e:28:90:bd:d7:b0:f4:4e:
                    64:b6:e1:69:32:94:5a:24:8a:11:17:8d:c0:38:84:
                    a7:d6:3b:19:25:2d:50:cf:78:79:dd:6a:40:2e:03:
                    e5:26:9b:fb:85:ec:31:03:37:55:ac:be:24:c1:03:
                    4f:18:b1:02:89:b9:e1:40:9f:49:13:19:9f:56:1a:
                    eb:18:84:5c:4b:3a:f5:0a:94:d2:1b:ea:94:a6:ac:
                    39:6d:da:31:57:38:76:d5:d2:42:7d:b1:ce:81:bf:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DA:AD:13:1D:26:1E:ED:22:4E:67:50:2B:B0:A8:0A:3E:3C:E4:EB
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38302e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:c1:ad:fa:ac:a0:6f:84:f0:eb:67:cc:a6:64:4e:13:33:d0:
         06:14:10:d6:4b:f9:0e:35:46:6c:f3:ad:4c:60:87:cc:8a:9c:
         0e:3a:42:66:07:48:2b:aa:a1:09:73:9c:af:2f:ba:eb:ab:34:
         b0:97:77:1f:a3:46:ae:35:91:47:42:54:28:f0:11:3e:5b:fe:
         b5:06:f6:2a:6c:7f:a8:fa:19:d2:cd:db:11:29:59:c1:77:29:
         96:6d:25:70:0f:66:f0:e6:41:e4:09:a6:a1:d8:2b:53:cd:d9:
         e0:db:c7:7e:34:1e:e0:84:d2:b1:e2:1a:8e:5b:e5:05:22:1a:
         fc:88:b8:f1:5a:1b:bf:40:b4:0b:70:be:15:a3:fd:b1:87:17:
         5c:2d:8f:d5:67:a1:54:c0:3e:17:40:c7:c0:49:7e:8e:d5:ab:
         90:21:03:62:13:33:69:0c:f3:35:05:74:f0:d9:4f:0c:d8:14:
         85:bb:62:03:ae:b2:f8:57:dd:a1:46:27:b7:ec:36:1b:4e:4d:
         c5:29:8c:c7:47:74:28:23:8c:dc:de:f0:2e:85:2a:28:46:2d:
         7f:9c:b4:ba:07:7f:87:df:e7:db:27:49:f2:54:30:4d:b6:a8:
         71:b6:d0:e1:13:08:f7:68:4a:1c:fd:ac:2e:49:51:e4:8e:94:
         0a:ab:8c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org