Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS400040.roa
File:                     AS400040.roa (raw, json)
Hash identifier:          AkrBG1Gd63DfoetsBbiipHe6JNcMllrYU1J9IIVnZHM=
Subject key identifier:   70:34:BC:83:93:39:F7:EF:74:3C:E0:9F:B0:F6:94:1E:CD:19:10:43
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       21E67480DB83F6CC9D5B79D4E37575FD9BD06DA8
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS400040.roa
Signing time:             Mon 25 Apr 2022 16:48:45 +0000
ROA not before:           Mon 25 Apr 2022 16:43:45 +0000
ROA not after:            Mon 24 Apr 2023 16:48:45 +0000
asID:                     400040
IP address blocks:        181.214.84.0/24 maxlen: 24
                          181.215.198.0/24 maxlen: 24
                          191.96.61.0/24 maxlen: 24
                          191.96.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e6:74:80:db:83:f6:cc:9d:5b:79:d4:e3:75:75:fd:9b:d0:6d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr 25 16:43:45 2022 GMT
            Not After : Apr 24 16:48:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:15:85:9a:e6:5d:87:a3:ae:77:57:81:ea:
                    f7:2f:58:52:44:bd:68:88:4a:30:a6:98:71:d5:f1:
                    81:f8:ff:9c:8b:3d:bb:17:3a:ab:2b:4c:f6:46:93:
                    5b:00:71:52:fa:1b:01:fd:f2:b1:87:0f:a5:d6:e5:
                    22:ab:9a:80:51:de:54:e3:89:6a:26:b0:ed:7d:a1:
                    b2:90:89:ba:bd:f6:3c:63:74:4d:71:63:2c:b4:20:
                    97:3b:b2:ea:2b:6c:ff:18:73:41:6e:72:fa:b4:c8:
                    04:b8:27:0c:8a:e5:79:54:59:d6:84:a8:c0:40:5f:
                    dd:16:8c:b1:e2:8d:34:ec:d7:9b:16:5e:16:77:c2:
                    d6:0e:94:8f:ab:4f:bb:56:c6:12:32:16:47:50:70:
                    6c:22:0c:9f:aa:45:19:99:10:41:6d:c0:c9:5a:66:
                    94:db:c0:c2:d3:87:ba:6f:8f:ef:7c:0d:73:79:cf:
                    63:6b:1a:a5:c2:76:e7:6f:70:77:0a:f2:b6:23:72:
                    81:cd:80:f7:41:58:ec:16:68:d7:fc:11:60:ec:e0:
                    bb:c2:ea:7a:79:64:43:6d:0d:5e:bc:ad:30:0b:1c:
                    d1:2a:4b:4f:d6:da:54:54:10:aa:00:c5:92:60:d6:
                    6c:78:72:3c:9f:46:5c:80:9a:54:f3:4f:a5:57:a6:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:34:BC:83:93:39:F7:EF:74:3C:E0:9F:B0:F6:94:1E:CD:19:10:43
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS400040.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.84.0/24
                  181.215.198.0/24
                  191.96.61.0/24
                  191.96.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:2c:ca:e9:01:80:8a:0f:97:c5:58:8c:54:22:76:81:25:c3:
         5f:7e:98:d0:73:ab:34:c2:41:02:c7:b7:51:0c:a1:8f:7d:99:
         84:5c:df:8a:f1:81:0f:af:39:9c:f0:1f:0f:fa:fa:34:66:f9:
         dc:7a:94:47:02:bf:68:60:df:b5:b4:9a:f6:46:08:5e:55:77:
         e1:76:9d:40:24:d7:a7:2e:24:cc:22:56:bf:1b:75:ae:17:a4:
         f6:f0:1e:04:a4:f1:83:40:19:ba:95:a9:2e:c3:a8:e8:3d:aa:
         fe:cc:36:74:f0:9d:05:9b:b6:f4:b4:af:d8:a8:f2:68:a5:08:
         e7:9c:ab:19:7e:22:6d:c0:eb:95:6b:44:72:42:95:cc:23:a3:
         2f:16:a0:67:3e:45:1a:7f:cb:aa:ef:5d:ba:f2:b5:b3:11:08:
         a9:e5:78:28:8a:2f:ad:de:b2:4c:cd:1b:44:6d:26:01:59:7a:
         5a:af:4d:fb:db:a5:0c:20:52:23:7d:de:b1:f6:16:53:0a:a9:
         16:48:72:74:b1:ad:45:6a:ed:80:68:95:6e:3c:48:3e:78:0e:
         07:78:bf:8f:2c:88:34:df:3c:58:7a:45:06:19:72:69:54:dc:
         69:57:af:c0:0a:83:2e:7d:9d:79:5b:27:de:41:6b:83:24:98:
         56:fc:3e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org