Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS36352.roa
File:                     AS36352.roa (raw, json)
Hash identifier:          YQ0Z+RKKobDItJSZCDFBWBln/vpkWGwzoRyYOrLm2r0=
Subject key identifier:   F6:FA:8D:AF:1E:50:32:2D:55:28:74:09:32:3D:94:90:8F:1F:A1:F3
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3CF60B25934EBD07CDEFE4431FE7F2894C848E8E
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS36352.roa
Signing time:             Tue 07 Jun 2022 12:24:14 +0000
ROA not before:           Tue 07 Jun 2022 12:19:14 +0000
ROA not after:            Tue 06 Jun 2023 12:24:14 +0000
asID:                     36352
IP address blocks:        185.142.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f6:0b:25:93:4e:bd:07:cd:ef:e4:43:1f:e7:f2:89:4c:84:8e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  7 12:19:14 2022 GMT
            Not After : Jun  6 12:24:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:c4:5f:5b:3d:63:ff:fe:92:9e:dd:b2:18:
                    6a:cd:4f:5e:12:e5:27:ef:80:1f:7a:ca:42:89:44:
                    13:2e:6e:b7:31:36:14:ac:4b:6b:ea:1b:fc:8f:07:
                    72:89:46:a3:1f:78:b8:09:b0:b0:04:68:5a:f7:d9:
                    de:d4:cb:3c:06:46:0a:0a:2f:e7:c7:b7:32:cd:31:
                    a2:03:76:93:0c:98:2c:ed:5b:48:b0:6e:91:75:66:
                    ec:91:79:1e:e5:72:46:ff:81:22:3b:9e:a5:ea:4d:
                    18:a5:19:b0:6e:76:0c:26:d2:eb:35:e4:35:38:81:
                    a1:77:68:87:f6:66:d7:58:53:84:aa:28:1b:6d:71:
                    70:f1:e9:66:77:0e:c3:2a:d5:5a:ea:9c:64:dc:80:
                    62:1f:b2:c8:10:34:90:89:2f:b4:14:b6:38:25:f4:
                    af:2e:27:d9:da:db:10:39:32:7e:22:9b:41:8e:80:
                    61:08:e0:0d:e0:4d:f4:7a:32:95:b7:4a:4e:8f:a1:
                    75:6c:9e:34:f4:0c:4f:49:0a:ed:5f:91:f3:2b:9a:
                    f3:e3:dd:68:99:0c:1f:3e:52:74:fa:7e:b1:87:10:
                    c9:ce:ec:10:46:4f:3a:2d:a9:57:66:79:e6:c7:cc:
                    be:b7:31:8c:b5:5f:b7:55:f0:83:ae:5f:a3:4a:f9:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FA:8D:AF:1E:50:32:2D:55:28:74:09:32:3D:94:90:8F:1F:A1:F3
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS36352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ee:68:6f:f4:45:d8:f6:0f:3a:61:f3:12:56:0d:e8:1e:04:
         c1:d9:0b:cb:cb:9a:2e:ad:63:ce:69:d8:e1:50:3e:d7:c3:5d:
         68:b6:a9:aa:cc:86:6c:ca:83:a6:71:92:44:4b:eb:80:18:9a:
         36:53:30:e9:ab:47:69:32:c5:85:52:91:ba:9a:e7:8e:0f:c0:
         f4:03:23:18:ac:8c:32:3a:01:97:5a:73:52:7c:ee:0b:09:a3:
         4b:b9:12:71:d6:26:75:09:32:ec:66:79:22:7c:31:4a:41:09:
         4d:38:9e:56:d1:c5:ce:ea:b7:f3:22:e2:92:29:87:54:af:fe:
         29:95:34:e8:5a:69:25:90:5e:29:87:48:7f:f2:9b:6d:d4:53:
         9e:22:b7:85:a2:67:31:8d:5b:21:68:45:71:b1:1d:8a:b1:ed:
         4a:83:4a:7c:63:4a:9a:ff:e0:fc:f0:16:82:f6:f6:78:f2:71:
         48:fd:cc:eb:47:b5:4e:47:dd:9b:5f:43:8a:b0:09:b9:27:bf:
         bf:d5:54:da:df:42:d9:10:77:3c:08:5a:c9:d0:d7:46:f2:6d:
         22:fa:77:44:5a:39:c9:2b:d8:f0:09:dc:16:e1:72:0c:ff:6e:
         07:f1:46:81:5a:9e:c1:41:40:65:c4:58:bf:7e:06:90:f3:99:
         ee:9b:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org