Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS210356.roa
File:                     AS210356.roa (raw, json)
Hash identifier:          OhvpwHIZD4lITKumfeZnTwQTJig5lRKbZzAuHZwN14M=
Subject key identifier:   99:56:20:20:84:9E:10:92:1C:D2:FA:E3:97:DC:96:7D:7C:CD:BB:8F
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       6DD09E61CA23FC31FCB581A6D570A57541A23454
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS210356.roa
Signing time:             Mon 06 Jun 2022 18:20:30 +0000
ROA not before:           Mon 06 Jun 2022 18:15:30 +0000
ROA not after:            Mon 05 Jun 2023 18:20:30 +0000
asID:                     210356
IP address blocks:        181.214.48.0/24 maxlen: 24
                          181.214.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d0:9e:61:ca:23:fc:31:fc:b5:81:a6:d5:70:a5:75:41:a2:34:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  6 18:15:30 2022 GMT
            Not After : Jun  5 18:20:30 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:80:e5:4b:f0:4f:f2:0f:8b:02:2a:5b:a2:
                    9e:87:76:12:3b:df:e5:04:48:f6:8d:b9:bc:da:3e:
                    d7:4a:a8:c5:fd:8f:c1:5e:d7:e2:f5:e8:13:6e:14:
                    48:42:8c:79:52:16:25:d6:56:b9:77:d2:89:24:e1:
                    86:e2:2d:33:88:90:0f:4a:e4:7b:c9:1d:52:40:91:
                    d4:6b:0b:05:4f:a3:a7:57:64:34:7d:9c:c1:a2:5d:
                    01:9a:b6:bf:74:76:ee:15:68:09:0e:dc:83:63:10:
                    f5:8f:5f:f3:09:e1:01:e4:5e:b7:91:28:85:38:7e:
                    8d:de:85:67:a9:86:ea:e0:6a:21:9d:35:fe:86:df:
                    5b:03:b2:52:89:30:53:23:2d:cf:a1:2a:75:36:24:
                    02:2b:d4:24:81:2b:3a:bb:4a:2a:f8:17:02:74:65:
                    65:0d:b2:df:04:a9:df:66:b8:46:1d:f1:76:8e:3e:
                    ae:2f:f6:b6:86:d4:05:90:9d:89:2d:17:30:80:bc:
                    50:3a:0c:48:fd:21:89:a6:5d:1d:b7:90:30:3b:44:
                    32:8a:c5:da:d9:b6:f3:e7:95:1c:54:a2:41:98:e4:
                    d7:1e:38:e0:fa:5c:39:a5:95:31:ca:d9:f9:8d:3c:
                    ac:a3:19:8e:04:a9:84:5f:71:d0:bc:ee:92:7f:ab:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:56:20:20:84:9E:10:92:1C:D2:FA:E3:97:DC:96:7D:7C:CD:BB:8F
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS210356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.48.0/24
                  181.214.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:0d:9a:16:fe:a4:fb:e9:04:f5:39:2e:a6:c2:8d:c2:1e:c4:
         d2:d6:18:be:fe:a1:c1:f9:59:e4:39:f2:59:19:d7:aa:13:d5:
         96:4c:2c:6b:21:f3:75:d7:31:2e:25:c5:7f:3c:50:01:67:30:
         b8:ed:86:4d:cd:f7:f1:4f:0a:a7:4a:65:da:cc:0e:96:c6:ea:
         a3:39:95:0d:9f:17:7a:ec:18:73:5c:6f:68:45:94:b8:77:f1:
         41:a7:6c:65:09:f1:26:bb:8f:61:c6:af:cb:44:27:bd:19:33:
         63:8f:f8:32:25:d7:86:ac:d3:a5:44:2c:bc:6b:e8:e2:b7:4c:
         15:d9:26:72:42:9d:30:27:ae:f8:38:5b:78:a6:3d:9b:df:80:
         25:e4:c9:54:1a:f9:68:d8:39:94:23:0c:a0:77:53:46:08:2c:
         52:8b:8d:50:ba:f5:33:58:9e:58:ad:1c:ff:1b:a0:61:cc:66:
         fb:73:1c:28:3f:e4:cf:b7:5a:73:45:89:cb:4a:1e:c6:2e:c5:
         ec:db:a8:dd:5e:8c:f6:cb:09:b7:68:73:d1:32:e9:d9:af:4f:
         4b:0f:16:56:c4:0d:1e:da:bf:27:86:03:f6:0b:14:95:c8:e2:
         55:33:7b:7a:8c:dc:df:59:7e:a8:70:b7:e8:60:56:38:1d:ae:
         5b:1d:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org