Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS209181.roa
File:                     AS209181.roa (raw, json)
Hash identifier:          MFYuodoDV2D0ZH9hqu+VAEDEVob91Ix7d6Qlkd/WNLE=
Subject key identifier:   A9:1B:F8:D2:B1:2D:36:E8:2F:C7:28:3A:6E:09:28:41:63:2D:86:3E
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       07EAA1D5C8C0CB4A3809D8322742D73168EF838B
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS209181.roa
Signing time:             Wed 09 Mar 2022 13:37:41 +0000
ROA not before:           Wed 09 Mar 2022 13:32:41 +0000
ROA not after:            Wed 08 Mar 2023 13:37:41 +0000
asID:                     209181
IP address blocks:        5.252.160.0/24 maxlen: 24
                          85.208.73.0/24 maxlen: 24
                          85.209.176.0/24 maxlen: 24
                          181.214.53.0/24 maxlen: 24
                          191.96.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ea:a1:d5:c8:c0:cb:4a:38:09:d8:32:27:42:d7:31:68:ef:83:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:41 2022 GMT
            Not After : Mar  8 13:37:41 2023 GMT
        Subject: CN=3082010A0282010100DE9BE0B43CA302854B5DF354876E2C63DFAC2D4429B64DFE56185853AAC2CE8EE9385DAFF05AD5B5E3E045D821F52D8C0FF6209BB95AC4BA389A0B7D677F91C9BCA8459B6DC7E926A17813C4795C3C740B7FD264F1DB17281AF70BCA23A62C09C04AB6ED97338C9F40661770EC8E142E12960D2EB956565F41628BCFFCE7710E8D6685B9E651718C73FCC91C9BBC86E4907A4B86BF08F05A979AE7BC8CE62C86E9500FF89F58B4F9F8D7180361D321F6C8FDB7EC23197EA4AA8BF541022FD9E7E8FD071EC5118AA6EF7840D78F44A45905592220424575E6E875E1E5FC33373C3E13DAB7855C409F2A89522D89BBC5A2E5727CDFD59CD03D203E6B877D862B190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:e0:b4:3c:a3:02:85:4b:5d:f3:54:87:6e:
                    2c:63:df:ac:2d:44:29:b6:4d:fe:56:18:58:53:aa:
                    c2:ce:8e:e9:38:5d:af:f0:5a:d5:b5:e3:e0:45:d8:
                    21:f5:2d:8c:0f:f6:20:9b:b9:5a:c4:ba:38:9a:0b:
                    7d:67:7f:91:c9:bc:a8:45:9b:6d:c7:e9:26:a1:78:
                    13:c4:79:5c:3c:74:0b:7f:d2:64:f1:db:17:28:1a:
                    f7:0b:ca:23:a6:2c:09:c0:4a:b6:ed:97:33:8c:9f:
                    40:66:17:70:ec:8e:14:2e:12:96:0d:2e:b9:56:56:
                    5f:41:62:8b:cf:fc:e7:71:0e:8d:66:85:b9:e6:51:
                    71:8c:73:fc:c9:1c:9b:bc:86:e4:90:7a:4b:86:bf:
                    08:f0:5a:97:9a:e7:bc:8c:e6:2c:86:e9:50:0f:f8:
                    9f:58:b4:f9:f8:d7:18:03:61:d3:21:f6:c8:fd:b7:
                    ec:23:19:7e:a4:aa:8b:f5:41:02:2f:d9:e7:e8:fd:
                    07:1e:c5:11:8a:a6:ef:78:40:d7:8f:44:a4:59:05:
                    59:22:20:42:45:75:e6:e8:75:e1:e5:fc:33:37:3c:
                    3e:13:da:b7:85:5c:40:9f:2a:89:52:2d:89:bb:c5:
                    a2:e5:72:7c:df:d5:9c:d0:3d:20:3e:6b:87:7d:86:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1B:F8:D2:B1:2D:36:E8:2F:C7:28:3A:6E:09:28:41:63:2D:86:3E
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS209181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.160.0/24
                  85.208.73.0/24
                  85.209.176.0/24
                  181.214.53.0/24
                  191.96.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b7:79:f1:72:b2:21:30:3f:c0:6f:33:a2:17:94:fb:97:5f:
         85:6a:81:2a:7b:6e:6b:89:24:f0:53:bb:9c:20:c8:6d:cf:38:
         ce:ab:69:7f:25:a5:df:56:76:5a:4e:07:81:84:35:7f:31:ae:
         9f:99:fc:e5:ab:b4:78:62:67:6c:43:b8:2d:4e:b9:a1:33:a8:
         c0:a0:bd:8f:a1:5f:41:f1:9f:70:d9:86:5c:67:42:6d:d6:b4:
         0f:e1:ed:45:28:33:59:2e:c5:1d:50:7f:b1:26:df:f8:9d:b3:
         29:74:c1:68:8d:0f:2a:73:ac:c7:82:36:d3:8e:6b:09:c8:db:
         ed:0e:99:04:bd:e8:7f:15:c4:d0:01:d8:92:4d:3c:c0:24:36:
         4b:30:14:b1:bd:71:2a:91:f2:a3:3d:5a:5a:35:d3:b1:47:f6:
         a6:43:17:93:0a:d7:2b:73:54:1a:ad:c3:05:10:0f:4f:5e:86:
         e3:6d:d7:8c:fc:c4:69:48:f8:6d:08:fe:3b:f0:89:ac:dc:d5:
         9e:1c:e1:65:d5:8c:ba:68:e2:e0:8d:67:1a:75:40:b9:6a:47:
         e1:92:10:c4:95:c4:66:84:5c:11:93:83:98:08:2f:ee:0b:9a:
         47:2f:ec:0b:37:99:4a:00:00:df:da:a2:0b:a7:8d:44:b6:c2:
         97:b5:8d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org