Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12859.roa
File:                     AS12859.roa (raw, json)
Hash identifier:          3LFlAVATAJZfrK3xbt2dd5fvuca8BoE/Dc08D6eyRrU=
Subject key identifier:   A2:20:5A:A4:4A:E8:53:2A:7F:3C:C8:D7:CB:1E:39:42:96:C4:33:4E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       7A7FD3B233CCA0CC5FA5FB3B52220E2775885DA0
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12859.roa
Signing time:             Tue 08 Mar 2022 07:51:12 +0000
ROA not before:           Tue 08 Mar 2022 07:46:12 +0000
ROA not after:            Tue 07 Mar 2023 07:51:12 +0000
asID:                     12859
IP address blocks:        5.181.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7f:d3:b2:33:cc:a0:cc:5f:a5:fb:3b:52:22:0e:27:75:88:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  8 07:46:12 2022 GMT
            Not After : Mar  7 07:51:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:26:da:5b:8e:0b:dd:ec:c5:52:49:ba:cb:
                    d1:5e:c0:a4:20:08:3d:39:c1:67:d8:e3:c3:6a:93:
                    94:fb:70:01:25:c2:cb:4c:7b:09:26:6b:8f:7a:80:
                    58:88:a4:aa:fa:e9:d4:49:3c:3c:25:71:dd:c8:dc:
                    23:78:2a:5f:ca:15:95:75:cf:d7:a4:76:36:49:e9:
                    6c:ac:f5:01:37:53:25:51:04:36:e0:7f:85:be:1a:
                    08:ff:3a:dc:67:51:bb:f0:7f:df:8f:eb:85:9d:1f:
                    38:a8:18:5b:6f:61:5b:48:b3:e4:e2:c2:9f:7c:7f:
                    39:ca:f3:3b:27:36:40:80:8d:ee:17:68:42:d3:1b:
                    12:89:42:5f:e0:44:cb:30:cd:fa:db:01:29:37:f9:
                    95:f8:40:01:c3:f4:33:f2:73:89:47:aa:f4:e7:c3:
                    6a:ed:e7:ad:a6:4b:b5:02:37:b6:84:02:83:e7:73:
                    db:74:7b:c7:6a:e6:3f:d4:14:85:35:53:6a:91:4d:
                    16:da:1d:7d:6d:4d:a9:55:eb:bf:25:64:67:de:ee:
                    39:90:64:69:5d:c8:67:f0:16:f9:3e:94:c8:88:88:
                    9c:36:f6:b4:cc:50:24:4f:7f:62:24:06:db:40:06:
                    6b:96:42:b1:b5:07:be:cd:69:89:eb:78:f6:6a:c4:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:20:5A:A4:4A:E8:53:2A:7F:3C:C8:D7:CB:1E:39:42:96:C4:33:4E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS12859.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:1f:9b:16:b5:50:33:c5:f5:a9:43:19:40:48:cd:59:1d:3f:
         ff:c1:55:ce:25:35:f0:66:00:7a:b1:1e:01:82:2b:7e:e2:69:
         a8:10:30:41:85:b6:2d:ec:fe:95:f4:d1:cd:88:03:c0:4c:74:
         62:80:b1:0f:12:19:08:ba:62:96:b2:00:2e:77:24:ab:6d:ac:
         f6:91:ba:d3:dc:ee:0a:d9:95:54:04:a7:c1:55:dc:66:13:84:
         3f:ac:07:be:4e:5c:e2:a2:e2:22:a8:94:97:63:cd:94:0d:5e:
         8f:06:65:bf:5d:27:8f:cd:20:28:a6:36:07:c6:56:48:07:20:
         85:87:7f:43:ab:03:4e:cb:7a:b5:03:a6:d0:43:1f:bd:2b:53:
         25:25:c7:13:a9:59:73:cd:37:eb:19:30:b6:a2:f8:e0:fe:94:
