Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS400039.roa
File:                     AS400039.roa (raw, json)
Hash identifier:          m1ZLsAEc82I+YxOrJXioEUSU4Zp9XPBUbM5GPgXrsdI=
Subject key identifier:   EB:7B:8C:0E:39:91:2C:D9:0F:5F:B9:A2:43:DB:71:CC:4D:0C:45:EF
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       591E8120B26D1A505175299B73A4081D4EFCB553
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS400039.roa
Signing time:             Wed 09 Mar 2022 13:37:42 +0000
ROA not before:           Wed 09 Mar 2022 13:32:42 +0000
ROA not after:            Wed 08 Mar 2023 13:37:42 +0000
asID:                     400039
IP address blocks:        5.181.129.0/24 maxlen: 24
                          181.215.245.0/24 maxlen: 24
                          191.96.197.0/24 maxlen: 24
                          191.101.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1e:81:20:b2:6d:1a:50:51:75:29:9b:73:a4:08:1d:4e:fc:b5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Mar  9 13:32:42 2022 GMT
            Not After : Mar  8 13:37:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:90:77:1f:40:bc:0d:4f:4d:0b:1d:4f:f5:
                    f3:c1:d9:e1:be:4d:d3:8e:65:bd:7f:66:63:a5:3b:
                    46:eb:3c:31:c8:74:9e:de:86:1e:eb:43:e0:3f:f7:
                    cd:0f:27:14:b9:14:de:50:b8:e3:dc:84:1c:75:d3:
                    20:90:21:21:96:82:55:c8:ef:1c:af:a1:87:b1:3d:
                    9b:d2:94:00:fa:89:8f:dc:a9:f2:da:71:08:f2:95:
                    25:d6:9d:c7:f3:9a:78:05:f1:3b:c6:51:e5:f4:36:
                    c3:f2:45:2b:e2:ed:7f:c2:0f:28:d3:48:1d:2e:de:
                    37:43:a8:8a:25:a7:84:b3:88:f7:3b:e5:da:77:e8:
                    91:2e:31:84:db:88:03:2d:b2:6f:8f:37:a6:f0:fd:
                    0e:a1:6c:85:69:8d:0f:2b:f7:97:ba:d4:59:0e:95:
                    e1:4b:46:bb:b1:ac:6e:f4:13:07:ee:f0:6d:30:90:
                    a3:2a:b2:c2:af:d8:f1:f8:9a:c5:6e:17:99:e3:fb:
                    d2:f4:db:86:67:81:06:14:0d:7e:54:57:cd:34:36:
                    83:2a:d5:e5:a0:4d:c3:60:7f:d0:a9:84:88:d9:20:
                    20:8b:51:95:af:1b:74:91:90:ed:aa:e5:f3:4e:8a:
                    70:c1:82:ef:ad:93:6c:a8:b1:18:53:32:8d:6e:c7:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:8C:0E:39:91:2C:D9:0F:5F:B9:A2:43:DB:71:CC:4D:0C:45:EF
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS400039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.129.0/24
                  181.215.245.0/24
                  191.96.197.0/24
                  191.101.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:33:b0:d1:09:2b:7f:b9:ca:e0:29:02:12:dc:f8:3c:26:
         3c:7b:38:53:9d:1d:69:d2:f8:3c:ad:1a:52:5e:45:6e:45:ee:
         65:6a:10:20:85:24:55:39:60:59:43:f4:34:8a:81:d2:42:ef:
         72:c7:ab:66:40:81:13:82:4d:b3:3a:7b:b4:ad:53:d9:c9:15:
         3a:7f:6a:a8:18:61:77:93:2b:6e:8a:55:f6:1e:6e:a8:7e:c8:
         aa:2b:de:ea:d0:a8:ca:4f:fe:2e:a5:40:df:54:a0:03:36:45:
         e6:ba:2b:3e:0b:7d:1a:4b:03:d5:cc:ce:d5:e3:b0:24:3a:e8:
         72:f5:da:fb:70:6b:6f:39:b0:8f:86:60:4f:f3:2b:b1:f6:fa:
         c9:70:4a:9f:66:06:ef:49:0a:c8:50:c1:0c:81:6f:91:7f:83:
         81:1a:8b:80:f0:4a:4c:13:bc:97:87:d7:d5:f4:07:50:ac:2f:
         75:a6:7a:33:1d:de:a8:5c:62:2c:0c:34:24:76:ef:72:0d:98:
         06:60:9d:8d:d2:3d:8b:85:a8:e4:e9:48:60:d5:88:53:e6:24:
         42:3b:5b:ad:b2:30:b7:45:65:29:ea:58:85:a3:1d:64:49:07:
         fc:0f:b6:db:ad:80:40:75:a7:03:b7:d3:f0:4b:23:d1:67:41:
         1d:c8:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org