Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          Mh0nTk9YoxLP2/83rS/SiX3uJZAL9APM0+NTmNRA4LE=
Subject key identifier:   6A:80:C7:82:D2:68:C2:6A:8D:12:3A:AD:FF:A2:1C:38:D7:E7:9D:71
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       17C037F6407DCF03A9CFE561E299931E83844834
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS8100.roa
Signing time:             Wed 11 May 2022 20:55:37 +0000
ROA not before:           Wed 11 May 2022 20:50:37 +0000
ROA not after:            Wed 10 May 2023 20:55:37 +0000
asID:                     8100
IP address blocks:        5.252.80.0/24 maxlen: 24
                          191.96.64.0/24 maxlen: 24
                          191.101.132.0/24 maxlen: 24
                          191.101.205.0/24 maxlen: 24
                          191.101.240.0/24 maxlen: 24
                          191.101.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c0:37:f6:40:7d:cf:03:a9:cf:e5:61:e2:99:93:1e:83:84:48:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: May 11 20:50:37 2022 GMT
            Not After : May 10 20:55:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:86:b4:53:2e:bd:ed:83:af:60:c4:19:d5:
                    ee:87:f3:b8:a2:fe:1a:98:09:50:c4:db:62:3a:f0:
                    b9:c0:cb:07:13:ca:97:ff:e5:f5:b1:4e:63:87:bc:
                    69:50:34:d5:19:dc:5b:8c:21:5a:69:c3:35:bb:78:
                    38:09:15:00:02:a0:62:7c:92:9f:3e:a4:05:46:af:
                    d5:24:62:0e:3a:ed:8a:fb:dc:1f:78:e3:6f:7a:68:
                    90:b5:6d:b9:26:50:09:df:1c:b2:7f:b0:1a:16:7f:
                    bf:28:ba:bf:d8:44:82:3a:5f:f0:9e:16:03:7e:01:
                    3e:31:8a:88:81:bd:b1:6f:51:fa:7b:1a:fa:d3:e6:
                    34:f1:9d:0b:e2:aa:e2:f9:e4:4e:70:5a:5a:74:82:
                    b5:40:81:4e:4c:87:f0:b9:52:25:dc:43:21:87:9c:
                    cc:e0:1e:c5:6f:42:27:79:f3:db:61:08:1e:15:88:
                    d8:aa:98:af:89:41:1c:68:2e:f2:2a:0f:5b:32:57:
                    8f:fd:d1:eb:ac:60:7a:00:cd:4f:85:5a:15:22:42:
                    44:11:7e:7b:d7:39:6d:10:7c:62:eb:9a:04:08:71:
                    7a:e5:3c:ee:75:16:2b:d1:8d:c6:e4:c0:ba:62:72:
                    1f:9d:73:a2:79:46:47:b3:cb:8c:33:d8:3e:d0:19:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:80:C7:82:D2:68:C2:6A:8D:12:3A:AD:FF:A2:1C:38:D7:E7:9D:71
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.80.0/24
                  191.96.64.0/24
                  191.101.132.0/24
                  191.101.205.0/24
                  191.101.240.0/24
                  191.101.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:57:18:45:96:44:b1:fb:f5:68:7d:b5:e4:ec:62:74:10:
         41:a0:57:ea:1b:cb:5d:3f:a5:90:01:2a:48:37:09:ba:f6:87:
         a2:78:aa:b0:fe:13:e1:48:26:c5:a5:35:8f:43:c4:96:d1:ed:
         8a:05:d9:34:89:a6:0d:89:d6:24:0d:0a:85:ae:77:f5:ee:cf:
         65:b8:b7:5b:d1:1b:23:06:26:71:81:db:9a:a4:20:f9:62:a7:
         95:05:75:bc:b8:72:80:5c:ed:4a:70:92:31:34:31:a8:ff:17:
         1a:65:df:29:39:af:73:5e:9c:c2:aa:db:28:4a:38:14:b0:c9:
         37:3a:ad:2f:82:0a:79:ff:8b:9a:0e:d3:e9:ac:09:c4:db:78:
         11:8a:bc:4d:31:d4:e7:9e:13:03:62:92:d6:e8:fb:1b:96:fa:
         31:98:b2:2a:2f:f8:e2:6c:aa:5c:0b:ff:f1:e8:24:63:5e:89:
         4b:ce:60:96:33:5b:d1:28:00:e1:92:42:a9:6f:4e:02:af:d2:
         74:7b:8e:0a:58:8f:b2:c0:4b:c1:00:91:cb:2c:7a:bb:b4:71:
         91:1a:14:17:f7:32:8d:46:44:f8:7c:0d:5f:a4:5c:a0:70:38:
         bf:d5:01:48:a2:f3:d4:61:e9:c4:59:65:0e:bf:9c:6b:dd:ca:
         c5:9c:57:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org