         bf:ca:9f:5f:e5:5d:61:00:e0:10:8a:6c:9f:c9:b2:07:45:e8:
         f4:45:b9:2b:14:40:9a:9e:3c:fd:40:86:dd:7b:c2:19:ce:3a:
         df:17:dd:ff:08:a4:be:78:aa:fc:75:32:fd:a7:02:45:05:26:
         18:20:e8:73:17:ae:16:f3:7d:af:6d:9b:64:c0:a7:68:ac:9a:
         be:bf:90:0a:c5:be:96:8e:9b:24:c5:18:28:2a:9a:05:a3:8a:
         4f:a3:be:82
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUen/TsjPMoMxfpfs7UiIOJ3WIXaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1OUM5NEMx
RDdGOTcyOTAeFw0yMjAzMDgwNzQ2MTJaFw0yMzAzMDcwNzUxMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0E4RTI2REE1QjhFMEJEREVD
QzU1MjQ5QkFDQkQxNUVDMEE0MjAwODNEMzlDMTY3RDhFM0MzNkE5Mzk0RkI3MDAx
MjVDMkNCNEM3QjA5MjY2QjhGN0E4MDU4ODhBNEFBRkFFOUQ0NDkzQzNDMjU3MURE
QzhEQzIzNzgyQTVGQ0ExNTk1NzVDRkQ3QTQ3NjM2NDlFOTZDQUNGNTAxMzc1MzI1
NTEwNDM2RTA3Rjg1QkUxQTA4RkYzQURDNjc1MUJCRjA3RkRGOEZFQjg1OUQxRjM4
QTgxODVCNkY2MTVCNDhCM0U0RTJDMjlGN0M3RjM5Q0FGMzNCMjczNjQwODA4REVF
MTc2ODQyRDMxQjEyODk0MjVGRTA0NENCMzBDREZBREIwMTI5MzdGOTk1Rjg0MDAx
QzNGNDMzRjI3Mzg5NDdBQUY0RTdDMzZBRURFN0FEQTY0QkI1MDIzN0I2ODQwMjgz
RTc3M0RCNzQ3QkM3NkFFNjNGRDQxNDg1MzU1MzZBOTE0RDE2REExRDdENkQ0REE5
NTVFQkJGMjU2NDY3REVFRTM5OTA2NDY5NURDODY3RjAxNkY5M0U5NEM4ODg4ODlD
MzZGNkI0Q0M1MDI0NEY3RjYyMjQwNkRCNDAwNjZCOTY0MkIxQjUwN0JFQ0Q2OTg5
RUI3OEY2NkFDNDU5NEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyo4m2luOC93sxVJJusvRXsCkIAg9OcFn2OPDapOU+3ABJcLLTHsJ
JmuPeoBYiKSq+unUSTw8JXHdyNwjeCpfyhWVdc/XpHY2SelsrPUBN1MlUQQ24H+F
vhoI/zrcZ1G78H/fj+uFnR84qBhbb2FbSLPk4sKffH85yvM7JzZAgI3uF2hC0xsS
iUJf4ETLMM362wEpN/mV+EABw/Qz8nOJR6r058Nq7eetpku1Aje2hAKD53PbdHvH
auY/1BSFNVNqkU0W2h19bU2pVeu/JWRn3u45kGRpXchn8Bb5PpTIiIicNva0zFAk
T39iJAbbQAZrlkKxtQe+zWmJ63j2asRZTQIDAQABo4ICJTCCAiEwHQYDVR0OBBYE
FKIgWqRK6FMqfzzI18seOUKWxDNOMB8GA1UdIwQYMBaAFLDP5bKF0JoOgoIPzdxZ
yUwdf5cpMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05
Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQjBDRkU1QjI4NUQwOUEwRTgyODIwRkNEREM1
OUM5NEMxRDdGOTcyOS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGI0MzM2NTYtNmIx
My00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTUvMC9CMENGRTVCMjg1RDA5QTBFODI4
MjBGQ0REQzU5Qzk0QzFEN0Y5NzI5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RiNDMzNjU2
LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0zLzAvQVMxMjg1OS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAAW1hjANBgkqhkiG9w0BAQsFAAOCAQEABR+bFrVQM8X1qUMZQEjNWR0//8FV
ziU18GYAerEeAYIrfuJpqBAwQYW2Lez+lfTRzYgDwEx0YoCxDxIZCLpilrIALnck
q22s9pG609zuCtmVVASnwVXcZhOEP6wHvk5c4qLiIqiUl2PNlA1ejwZlv10nj80g
KKY2B8ZWSAcghYd/Q6sDTst6tQOm0EMfvStTJSXHE6lZc8036xkwtqL44P6Uv8qf
X+VdYQDgEIpsn8myB0Xo9EW5KxRAmp48/UCG3XvCGc463xfd/wikvniq/HUy/acC
RQUmGCDocxeuFvN9r22bZMCnaKyavr+QCsW+lo6bJMUYKCqaBaOKT6O+gg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org