Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS14618.roa
File:                     AS14618.roa (raw, json)
Hash identifier:          ChObxe/AyneHIhmfWPxx8WwdFl65DSCreDnl4L5oOtk=
Subject key identifier:   E5:4A:9C:EA:08:D2:51:DF:9E:84:47:29:0A:24:CC:EB:E6:8A:A7:D1
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       26DAAFE94079AFDCD7EEA8E45E4733867E7099D4
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS14618.roa
Signing time:             Sat 11 Jun 2022 06:28:39 +0000
ROA not before:           Sat 11 Jun 2022 06:23:39 +0000
ROA not after:            Sat 10 Jun 2023 06:28:39 +0000
asID:                     14618
IP address blocks:        5.45.38.0/23 maxlen: 24
                          185.145.38.0/24 maxlen: 24
                          185.151.58.0/24 maxlen: 24
                          185.170.41.0/24 maxlen: 24
                          213.109.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:da:af:e9:40:79:af:dc:d7:ee:a8:e4:5e:47:33:86:7e:70:99:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 11 06:23:39 2022 GMT
            Not After : Jun 10 06:28:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:b5:34:ea:6a:1a:4d:b5:7e:80:88:61:75:
                    2b:be:3d:19:60:bb:0a:e2:f1:14:45:cf:f8:db:31:
                    b9:ae:52:1c:f5:bb:bc:9d:a3:a6:19:e6:2d:5b:f0:
                    7a:ad:e9:6a:ea:4d:4f:0c:6a:5c:16:ba:d7:57:59:
                    fe:dd:6f:6d:81:b2:5c:b5:a6:bb:76:93:30:27:fe:
                    14:17:19:bd:2f:43:66:79:fd:9b:8c:0c:de:19:08:
                    e0:3f:00:22:df:d0:17:95:d0:78:a5:62:cd:e0:88:
                    bb:bc:09:4e:58:32:4a:f5:87:da:76:d4:36:6f:17:
                    2b:ac:a1:ed:27:fd:b0:68:04:52:81:11:3c:79:f4:
                    c4:a1:89:2c:22:38:9d:24:b9:1c:ac:e1:59:4c:c0:
                    21:8f:ef:02:32:5f:2d:3e:b5:9c:af:d2:25:b4:d3:
                    6c:22:c3:9d:56:ec:80:c1:d8:03:6d:a4:4d:d4:55:
                    4f:cd:86:91:b5:06:20:68:7e:85:0c:b9:7c:dd:72:
                    45:75:9c:5e:41:2b:ba:63:8c:37:d3:fa:0c:b3:0a:
                    21:02:8b:1d:79:3e:b6:29:83:73:cd:d7:5e:83:ea:
                    bb:35:84:67:d0:ea:49:f1:26:98:a3:3f:da:3f:80:
                    33:2e:00:53:d8:43:10:86:81:d0:b8:55:8e:65:63:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4A:9C:EA:08:D2:51:DF:9E:84:47:29:0A:24:CC:EB:E6:8A:A7:D1
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS14618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.38.0/23
                  185.145.38.0/24
                  185.151.58.0/24
                  185.170.41.0/24
                  213.109.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:94:b6:ab:1b:5c:15:94:dd:3f:15:2e:27:22:c6:36:2e:14:
         84:1c:8a:a0:1c:9f:78:f3:a3:4e:1e:38:26:b2:d2:70:a6:20:
         25:de:55:41:5c:e1:b3:f7:cb:0c:52:26:25:fd:5c:38:72:2b:
         fa:d4:81:05:f0:4c:3d:80:8d:a2:c9:07:0e:ff:92:3b:c8:6e:
         85:8f:a4:80:7e:35:24:c2:2f:a6:f0:b2:4d:dd:4a:8d:ff:9e:
         ed:1b:62:c4:9a:1f:07:f0:db:53:9a:55:8a:d6:c2:26:70:73:
         08:02:df:d5:90:28:39:ee:36:b2:c7:7d:d1:38:31:12:b2:d3:
         af:fd:55:86:31:c8:65:55:56:c8:9a:f9:67:00:05:fc:90:38:
         e5:fc:26:6b:6a:c9:54:02:57:df:2a:55:a6:0d:54:fd:8e:59:
         6c:53:51:e6:8f:8a:50:72:01:c7:6d:f1:51:a0:86:f3:5c:bf:
         37:c8:db:82:92:47:a4:18:6e:85:07:72:e4:cf:7f:f2:1f:a3:
         cc:3b:32:ab:ab:00:1e:6e:f9:5f:6b:a3:8f:96:3d:bb:0d:7c:
         af:e4:6c:f5:47:56:c6:42:8d:9e:d9:a6:e6:f0:b5:b5:77:38:
         e1:f9:2a:b8:fa:e1:b8:05:c2:f3:a8:a0:77:93:d4:b7:da:6d:
         e5:88:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org