Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS399916.roa
File:                     AS399916.roa (raw, json)
Hash identifier:          BFn0L4SlbI7OmfmVE+gczEtIzyxI0BseyGGhVY81Sos=
Subject key identifier:   23:D1:22:79:1E:7B:75:C0:AC:15:76:1D:0C:39:08:5E:BF:75:2D:28
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       11087F92EACA23846FAD749D3527529E275292A7
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS399916.roa
Signing time:             Thu 28 Apr 2022 12:32:51 +0000
ROA not before:           Thu 28 Apr 2022 12:27:51 +0000
ROA not after:            Thu 27 Apr 2023 12:32:51 +0000
asID:                     399916
IP address blocks:        45.89.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:08:7f:92:ea:ca:23:84:6f:ad:74:9d:35:27:52:9e:27:52:92:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 28 12:27:51 2022 GMT
            Not After : Apr 27 12:32:51 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:c4:af:32:c3:67:46:da:3c:f2:9e:00:62:
                    e2:53:dd:e3:09:4c:70:e7:42:66:bc:c6:89:1a:d1:
                    38:34:b7:c1:f6:cb:5d:5c:c9:59:e2:c5:b9:4e:1a:
                    7b:14:98:1b:f1:83:e6:fc:72:b4:5e:3c:13:1d:fa:
                    79:97:97:c6:e7:05:28:ae:7b:33:b6:b0:1e:b2:73:
                    b1:7f:4d:b2:f5:f6:26:a5:09:cb:77:00:c3:21:49:
                    56:b6:d3:b5:66:0b:08:05:f9:d3:bf:84:b7:8e:83:
                    90:c8:8c:f3:72:9a:88:5c:3e:ce:18:e3:20:45:29:
                    14:4d:e6:72:86:c7:5e:a0:18:c1:6c:1a:18:4c:fa:
                    da:25:0f:55:a2:c2:da:c9:44:47:80:9f:8d:50:57:
                    70:2a:df:17:82:71:31:cd:b9:45:20:88:07:6f:07:
                    90:1c:aa:59:0e:41:e2:f1:8b:05:cb:6b:83:50:e1:
                    c7:2f:f3:e6:4f:56:da:f1:32:87:b8:1b:6d:e8:6d:
                    5f:ad:c9:7a:81:f5:e7:1e:17:b2:78:f7:16:89:ba:
                    c7:96:06:dc:7e:cf:77:27:2e:25:cb:28:17:37:a8:
                    34:90:14:4b:fd:92:d8:26:db:b8:e9:cb:ca:d4:a1:
                    01:7c:f1:6d:6f:16:e9:dd:5a:d6:1d:88:7a:75:1c:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D1:22:79:1E:7B:75:C0:AC:15:76:1D:0C:39:08:5E:BF:75:2D:28
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS399916.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:aa:c8:8a:dd:1e:97:c7:3e:03:b1:58:68:ff:65:75:09:
         08:93:c2:5b:58:0b:0c:22:c3:85:89:f2:25:a9:a2:e1:53:e4:
         8a:27:d2:27:1f:ac:fc:33:d9:61:81:0c:a4:26:8e:f4:9e:49:
         d7:1c:02:34:86:62:db:db:ae:18:2e:af:c0:4b:72:ac:82:20:
         42:b1:49:18:67:fe:2f:bf:47:7a:d2:a3:90:03:da:6b:0e:f7:
         87:9e:f0:0e:33:b9:37:dd:08:2b:7a:64:ae:a0:28:b1:b2:cc:
         3c:ba:38:83:d6:d2:66:bf:28:7b:6b:7d:77:24:1b:1e:4e:6a:
         9e:32:4f:59:61:15:ac:ae:6f:20:6d:bd:ba:d3:6c:de:06:f3:
         c7:c1:2e:db:7b:d3:0a:c7:a8:52:96:3a:da:6e:c2:f9:b6:9e:
         12:7e:7a:4c:6f:28:26:11:d6:84:ec:bf:7c:06:56:00:bf:ba:
         1a:ca:db:eb:86:e0:83:1c:81:ba:3c:37:fe:10:6d:9c:cb:79:
         21:df:68:c5:94:82:3f:ed:16:54:5d:fb:5d:4f:79:ce:8d:99:
         bb:c8:9f:16:83:b3:ce:37:a5:f2:31:64:00:e4:80:dd:c3:c0:
         d5:c3:47:cb:76:12:7e:67:a3:6c:2e:70:39:53:73:83:fa:4c:
         77:f4:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----