Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS36351.roa
File:                     AS36351.roa (raw, json)
Hash identifier:          F6rj+/hePa7TTuzE41w9AH+B515bh5tNt5G9ax38hZ4=
Subject key identifier:   79:28:AC:EC:DD:3B:B3:8E:98:3C:4C:9F:BD:CE:4B:97:CE:1D:5A:28
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3A196028518DE6B3E423ECD2FDC76955B9DA962C
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS36351.roa
Signing time:             Wed 09 Mar 2022 13:37:41 +0000
ROA not before:           Wed 09 Mar 2022 13:32:41 +0000
ROA not after:            Wed 08 Mar 2023 13:37:41 +0000
asID:                     36351
IP address blocks:        45.137.126.0/24 maxlen: 24
                          92.118.160.0/24 maxlen: 24
                          92.118.161.0/24 maxlen: 24
                          185.173.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:19:60:28:51:8d:e6:b3:e4:23:ec:d2:fd:c7:69:55:b9:da:96:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:41 2022 GMT
            Not After : Mar  8 13:37:41 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:f1:62:33:c4:c6:14:fa:2e:ed:fe:f6:2e:
                    34:4d:56:b9:bc:03:f7:21:a4:9e:92:69:39:e6:3f:
                    86:a7:49:68:ba:99:1c:4e:17:e4:97:73:59:8a:d6:
                    e5:4b:b9:25:4c:9b:81:df:6a:d6:91:c2:8a:1d:aa:
                    4f:89:ac:9b:0e:07:bc:66:aa:7d:2f:02:f5:fb:20:
                    0f:65:18:09:18:99:23:7c:13:5a:db:dc:74:18:db:
                    8e:9d:de:aa:62:b3:a5:92:a6:03:a5:7c:ce:e8:62:
                    f9:59:30:0c:88:f7:34:81:ca:39:68:44:0d:b0:2e:
                    10:68:58:3c:47:25:d0:4e:7f:26:0d:db:a8:6c:79:
                    d6:27:6b:d8:ca:b8:03:8c:84:c3:fb:4b:60:56:91:
                    f6:86:a7:7d:1a:46:e7:50:b3:c2:aa:e2:a0:6f:f7:
                    12:4a:df:75:a9:c3:8f:21:00:30:d1:ec:dc:ed:6e:
                    3d:70:c3:88:ff:4c:9e:4b:fe:90:48:4b:28:2a:2d:
                    73:10:20:84:bc:e6:94:3a:a2:de:1e:f6:45:c8:10:
                    5a:e1:a4:b0:40:b9:cf:05:0f:7c:9e:14:b1:fa:b0:
                    80:c2:d2:ad:61:2a:47:69:aa:10:eb:ef:e4:2c:04:
                    25:8c:f7:97:2e:8e:8f:f3:fa:a7:4b:4a:33:66:cb:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:28:AC:EC:DD:3B:B3:8E:98:3C:4C:9F:BD:CE:4B:97:CE:1D:5A:28
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS36351.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.126.0/24
                  92.118.160.0/23
                  185.173.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:71:83:c1:40:d4:7d:1c:e1:10:7c:94:c9:9d:19:0e:38:02:
         48:af:d1:78:89:8a:35:ae:25:f6:4e:6e:ac:cc:12:c1:16:22:
         fd:61:23:b2:b4:66:35:d8:a0:ca:ca:0a:0c:4e:7e:41:ef:db:
         2b:35:3b:95:f7:9f:a8:cb:93:89:c9:33:43:4b:4d:cd:33:09:
         99:f0:4b:dd:d3:cb:80:6a:36:50:3d:cf:7e:1a:1c:1a:c9:5a:
         ef:5e:66:e9:ae:88:97:ce:e3:f3:e6:b9:39:02:a7:08:1c:d3:
         18:21:a3:3d:e0:93:9e:9f:32:7f:db:07:8a:8a:0a:a3:83:15:
         32:95:5b:18:ad:51:cd:a0:ab:1a:ac:6b:ea:d6:ab:41:21:6c:
         fc:a1:5a:d1:41:58:71:b5:56:15:f1:84:1c:64:0b:3e:8d:ae:
         ba:dd:1b:b2:ee:ae:7d:4d:91:f2:bd:d4:3b:80:02:3d:de:a7:
         76:d2:0d:ef:d4:15:d3:31:bb:f5:37:e1:94:a6:13:a0:ef:3b:
         83:1a:22:e1:56:c7:5e:c3:e5:64:55:7d:c1:41:b6:5c:fa:74:
         ed:e6:49:cf:18:3e:61:00:3b:63:49:d4:37:78:2d:16:39:9a:
         2f:16:69:d7:49:6f:55:e9:6b:a7:c5:22:35:02:2d:60:b9:0a:
         1d:5e:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org