Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211112.roa
File:                     AS211112.roa (raw, json)
Hash identifier:          yEtE524ga1JmmbukJ/J2o0CDIKUad8VKn5EjOo6i9Vo=
Subject key identifier:   0B:BF:41:D9:4B:CE:61:DA:AA:AB:3F:68:DC:05:EA:1E:8D:14:05:09
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       545854F9BFA3D500547D6108C9446F48ECE031
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211112.roa
Signing time:             Wed 09 Mar 2022 13:37:43 +0000
ROA not before:           Wed 09 Mar 2022 13:32:43 +0000
ROA not after:            Wed 08 Mar 2023 13:37:43 +0000
asID:                     211112
IP address blocks:        193.58.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:58:54:f9:bf:a3:d5:00:54:7d:61:08:c9:44:6f:48:ec:e0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:43 2022 GMT
            Not After : Mar  8 13:37:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:54:62:52:9a:6a:43:f6:2b:57:bf:e6:72:
                    9d:9f:37:10:30:a7:7d:7d:f5:cf:00:49:d5:ac:ca:
                    9d:52:4b:6b:35:c4:0b:1f:92:cf:f6:c0:1c:22:5c:
                    21:c3:d5:9f:47:be:d4:39:97:e6:50:02:1f:35:75:
                    98:d6:36:ba:ae:04:e8:77:9c:42:ee:7d:ff:21:1c:
                    79:d7:2e:0a:af:7a:65:fc:bd:b3:ee:40:ff:3b:a8:
                    41:7c:5c:33:e1:95:03:b5:54:d1:6e:04:48:04:39:
                    78:08:c9:0d:0a:85:67:0f:11:da:83:6c:3d:b9:09:
                    b3:80:b3:c4:d6:e4:8e:cf:73:54:9a:87:1f:48:03:
                    0e:c8:c7:b2:fc:40:c0:72:06:0d:dd:ca:a5:e4:81:
                    f1:b8:83:ad:ee:1d:64:d6:4f:5b:47:d5:7a:c4:61:
                    9f:16:f6:fc:96:8a:fd:97:10:af:4b:0d:47:ef:87:
                    06:e0:77:df:2d:03:ac:82:3b:46:dc:52:f6:f5:0c:
                    b3:72:f7:ff:3d:1b:9c:79:5b:21:22:41:96:c3:72:
                    5b:9c:1c:05:83:2c:89:e2:b6:5d:b0:ef:c1:d4:73:
                    eb:4c:95:bd:40:84:4f:39:39:b8:d1:a5:72:ce:7d:
                    15:fc:06:2d:e9:8e:53:88:cc:80:03:24:2c:48:fd:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BF:41:D9:4B:CE:61:DA:AA:AB:3F:68:DC:05:EA:1E:8D:14:05:09
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS211112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:ce:f4:4e:61:d5:b9:e5:d2:96:b3:6f:a3:be:a4:70:a7:
         1e:5e:79:55:b0:5f:17:7b:11:a6:54:67:29:d9:77:3d:c3:17:
         20:25:17:67:ca:42:e8:49:18:b7:d8:40:73:d8:d9:d6:8a:30:
         e3:61:f4:48:78:3b:4b:1f:53:83:2c:99:eb:a6:cd:05:fb:ee:
         3f:61:05:1e:be:ba:c7:13:e9:fd:67:13:d8:c3:79:75:40:c1:
         df:47:99:4f:ae:04:d5:49:47:cd:91:f7:c4:e0:18:18:fd:06:
         94:7e:01:4e:e2:4d:60:48:a1:54:e5:cc:aa:dd:ec:bd:d7:a5:
         11:35:17:a7:34:dd:43:b5:81:3e:a7:00:e9:02:9a:51:3f:42:
         24:52:8d:dc:c4:a4:65:89:38:a6:0f:ad:18:fa:d3:43:9b:aa:
         27:a4:20:3d:35:d9:85:54:47:d3:a4:4a:fe:2d:6d:85:1e:be:
         d5:11:b6:85:d2:08:49:85:f0:19:61:e1:45:1f:b9:c3:2c:53:
         a0:88:1e:7c:d9:fe:da:ce:b4:7e:cf:0c:cd:63:b5:85:6a:8f:
         4f:92:75:31:3a:42:75:6d:23:fb:05:1f:43:bc:77:f0:1f:ba:
         27:3c:f5:2b:b7:75:4c:64:bf:47:40:60:44:3d:b2:47:9a:ca:
         ce:31:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----