Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205220.roa
File:                     AS205220.roa (raw, json)
Hash identifier:          BYT6uJSpUUuGz3wy/BuMixyZAHfzL7z/D0KxC4gVlgM=
Subject key identifier:   F7:10:18:A8:2C:71:6F:C5:14:00:5C:3B:7D:32:0E:28:9F:D4:4A:C7
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       24813FCC26597224950335D3D98E4569FB9D7D19
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205220.roa
Signing time:             Mon 06 Jun 2022 03:55:12 +0000
ROA not before:           Mon 06 Jun 2022 03:50:12 +0000
ROA not after:            Mon 05 Jun 2023 03:55:12 +0000
asID:                     205220
IP address blocks:        179.61.158.0/23 maxlen: 23
                          179.61.160.0/22 maxlen: 22
                          191.101.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:81:3f:cc:26:59:72:24:95:03:35:d3:d9:8e:45:69:fb:9d:7d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  6 03:50:12 2022 GMT
            Not After : Jun  5 03:55:12 2023 GMT
        Subject: CN=3082010A0282010100CE124DCA274C8D467FAD0B8B571B3A500CD505B9B34940B1392B56F60B86D34BC20F1DD473BAD074D27A28ABBF99556DF56F4C028A0CF274EBD57929EFD1294079B68FABE8D8A377C3C2C35A5A3C294EF8441E4CC17AF25F1901EB5A7B72833168588CB6CEA4A0B411ACCECE31B3658192A0733463232E0BE0CA76F4CBEC2375430590FCAD3B659F3B5C489B62216F0C33812ABC0BA761F351BDA71277F3D1B9656AFE8B624F0FF9DD123D9AB6B829932BA8C957DC293E177460D128DEF8410DEDCD7284B00BF0524DF2EC6DB08534FE5DD551ED799DA1BE1263BF3BA2B516E4057B66956B88111D4134E0BE6E47BE15D9EB15A90A4CC75C618A3B89D63BCA670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:4d:ca:27:4c:8d:46:7f:ad:0b:8b:57:1b:
                    3a:50:0c:d5:05:b9:b3:49:40:b1:39:2b:56:f6:0b:
                    86:d3:4b:c2:0f:1d:d4:73:ba:d0:74:d2:7a:28:ab:
                    bf:99:55:6d:f5:6f:4c:02:8a:0c:f2:74:eb:d5:79:
                    29:ef:d1:29:40:79:b6:8f:ab:e8:d8:a3:77:c3:c2:
                    c3:5a:5a:3c:29:4e:f8:44:1e:4c:c1:7a:f2:5f:19:
                    01:eb:5a:7b:72:83:31:68:58:8c:b6:ce:a4:a0:b4:
                    11:ac:ce:ce:31:b3:65:81:92:a0:73:34:63:23:2e:
                    0b:e0:ca:76:f4:cb:ec:23:75:43:05:90:fc:ad:3b:
                    65:9f:3b:5c:48:9b:62:21:6f:0c:33:81:2a:bc:0b:
                    a7:61:f3:51:bd:a7:12:77:f3:d1:b9:65:6a:fe:8b:
                    62:4f:0f:f9:dd:12:3d:9a:b6:b8:29:93:2b:a8:c9:
                    57:dc:29:3e:17:74:60:d1:28:de:f8:41:0d:ed:cd:
                    72:84:b0:0b:f0:52:4d:f2:ec:6d:b0:85:34:fe:5d:
                    d5:51:ed:79:9d:a1:be:12:63:bf:3b:a2:b5:16:e4:
                    05:7b:66:95:6b:88:11:1d:41:34:e0:be:6e:47:be:
                    15:d9:eb:15:a9:0a:4c:c7:5c:61:8a:3b:89:d6:3b:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:10:18:A8:2C:71:6F:C5:14:00:5C:3B:7D:32:0E:28:9F:D4:4A:C7
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS205220.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.158.0-179.61.163.255
                  191.101.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:81:aa:5b:02:9b:1a:d3:51:e0:0c:f6:58:b7:5c:6e:d8:
         5a:42:c7:09:62:1b:1b:d7:7e:5f:29:f1:a3:b0:aa:e7:2c:35:
         63:9d:ad:9d:02:37:c0:b6:a0:58:1f:e7:ae:dd:d1:82:e4:f3:
         57:46:2c:24:38:94:e4:d4:3b:21:1d:31:22:83:a0:ce:ed:04:
         0a:0a:e5:a8:42:84:29:ba:ad:3e:ab:0d:9d:28:6b:c9:f7:f9:
         ed:86:f8:0c:4b:28:53:3a:8f:f5:ff:46:44:83:b5:b9:9d:82:
         44:9c:4f:cf:e9:4d:81:30:15:73:14:37:db:fa:6c:3f:7e:73:
         3e:29:37:0c:5c:c8:68:b2:26:f1:43:30:e2:03:d2:3d:82:23:
         e7:e4:32:6d:54:49:3e:19:e4:11:a4:79:5d:e3:9b:d0:e1:32:
         25:a3:7c:dd:2f:1e:25:97:66:80:cd:c3:0f:0c:75:86:8a:42:
         fc:51:5e:2d:41:a9:9d:7c:9d:f4:35:9f:17:77:1e:23:d8:f1:
         6f:67:31:4e:ec:88:da:be:39:b6:07:da:e2:6b:c3:10:c1:4c:
         e4:03:12:02:0e:b4:fd:47:2b:20:b5:99:cb:29:d9:0d:81:53:
         84:4d:99:ec:2b:05:fd:96:5d:be:3e:19:d0:a8:33:f5:11:1f:
         26:ac:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org