Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38302e302f32342d3234203d3e20343030333238.roa
File:                     352e3235322e38302e302f32342d3234203d3e20343030333238.roa (raw, json)
Hash identifier:          shNALS3zQ95sIeA/th2vHzJUqxYrpW+V3y1ErjTpzAQ=
Subject key identifier:   F5:6F:2D:70:25:0B:D0:DC:D1:C8:83:4A:07:39:9A:14:EB:B5:13:33
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       4ADF1D5EA6189380BA8696C20090DE9AB772E8A2
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38302e302f32342d3234203d3e20343030333238.roa
Signing time:             Sun 26 Dec 2021 05:57:29 +0000
ROA not before:           Sun 26 Dec 2021 05:52:29 +0000
ROA not after:            Sun 25 Dec 2022 05:57:29 +0000
asID:                     400328
IP address blocks:        5.252.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:1d:5e:a6:18:93:80:ba:86:96:c2:00:90:de:9a:b7:72:e8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 26 05:52:29 2021 GMT
            Not After : Dec 25 05:57:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:6d:55:89:c7:51:bc:68:05:80:41:4e:b0:
                    fe:29:1a:3c:fa:a9:62:1a:82:d5:f4:ed:8d:86:6d:
                    bf:f9:cf:6d:de:b1:98:f8:a3:6d:47:ea:4a:2e:14:
                    cd:4a:14:b6:c9:ba:c0:df:81:87:7c:cc:ec:b9:b4:
                    6c:07:f6:30:8d:9a:94:ee:79:d6:1d:b1:cc:c5:99:
                    6c:00:37:8a:07:7b:bc:b3:80:0b:30:51:43:2c:1d:
                    62:68:9d:a0:eb:7f:a3:98:19:ae:5c:39:8f:7c:cf:
                    03:3c:5c:8d:cb:69:13:6e:43:df:79:25:5e:56:df:
                    e1:03:86:12:a9:ab:2d:65:df:8c:6e:ac:f8:7c:2b:
                    fa:d6:b7:d8:8b:20:e8:bd:25:1b:65:d7:cb:ab:00:
                    93:64:3f:a0:d9:0f:30:b2:1f:ab:dd:db:34:d3:1d:
                    d6:ca:79:94:cd:51:ba:2b:3a:19:9d:e9:90:d2:06:
                    6b:61:55:77:a9:7d:c6:c2:0c:3e:64:83:1c:92:80:
                    03:b9:52:b8:39:03:40:e1:3f:20:ab:26:99:f6:6f:
                    55:51:de:3c:ef:ec:74:c5:b8:2e:37:aa:47:1f:79:
                    df:c5:58:a1:b4:df:72:6d:85:b3:64:bd:c9:11:d8:
                    62:d1:f2:af:9f:64:5d:99:f3:38:6d:d3:6b:81:98:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6F:2D:70:25:0B:D0:DC:D1:C8:83:4A:07:39:9A:14:EB:B5:13:33
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38302e302f32342d3234203d3e20343030333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:36:c6:5d:c5:6a:a2:77:f7:7d:8b:af:ca:77:a7:40:69:
         65:9e:f6:86:9d:3e:7b:83:2f:50:18:c0:de:b0:70:78:59:59:
         67:84:a7:d9:be:38:c1:c0:33:ac:15:eb:08:3a:be:57:f3:df:
         45:e7:33:75:0c:03:dc:1a:52:92:9c:5a:2d:dd:5b:5c:aa:d9:
         c0:c2:8a:3d:3d:76:2a:ae:39:af:4a:16:ab:15:35:38:8a:40:
