Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS3170.roa
File:                     AS3170.roa (raw, json)
Hash identifier:          HSO8dHOMFfzRj+PyUu+/T38RAEJdeOh6h3m6ABqYq+c=
Subject key identifier:   17:D3:02:62:11:A9:98:EC:42:E4:F3:E6:B0:17:3F:92:71:3D:C1:57
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       5C8080452D9B183AC2E7D44EDA1E6C29EB5BC848
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS3170.roa
Signing time:             Tue 08 Mar 2022 07:51:11 +0000
ROA not before:           Tue 08 Mar 2022 07:46:11 +0000
ROA not after:            Tue 07 Mar 2023 07:51:11 +0000
asID:                     3170
IP address blocks:        2.58.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:80:80:45:2d:9b:18:3a:c2:e7:d4:4e:da:1e:6c:29:eb:5b:c8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  8 07:46:11 2022 GMT
            Not After : Mar  7 07:51:11 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:51:58:8b:e6:e9:bc:d7:19:5e:58:46:06:
                    e0:09:39:7c:8e:d9:82:2e:51:aa:d4:2f:8a:f2:44:
                    02:04:6b:18:d5:d4:1e:99:08:89:2a:e9:7b:d8:54:
                    d3:2e:59:56:28:f1:7e:0e:e9:54:91:62:a8:06:fe:
                    0c:c4:eb:d3:c8:b3:de:79:be:52:a6:77:5a:ad:b6:
                    40:dd:76:ba:e1:92:b6:42:c8:41:80:24:2b:42:2f:
                    dd:77:b1:1e:59:c7:27:b0:2a:99:6c:e6:a7:83:70:
                    72:16:50:38:e1:cc:52:b6:e7:06:40:4e:a3:5a:dc:
                    d4:a4:e2:c3:bc:1c:0d:ae:fa:0b:ce:c3:e0:af:81:
                    1c:21:6f:80:42:63:74:47:26:be:ed:e5:be:ef:50:
                    cc:28:79:1b:10:ba:8d:29:38:92:e5:d5:27:7b:3c:
                    e4:44:5b:0b:c4:89:ad:93:e9:3a:1f:9c:18:dc:44:
                    11:80:08:77:7a:9b:d4:cc:01:04:fe:36:4e:e0:92:
                    85:3e:b9:d6:7a:be:af:b7:15:4d:1d:73:6a:96:43:
                    43:f2:50:c5:71:9b:00:30:b3:d3:59:ce:36:f8:0d:
                    5c:e3:29:fa:a8:9f:9b:f6:5b:25:3b:dd:06:cc:23:
                    5d:05:ff:b5:fb:2d:56:a5:96:2e:29:d1:3a:e8:53:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D3:02:62:11:A9:98:EC:42:E4:F3:E6:B0:17:3F:92:71:3D:C1:57
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS3170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:65:75:48:04:33:54:1a:1b:50:12:4c:86:77:a3:d0:7a:bc:
         74:4c:da:cb:cf:82:85:88:e9:c7:56:0b:f1:67:d6:1d:d0:cd:
         57:cb:87:f1:19:2c:0e:eb:73:87:b6:f9:62:93:84:e4:12:ac:
         04:dc:94:ca:37:fa:65:69:73:d1:09:ea:b5:ed:8a:49:18:6b:
         48:2b:07:90:fe:1c:0b:72:9a:ed:94:a6:e0:3e:0b:5a:41:8d:
         e8:48:f0:34:45:00:de:83:e5:50:f2:08:b3:0d:62:90:11:7f:
         26:18:c9:8c:f6:1b:fb:69:8a:ad:72:13:70:13:c8:f9:1c:91:
         06:b2:1f:51:aa:04:41:bc:6b:d3:05:f9:a1:3b:2a:8c:a2:de:
         e5:fa:de:44:db:70:65:72:17:18:e7:32:08:a6:34:aa:c9:35:
         1a:4e:89:a5:bd:5f:44:fc:26:5f:97:1d:59:1f:33:a8:50:81:
         c0:00:3e:18:05:4f:7b:96:ea:26:15:56:05:88:21:68:f8:5f:
         fe:20:f3:be:58:41:b8:8c:43:09:b0:46:56:ff:b3:2e:bb:49:
         90:c1:31:40:0b:b3:2f:c7:eb:68:59:3c:25:50:91:cf:08:80:
         74:3f:83:dd:7e:46:e3:3a:1c:f0:56:eb:35:ae:f4:22:02:3e:
         fa:29:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org