Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS398464.roa
File:                     AS398464.roa (raw, json)
Hash identifier:          H//T5YCBzXUdGrvTA93FAZPQbhBmz7MPlUik+GNzako=
Subject key identifier:   6E:9D:60:02:0F:C1:5A:01:E8:14:F0:76:E6:41:1E:3F:2F:9C:11:06
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       166B69515125E763A685A3FA0159A7E7F11B680B
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS398464.roa
Signing time:             Wed 01 Jun 2022 14:51:13 +0000
ROA not before:           Wed 01 Jun 2022 14:46:13 +0000
ROA not after:            Wed 31 May 2023 14:51:13 +0000
asID:                     398464
IP address blocks:        45.95.12.0/23 maxlen: 24
                          179.61.203.0/24 maxlen: 24
                          179.61.226.0/24 maxlen: 24
                          181.41.218.0/24 maxlen: 24
                          181.214.122.0/24 maxlen: 24
                          181.214.244.0/24 maxlen: 24
                          181.215.9.0/24 maxlen: 24
                          185.170.59.0/24 maxlen: 24
                          191.96.18.0/24 maxlen: 24
                          191.96.118.0/24 maxlen: 24
                          191.96.140.0/24 maxlen: 24
                          191.96.149.0/24 maxlen: 24
                          191.96.187.0/24 maxlen: 24
                          191.96.207.0/24 maxlen: 24
                          191.96.245.0/24 maxlen: 24
                          191.101.168.0/24 maxlen: 24
                          191.101.181.0/24 maxlen: 24
                          193.227.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6b:69:51:51:25:e7:63:a6:85:a3:fa:01:59:a7:e7:f1:1b:68:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun  1 14:46:13 2022 GMT
            Not After : May 31 14:51:13 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:d8:43:8f:2a:a0:7a:8d:c2:70:5f:8e:7e:
                    72:09:07:de:24:a7:4e:ad:db:66:12:07:ec:f9:32:
                    f1:f8:31:2f:d4:1d:bc:a5:28:21:fe:38:f0:c0:9c:
                    86:f2:aa:c1:c7:45:53:69:49:9e:62:61:78:f8:a5:
                    7f:b0:d5:59:d4:51:0a:80:0c:62:e7:d9:27:12:c3:
                    71:f7:be:0c:6f:a7:9f:24:e3:57:e1:3e:ce:02:c5:
                    81:8d:7e:f6:42:a8:2b:cb:45:60:7d:b9:79:32:c6:
                    51:f9:24:bb:af:bb:74:11:ec:fe:d4:4d:84:8c:fc:
                    67:0e:0e:34:f5:5c:60:5e:89:8c:b8:d8:80:6c:72:
                    fa:e7:a7:47:c4:2a:02:c0:cc:19:d0:c4:1c:29:ac:
                    f7:88:83:30:aa:7b:81:7b:77:61:13:7a:19:9a:b8:
                    0a:5d:32:d3:dc:0b:9f:e1:fd:e0:40:ef:ce:4b:1f:
                    ca:64:11:c5:dd:10:af:d0:74:ce:9f:13:d8:a5:b8:
                    03:62:ed:6d:07:72:ee:af:95:a0:6e:81:fe:14:6c:
                    0b:81:00:35:80:de:fa:cb:f3:74:e4:79:87:35:e1:
                    89:b3:ff:c4:e3:41:03:09:8e:ce:29:8c:a3:bf:4d:
                    89:80:44:c4:ef:da:f1:22:59:dd:7a:6f:8f:6a:b2:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9D:60:02:0F:C1:5A:01:E8:14:F0:76:E6:41:1E:3F:2F:9C:11:06
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS398464.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.12.0/23
                  179.61.203.0/24
                  179.61.226.0/24
                  181.41.218.0/24
                  181.214.122.0/24
                  181.214.244.0/24
                  181.215.9.0/24
                  185.170.59.0/24
                  191.96.18.0/24
                  191.96.118.0/24
                  191.96.140.0/24
                  191.96.149.0/24
                  191.96.187.0/24
                  191.96.207.0/24
                  191.96.245.0/24
                  191.101.168.0/24
                  191.101.181.0/24
                  193.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:22:ec:89:69:05:3a:f8:16:8e:8f:5a:1c:5c:2f:db:0b:
         0e:c3:e2:73:3d:9a:2d:ca:27:b5:7e:69:6a:95:0f:da:30:93:
         5f:ba:c7:d8:9b:26:f6:bd:0b:09:7c:71:d7:a9:c5:d2:4e:2c:
         c1:92:8a:1d:d1:22:32:44:96:a6:58:17:95:88:b7:ea:3e:9e:
         12:d6:65:d8:d1:c7:ea:90:67:af:c9:15:53:46:24:af:ab:f3:
         34:a0:7f:8d:7f:64:f1:f7:49:c6:2b:35:d7:46:68:3a:1d:f1:
         f4:1d:b2:76:cf:9d:df:19:89:84:20:1a:e2:03:c5:3a:1e:96:
         cd:4b:23:61:90:31:8a:cc:6c:02:65:67:68:da:87:0b:8a:69:
         84:17:1f:40:51:8b:ee:73:3f:77:0e:57:13:dc:25:a5:b6:47:
         ed:2b:93:f8:47:eb:85:f8:04:9c:4f:7f:e7:60:6d:d6:24:db:
         f8:67:b2:71:9d:d7:93:1c:f9:27:7e:62:37:13:38:a6:f8:f4:
         2a:f5:a4:64:ca:99:8f:69:04:e5:d6:d2:cb:bf:cb:bd:17:8b:
         83:a2:85:08:7e:9b:c1:ca:18:d6:46:db:39:2b:4d:f3:4b:57:
         a0:10:0f:02:a6:99:6b:53:9e:66:f6:af:7a:32:e4:da:62:85:
         63:d9:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org