Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS141158.roa
File:                     AS141158.roa (raw, json)
Hash identifier:          JeLSelXhXvZVk2G0nHZzabrd3QK55zjCaR/l8HDmQyQ=
Subject key identifier:   AE:C8:C0:7A:2C:B4:32:29:11:51:D8:BB:DF:6E:89:7E:0D:95:70:9B
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6F825ABFF20ADEDFFF8187915D530EF311D1E610
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS141158.roa
Signing time:             Wed 09 Mar 2022 13:37:39 +0000
ROA not before:           Wed 09 Mar 2022 13:32:39 +0000
ROA not after:            Wed 08 Mar 2023 13:37:39 +0000
asID:                     141158
IP address blocks:        2.57.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:82:5a:bf:f2:0a:de:df:ff:81:87:91:5d:53:0e:f3:11:d1:e6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:39 2022 GMT
            Not After : Mar  8 13:37:39 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:91:b5:b7:62:57:79:a3:9f:09:64:27:e1:68:
                    0e:54:8a:84:ce:25:c6:19:d9:0d:87:e6:5b:26:97:
                    07:f1:a0:05:40:83:53:9a:c6:7a:a2:19:4e:e0:be:
                    4c:75:43:71:1e:92:45:7c:54:78:40:64:b7:24:4e:
                    95:69:72:eb:dc:81:fa:4c:0a:f7:8a:f2:65:58:d3:
                    da:6a:8b:6c:a0:29:e0:74:a1:60:25:ad:02:2e:bf:
                    83:b7:67:da:31:a2:2c:f3:a4:50:75:1a:02:8e:09:
                    fd:e3:36:96:54:9c:3d:d1:5c:a3:01:18:34:ac:57:
                    bd:36:dd:02:02:35:06:e0:be:3d:1c:1f:f3:1e:57:
                    ca:72:96:ce:e8:2d:3b:9b:36:6b:00:e6:90:2f:9a:
                    2f:69:31:6f:13:00:94:bc:4f:70:d7:28:13:12:c7:
                    8c:64:a1:ae:9c:1b:fb:8a:07:01:42:3c:e6:0e:78:
                    2f:83:79:84:b1:1c:c4:32:0b:86:1e:82:e7:10:17:
                    be:09:c8:91:4d:5b:a5:57:87:50:4f:b4:07:1f:b6:
                    3f:f6:ba:98:b4:cd:21:ed:e4:d9:f8:b8:ed:89:f4:
                    30:bd:c9:be:aa:2b:40:0e:55:2e:a8:6f:0a:b1:b2:
                    59:ea:9b:68:ff:33:c9:12:96:e0:38:dd:74:22:c0:
                    1d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C8:C0:7A:2C:B4:32:29:11:51:D8:BB:DF:6E:89:7E:0D:95:70:9B
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS141158.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:23:a7:f8:ce:01:0f:c4:d4:7d:dc:87:44:26:fe:ba:98:
         28:cf:cd:4a:91:59:b8:3b:9e:7b:59:ae:e9:17:fe:bf:ab:7e:
         8c:a4:6b:14:dd:77:21:0f:0e:c8:12:e4:c4:b8:d8:57:60:37:
         5c:cc:9e:24:1f:c3:d5:7b:72:74:05:b0:78:53:86:81:bf:52:
         bf:11:2b:46:31:e3:98:41:db:09:e5:fc:ea:15:c6:5c:ff:16:
         77:69:6e:97:e6:fe:27:25:96:8f:31:07:ba:8d:1f:e6:3f:e2:
         78:3d:ec:c7:1a:5b:c4:5c:f8:a4:db:49:ef:6f:14:b3:de:5d:
         06:2f:0d:bd:1d:43:64:0c:47:72:58:8a:f4:f3:39:68:83:97:
         5d:f8:75:94:8f:96:e0:a6:19:9d:5a:53:7e:d8:d1:73:57:94:
         6f:2e:5d:10:66:e0:12:0b:ef:3f:a9:26:85:ce:83:71:4f:08:
         84:dd:c8:1f:e5:b8:25:ca:b2:61:3c:23:68:93:27:9d:15:35:
         eb:be:22:a0:27:d5:36:73:95:a4:e0:4c:55:3f:fd:19:fb:ec:
         97:c3:f2:33:69:2e:97:44:91:5f:aa:c2:7e:58:2e:42:f9:d6:
         f1:b4:15:8a:af:8f:a8:54:a2:00:5c:a4:c1:c6:f4:a7:fe:55:
         b3:f5:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----