Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS395723.roa
File:                     AS395723.roa (raw, json)
Hash identifier:          vMbttLlxImEwTMTLEvIpF7JXlgWdHXt/xT96IyMFNB0=
Subject key identifier:   E7:F0:F6:E2:4E:43:B0:1C:F0:A9:5E:2D:3C:C1:DB:4E:78:60:BA:DB
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       143147858199584BE0912D674A767774F1B42044
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS395723.roa
Signing time:             Tue 08 Mar 2022 07:51:10 +0000
ROA not before:           Tue 08 Mar 2022 07:46:10 +0000
ROA not after:            Tue 07 Mar 2023 07:51:10 +0000
asID:                     395723
IP address blocks:        5.252.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:31:47:85:81:99:58:4b:e0:91:2d:67:4a:76:77:74:f1:b4:20:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  8 07:46:10 2022 GMT
            Not After : Mar  7 07:51:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:77:42:c0:d9:89:28:f2:e3:ee:4f:f4:d9:
                    61:d7:1a:ec:55:c7:8e:d0:63:db:89:eb:ad:85:3a:
                    9b:18:3b:7c:82:8e:d5:f3:ed:e4:99:3d:2b:03:7d:
                    96:38:7f:12:68:26:7a:c8:c4:3a:05:8b:a6:16:2a:
                    9c:20:48:95:3f:32:b6:52:ca:c1:1a:9b:a3:1b:7d:
                    3f:be:ee:6b:01:8c:b3:0d:b4:e0:29:f8:34:e3:93:
                    39:3d:91:80:3d:77:11:42:e0:42:97:b9:79:c8:25:
                    c8:b8:27:50:94:e4:af:a0:08:49:07:f6:41:d3:ca:
                    ab:92:5e:76:d1:9c:e4:47:1d:21:07:c3:8d:d8:8c:
                    0d:4b:05:23:f7:ca:c6:10:bc:bf:97:4d:fa:34:ae:
                    fa:e5:38:10:0a:c5:94:cf:1d:79:58:ff:7e:c3:05:
                    3d:22:42:e3:34:fb:71:d2:ad:d8:13:ea:f8:3a:47:
                    a1:8d:5d:85:3b:34:a6:48:70:62:2d:a2:e8:d8:2c:
                    51:91:f4:32:e3:f5:8d:38:ee:0b:95:d7:82:be:9a:
                    61:d1:dd:e3:95:59:43:06:42:c7:e8:18:63:33:f7:
                    7c:0d:4f:b5:b7:56:f5:64:c5:a3:13:9d:91:1c:8f:
                    ab:a0:76:a6:97:09:6d:60:f5:05:01:d3:8c:45:77:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F0:F6:E2:4E:43:B0:1C:F0:A9:5E:2D:3C:C1:DB:4E:78:60:BA:DB
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS395723.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:66:96:d6:8b:79:42:56:9e:04:8b:1c:e8:49:7f:02:c2:1e:
         b8:30:1e:cd:9e:75:a7:92:f5:11:d7:f9:02:97:8c:b9:bd:df:
         1b:3e:b3:32:76:cb:1b:ed:dd:2b:17:0b:b6:5a:29:3d:53:85:
         1a:79:4e:eb:8c:b1:94:d5:80:85:a7:15:d6:ab:00:20:78:d9:
         e9:92:38:1c:db:99:a0:54:60:ba:a7:22:b8:85:e7:a3:e7:b6:
         6b:a3:f6:81:af:34:b4:cb:46:2b:ab:ae:cc:2d:43:46:14:d5:
         bc:fd:8b:79:1d:d2:81:a4:89:b6:c2:66:6b:8d:85:cc:be:3e:
         8c:90:4c:a0:99:59:6b:95:cb:bf:8f:a0:02:e3:9b:66:e3:c6:
         f0:aa:c4:72:00:af:29:22:25:b1:7a:2d:6f:84:d6:38:2d:56:
         64:88:67:d3:00:1f:ca:b0:e2:6b:05:1a:bc:04:73:d1:e5:ba:
         80:d7:6a:b8:04:9a:e5:ac:f0:26:45:88:ef:3b:45:7a:14:2f:
         cc:96:1f:60:65:57:81:7d:05:7f:7e:b0:05:fb:b2:e7:ea:4e:
         cc:48:70:d3:05:7c:b3:89:f4:8b:dd:2c:fc:ac:3e:cf:fc:34:
         6e:54:13:ae:f7:f3:19:5c:82:f6:f9:0c:47:7d:15:14:eb:ad:
         09:0a:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org