Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS35575.roa
File:                     AS35575.roa (raw, json)
Hash identifier:          vd3eGFrrFKQQ2F+23PK9u5xYev3MnneFEu7qpGp6lL4=
Subject key identifier:   EE:14:07:5C:00:46:13:AB:99:C2:98:47:E1:3A:6E:1B:DF:DC:C4:13
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       0CCA0BF69390AA1982B4281F6DA3CE1FC85493A0
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS35575.roa
Signing time:             Wed 09 Mar 2022 13:37:46 +0000
ROA not before:           Wed 09 Mar 2022 13:32:46 +0000
ROA not after:            Wed 08 Mar 2023 13:37:46 +0000
asID:                     35575
IP address blocks:        45.137.158.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ca:0b:f6:93:90:aa:19:82:b4:28:1f:6d:a3:ce:1f:c8:54:93:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:46 2022 GMT
            Not After : Mar  8 13:37:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:53:58:fb:61:19:97:5c:66:ba:05:60:e5:b3:
                    1a:f9:49:65:da:c3:9d:39:e0:9c:36:eb:30:70:b6:
                    90:4e:2d:11:10:86:ab:c4:33:71:51:07:b4:4d:83:
                    74:bd:4e:47:11:19:41:e2:f1:d9:cc:e7:f2:e7:4d:
                    e7:25:cf:3a:31:c2:2c:76:c0:72:e4:84:0d:2b:61:
                    16:33:95:fd:57:d2:64:20:d6:0a:ec:04:69:9d:3b:
                    a9:df:21:ed:03:86:99:37:bc:a7:5c:64:38:96:36:
                    e7:1a:f8:26:b4:e3:c6:3e:c8:01:67:e6:12:a5:fc:
                    14:6c:69:48:6b:9a:95:b8:ed:b1:1f:c7:eb:b3:96:
                    bc:af:df:2b:9a:d1:b7:21:86:25:4d:ae:5f:73:a0:
                    1d:46:af:61:f8:c3:3c:ce:61:53:c0:60:02:92:aa:
                    20:0c:0f:fd:cd:6f:fd:a6:4f:e8:32:a7:4c:dc:3a:
                    22:d4:36:d7:09:27:63:ea:65:7c:c1:8b:71:52:1c:
                    0d:d4:02:c8:6d:7a:90:ff:98:39:1d:af:9d:f8:24:
                    d0:bc:40:a3:56:0c:8d:24:fc:c0:09:2b:0a:91:90:
                    f9:97:bd:5d:a0:66:00:eb:4a:f5:56:52:7b:f1:eb:
                    7b:df:81:82:5f:5e:76:7a:9e:69:50:b1:cc:70:85:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:14:07:5C:00:46:13:AB:99:C2:98:47:E1:3A:6E:1B:DF:DC:C4:13
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS35575.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:8f:2b:95:ee:11:f9:ab:48:82:4a:d9:7c:1d:22:0c:13:8b:
         b9:63:11:f8:af:fb:ac:87:0e:43:38:f9:53:7c:2d:58:2d:2c:
         30:e9:62:e9:77:59:4e:5f:14:bd:40:57:3d:6c:65:e8:5c:2f:
         c5:3f:8b:57:3b:25:e7:31:5b:7b:4c:3a:83:ed:75:da:bb:db:
         d7:bc:90:1c:18:8d:4c:aa:a8:c4:e9:74:6a:d5:00:56:9d:37:
         61:0d:15:90:41:f1:c1:28:89:26:00:93:27:2a:de:5c:82:57:
         4f:b6:e8:0b:56:da:99:29:e9:be:07:8e:0d:ef:f7:86:03:97:
         08:cf:bb:1d:08:06:5b:14:97:32:d9:34:0a:52:73:e5:f1:54:
         bc:ff:f1:2f:75:e3:cd:2b:98:17:21:39:ee:66:6c:bf:63:70:
         02:c7:b1:b1:83:5f:44:af:04:49:91:ca:47:d7:1c:8b:94:38:
         f9:03:b0:64:e2:3e:76:f9:41:e6:5d:83:05:31:6e:43:52:78:
         f3:d7:4a:2f:08:c3:4c:77:f9:0b:9a:0a:f9:80:2b:ac:cd:07:
         f0:fd:5a:cd:75:33:8e:98:e9:e2:70:bc:ed:6f:e3:60:5b:c9:
         45:24:26:ee:74:80:04:03:ac:bf:5a:4e:97:ed:96:59:45:b7:
         85:10:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org