         0a:86:d2:d1:25:01:b2:00:6b:f5:4f:55:34:ab:97:23:e0:87:
         f7:b0:d4:73:3d:0f:eb:a9:6e:02:3a:8b:48:30:41:e4:9d:c9:
         8b:fa:c8:00:23:2f:df:92:3b:8f:02:e0:15:18:d4:a6:6b:7d:
         88:26:43:a5:68:66:ae:bd:45:1c:0d:3d:ab:90:40:50:38:23:
         27:d4:e1:c2:3e:a9:9a:d8:25:cc:dd:4b:57:e3:3d:ae:2f:f0:
         b5:02:78:0a:b8:ef:2f:84:89:f9:2d:0e:dc:85:bb:ba:07:5c:
         21:f0:bb:99:78:19:53:c3:64:b5:84:ba:af:0b:66:4f:5b:c9:
         6c:91:5d:fb:6f:61:9a:43:5b:ff:17:05:18:d4:43:8f:66:9b:
         d3:73:5c:7f:52:83:74:94:b6:5b:9b:2e:e0:8b:bc:55:4a:51:
         b0:44:63:5a
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUSt8dXqYYk4C6hpbCAJDemrdy6KIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMTEyMjYwNTUyMjlaFw0yMjEyMjUwNTU3MjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBFMzZENTU4OUM3NTFCQzY4
MDU4MDQxNEVCMEZFMjkxQTNDRkFBOTYyMUE4MkQ1RjRFRDhEODY2REJGRjlDRjZE
REVCMTk4RjhBMzZENDdFQTRBMkUxNENENEExNEI2QzlCQUMwREY4MTg3N0NDQ0VD
QjlCNDZDMDdGNjMwOEQ5QTk0RUU3OUQ2MURCMUNDQzU5OTZDMDAzNzhBMDc3QkJD
QjM4MDBCMzA1MTQzMkMxRDYyNjg5REEwRUI3RkEzOTgxOUFFNUMzOThGN0NDRjAz
M0M1QzhEQ0I2OTEzNkU0M0RGNzkyNTVFNTZERkUxMDM4NjEyQTlBQjJENjVERjhD
NkVBQ0Y4N0MyQkZBRDZCN0Q4OEIyMEU4QkQyNTFCNjVEN0NCQUIwMDkzNjQzRkEw
RDkwRjMwQjIxRkFCREREQjM0RDMxREQ2Q0E3OTk0Q0Q1MUJBMkIzQTE5OURFOTkw
RDIwNjZCNjE1NTc3QTk3REM2QzIwQzNFNjQ4MzFDOTI4MDAzQjk1MkI4MzkwMzQw
RTEzRjIwQUIyNjk5RjY2RjU1NTFERTNDRUZFQzc0QzVCODJFMzdBQTQ3MUY3OURG
QzU1OEExQjRERjcyNkQ4NUIzNjRCREM5MTFEODYyRDFGMkFGOUY2NDVEOTlGMzM4
NkREMzZCODE5ODdEMTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsONtVYnHUbxoBYBBTrD+KRo8+qliGoLV9O2Nhm2/+c9t3rGY+KNt
R+pKLhTNShS2ybrA34GHfMzsubRsB/YwjZqU7nnWHbHMxZlsADeKB3u8s4ALMFFD
LB1iaJ2g63+jmBmuXDmPfM8DPFyNy2kTbkPfeSVeVt/hA4YSqastZd+Mbqz4fCv6
1rfYiyDovSUbZdfLqwCTZD+g2Q8wsh+r3ds00x3WynmUzVG6KzoZnemQ0gZrYVV3
qX3Gwgw+ZIMckoADuVK4OQNA4T8gqyaZ9m9VUd487+x0xbguN6pHH3nfxVihtN9y
bYWzZL3JEdhi0fKvn2RdmfM4bdNrgZh9EQIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FPVvLXAlC9Dc0ciDSgc5mhTrtRMzMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0
MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTMvMC8zNTJlMzIzNTMy
MmUzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMwMzMzMjM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQABfxQMA0GCSqGSIb3DQEBCwUAA4IBAQBZbDbGXcVqonf3fYuvynenQGll
nvaGnT57gy9QGMDesHB4WVlnhKfZvjjBwDOsFesIOr5X899F5zN1DAPcGlKSnFot
3VtcqtnAwoo9PXYqrjmvSharFTU4ikAKhtLRJQGyAGv1T1U0q5cj4If3sNRzPQ/r
qW4COotIMEHkncmL+sgAIy/fkjuPAuAVGNSma32IJkOlaGauvUUcDT2rkEBQOCMn
1OHCPqma2CXM3UtX4z2uL/C1AngKuO8vhIn5LQ7chbu6B1wh8LuZeBlTw2S1hLqv
C2ZPW8lskV37b2GaQ1v/FwUY1EOPZpvTc1x/UoN0lLZbmy7gi7xVSlGwRGNa
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org