Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38332e302f32342d3234203d3e203539383136.roa
File:                     352e3235322e38332e302f32342d3234203d3e203539383136.roa (raw, json)
Hash identifier:          GmsjYJccrQu9ny+PB3swnEg7HpkbqgCVB4tp45QqARo=
Subject key identifier:   18:2B:74:73:03:F4:99:3A:84:94:13:49:0F:7D:19:F0:B4:84:D4:EA
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       369EDFE0E865528A81DD6916F850E91DE9D9A33F
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38332e302f32342d3234203d3e203539383136.roa
Signing time:             Mon 20 Dec 2021 16:05:52 +0000
ROA not before:           Mon 20 Dec 2021 16:00:52 +0000
ROA not after:            Mon 19 Dec 2022 16:05:52 +0000
asID:                     59816
IP address blocks:        5.252.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9e:df:e0:e8:65:52:8a:81:dd:69:16:f8:50:e9:1d:e9:d9:a3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Dec 20 16:00:52 2021 GMT
            Not After : Dec 19 16:05:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:e9:0f:24:96:98:a3:2f:9a:c9:1b:9a:9f:
                    40:e0:9b:a6:71:a9:3a:87:66:65:c0:7b:08:d2:3d:
                    b0:cb:99:cc:35:d2:08:d2:12:6f:39:d8:9d:af:ce:
                    9d:c1:80:15:7b:2f:48:a7:9f:78:5a:eb:5f:69:a4:
                    58:8b:9f:f5:06:42:b4:48:6c:74:63:78:d4:72:4a:
                    d1:05:4c:5e:93:2f:bd:53:c2:57:c0:f8:2f:a2:73:
                    c0:2f:5f:23:e4:93:db:5e:c4:2b:15:79:14:b2:85:
                    17:3c:fa:c3:04:ed:2a:f9:d5:d7:bc:4c:34:b0:24:
                    0b:c8:bf:ff:30:ea:59:85:11:ab:24:1a:16:72:02:
                    79:6a:9e:dd:69:34:b1:5d:f3:48:9e:7e:16:7d:f9:
                    ba:5c:8f:db:49:1b:59:8b:cf:56:6b:b0:12:b7:a1:
                    f8:3d:80:b5:d5:8c:2e:25:cc:1f:cc:8f:66:15:35:
                    54:6c:84:9c:bc:b4:01:fd:07:ca:0b:41:57:da:46:
                    41:36:59:fe:f4:b0:68:61:19:77:72:fd:b7:da:72:
                    2b:ad:38:a5:bb:b2:ed:3e:a7:d4:d0:73:74:4b:e6:
                    09:8e:a3:df:36:de:d1:eb:f4:d0:b2:7b:e8:a9:8b:
                    62:3e:7f:63:80:85:8c:ee:36:e5:af:ec:b8:c8:55:
                    1e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:74:73:03:F4:99:3A:84:94:13:49:0F:7D:19:F0:B4:84:D4:EA
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/352e3235322e38332e302f32342d3234203d3e203539383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:72:bc:cf:b9:17:74:20:82:1e:66:09:e3:3e:d4:95:59:b5:
         5a:ab:d9:e2:fe:70:fe:07:b0:86:f1:11:ce:70:50:e7:2f:d5:
         b5:04:3f:c4:27:5a:0b:c0:5f:46:27:f7:ba:22:b5:ac:c8:54:
         5f:6d:a6:bd:93:88:4a:3d:4b:0d:83:9f:7e:25:50:a4:77:9c:
         4f:7c:eb:d8:4e:82:da:e0:57:df:96:65:d7:24:be:e1:41:be:
         b9:a7:0b:54:34:fb:6f:39:5a:84:82:59:4f:06:18:67:35:d5:
         cb:2d:19:2f:ec:e5:20:88:34:10:73:cd:2e:7d:64:5a:21:b7:
         1d:06:32:f2:f4:a7:12:6e:c8:81:9e:ae:6c:f7:5a:c2:47:b0:
         da:4d:61:62:79:4b:57:7d:ac:47:f9:17:3e:7b:66:9c:a6:85:
         15:f5:74:bd:d0:b2:81:85:34:db:8d:b7:f9:2b:be:ea:59:b4:
         3b:7a:b2:89:2b:5a:af:86:01:47:a7:ad:ba:6f:87:40:61:95:
         27:80:8a:3b:9c:3a:72:b1:28:aa:47:0e:f1:fa:25:1a:df:a9:
         1d:04:df:df:bb:11:9a:64:6d:08:e1:a5:bb:d4:40:b9:aa:c9:
         22:17:e6:0e:fb:eb:f5:f1:15:ec:2e:45:5e:73:bb:f2:d6:22:
         09:76:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org