Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS43260.roa
File:                     AS43260.roa (raw, json)
Hash identifier:          SoiqdmuVy3IOGl/Wcj4kMr/N0uZQ96UGjwz2fITuC9M=
Subject key identifier:   DD:4A:35:44:FA:9F:39:97:0C:AD:B2:C8:34:0F:BB:6D:10:52:83:C6
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       0130B8C17750A84CA8157577EABB15C898D1AC02
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS43260.roa
Signing time:             Mon 13 Jun 2022 12:18:24 +0000
ROA not before:           Mon 13 Jun 2022 12:13:24 +0000
ROA not after:            Mon 12 Jun 2023 12:18:24 +0000
asID:                     43260
IP address blocks:        45.89.253.0/24 maxlen: 24
                          181.41.202.0/24 maxlen: 24
                          181.215.17.0/24 maxlen: 24
                          181.215.75.0/24 maxlen: 24
                          191.96.2.0/24 maxlen: 24
                          191.96.255.0/24 maxlen: 24
                          191.101.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:30:b8:c1:77:50:a8:4c:a8:15:75:77:ea:bb:15:c8:98:d1:ac:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Jun 13 12:13:24 2022 GMT
            Not After : Jun 12 12:18:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:e3:dc:d5:3f:a3:57:6d:e1:43:c4:cb:06:
                    08:7c:9a:fd:a6:12:dd:c6:7c:2c:98:19:83:b3:f6:
                    fc:48:16:18:48:f7:d4:3b:20:97:af:33:d2:14:da:
                    b8:0e:ce:dd:11:02:f4:0f:7f:54:e1:b6:93:e4:48:
                    d1:fd:58:9e:cf:13:66:bb:35:89:ac:79:e9:4c:6f:
                    8b:f6:4b:3e:d8:fc:ba:7d:b8:18:e2:57:dd:a2:20:
                    c9:b2:9f:c2:69:86:0b:56:cb:1b:35:2b:e0:47:01:
                    e2:df:bf:da:e2:9b:c9:c4:f5:9a:bc:82:e5:eb:11:
                    29:43:db:8a:b3:68:4a:5c:ed:6a:e7:dd:19:42:c5:
                    cd:bc:3e:99:c7:2f:71:51:a3:2b:19:34:44:b7:36:
                    5f:6b:ae:bc:ca:3b:d5:7f:fb:53:76:89:8f:21:14:
                    f1:72:70:75:bc:d8:78:57:94:57:ec:8f:bb:04:6b:
                    d5:a2:e3:26:90:a1:aa:2b:04:e3:5e:c3:59:28:dd:
                    9c:4c:d7:a4:02:bc:f6:e8:d7:62:00:d6:70:e1:16:
                    57:ab:8e:98:07:b0:55:cb:ce:b7:0a:df:44:f3:4f:
                    35:b7:2b:96:e2:b7:8a:d4:df:f6:d0:12:1c:c5:4f:
                    72:28:a8:d3:55:0f:53:52:80:18:39:6b:d2:4a:ff:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4A:35:44:FA:9F:39:97:0C:AD:B2:C8:34:0F:BB:6D:10:52:83:C6
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS43260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.253.0/24
                  181.41.202.0/24
                  181.215.17.0/24
                  181.215.75.0/24
                  191.96.2.0/24
                  191.96.255.0/24
                  191.101.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:95:10:cb:fc:7b:26:64:16:54:fd:4e:16:b4:89:f2:c8:cf:
         a7:4f:e5:b2:3d:a5:90:44:4e:33:a8:2d:4e:a0:0d:2e:ac:3f:
         24:da:df:56:2a:33:40:b8:88:91:a3:2c:7f:2e:5a:3e:23:e7:
         15:3e:1f:cf:2e:1e:f9:ca:79:e1:e0:e6:0d:50:87:cb:05:25:
         66:11:d0:d9:d8:78:90:28:a3:21:bc:5d:df:cb:f2:26:55:41:
         5a:eb:ff:ed:59:09:cf:4c:bd:bc:a0:e7:e2:1f:6e:52:d2:34:
         f0:40:d5:0b:cc:c0:5a:04:8a:9e:0c:b7:5a:ff:2c:fb:57:5a:
         90:fb:b6:d3:ce:f8:82:a7:60:21:c8:3f:92:fb:5d:d2:de:af:
         f1:b3:e8:58:17:aa:d8:12:d1:bc:87:bc:0e:8b:dd:c1:9c:e4:
         e7:b8:7e:ce:ce:ae:45:00:a6:85:da:79:6c:53:30:2f:6c:a1:
         4e:15:31:65:d9:a2:a9:23:43:88:5d:56:2d:6d:83:db:3b:9f:
         77:cc:78:a6:02:7c:19:59:c5:15:33:27:bd:7f:dd:df:4b:4c:
         c1:01:98:f1:88:1d:a6:e3:c8:2f:3f:c9:12:4f:02:1e:0f:a1:
         86:11:64:99:20:ea:ad:ee:d7:73:62:7f:af:17:58:2a:89:79:
         23:9c:ab:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org