Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS9050.roa
File:                     AS9050.roa (raw, json)
Hash identifier:          ps/fRCybdCZfcxCjjGX9UFYz3DhOmycSFS+suCXlNBo=
Subject key identifier:   94:37:0D:0F:EC:9B:8E:E8:2A:7C:A5:BB:0C:D5:D4:A3:59:6C:45:0C
Certificate issuer:       /CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
Certificate serial:       3D30861B2BBB10CCA08A05BC75F67913F14DCFF4
Authority key identifier: B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29
Authority info access:    rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS9050.roa
Signing time:             Fri 08 Apr 2022 14:56:11 +0000
ROA not before:           Fri 08 Apr 2022 14:51:11 +0000
ROA not after:            Fri 07 Apr 2023 14:56:11 +0000
asID:                     9050
IP address blocks:        45.88.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:30:86:1b:2b:bb:10:cc:a0:8a:05:bc:75:f6:79:13:f1:4d:cf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729
        Validity
            Not Before: Apr  8 14:51:11 2022 GMT
            Not After : Apr  7 14:56:11 2023 GMT
        Subject: CN=3082010A0282010100E81D79ABD4D446392506CBAE20EB6852D01B6DFBA24FBE76FBFA2D56D633AB82639EAF694901C1147D2E945D801D00F7D6A99A8394B41C29A4C3E61047CCE86A3156E93DAC604B909A282D6D7DB74A612E0144941BFBDF5407CFC7CA9F1CF234B4B337B52A5B11A91A9FD0160E9BAF4DB582232D8F890E689CDF86FAD78B83C5719D00609588FFA70AC5015BA1B1DC4309EA711F900BE666825FF548E396BEB0D7E74579B79B93E9557B073E805F5B27B6118CB77AC28F56995E78FA1F353A2BCB5B61D0073F8B6B57ADE7D48C5DEEF1DC1781D1D1FB5D1CA5A55FFC65CE693B85C47CD87653617A1CF2550D4E3348F84B50183C242CCD02F41F9653CAB8E7030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1d:79:ab:d4:d4:46:39:25:06:cb:ae:20:eb:
                    68:52:d0:1b:6d:fb:a2:4f:be:76:fb:fa:2d:56:d6:
                    33:ab:82:63:9e:af:69:49:01:c1:14:7d:2e:94:5d:
                    80:1d:00:f7:d6:a9:9a:83:94:b4:1c:29:a4:c3:e6:
                    10:47:cc:e8:6a:31:56:e9:3d:ac:60:4b:90:9a:28:
                    2d:6d:7d:b7:4a:61:2e:01:44:94:1b:fb:df:54:07:
                    cf:c7:ca:9f:1c:f2:34:b4:b3:37:b5:2a:5b:11:a9:
                    1a:9f:d0:16:0e:9b:af:4d:b5:82:23:2d:8f:89:0e:
                    68:9c:df:86:fa:d7:8b:83:c5:71:9d:00:60:95:88:
                    ff:a7:0a:c5:01:5b:a1:b1:dc:43:09:ea:71:1f:90:
                    0b:e6:66:82:5f:f5:48:e3:96:be:b0:d7:e7:45:79:
                    b7:9b:93:e9:55:7b:07:3e:80:5f:5b:27:b6:11:8c:
                    b7:7a:c2:8f:56:99:5e:78:fa:1f:35:3a:2b:cb:5b:
                    61:d0:07:3f:8b:6b:57:ad:e7:d4:8c:5d:ee:f1:dc:
                    17:81:d1:d1:fb:5d:1c:a5:a5:5f:fc:65:ce:69:3b:
                    85:c4:7c:d8:76:53:61:7a:1c:f2:55:0d:4e:33:48:
                    f8:4b:50:18:3c:24:2c:cd:02:f4:1f:96:53:ca:b8:
                    e7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:0D:0F:EC:9B:8E:E8:2A:7C:A5:BB:0C:D5:D4:A3:59:6C:45:0C
            X509v3 Authority Key Identifier:
                keyid:B0:CF:E5:B2:85:D0:9A:0E:82:82:0F:CD:DC:59:C9:4C:1D:7F:97:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-5/0/B0CFE5B285D09A0E82820FCDDC59C94C1D7F9729.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-3/0/AS9050.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:de:e0:88:73:80:c8:20:d1:25:fa:3c:3a:da:c9:2b:ab:fc:
         6f:31:3e:88:fe:97:ef:16:0d:bf:a6:42:a4:fd:d2:c9:c8:d7:
         59:b3:0f:04:85:a9:4a:f3:73:56:29:d8:f8:71:d1:f6:bf:ab:
         d4:10:88:a1:d0:17:14:b6:92:0b:48:a5:9f:9a:72:f2:08:03:
         2e:3b:7f:8c:86:1c:4f:13:57:16:94:61:11:68:f8:49:5e:bc:
         95:d5:d9:26:41:b3:4d:72:b2:df:f2:71:42:91:c1:2e:6d:72:
         ef:61:f1:db:a3:95:7c:65:40:79:b4:c9:12:91:79:ad:94:d3:
         fb:e8:30:78:64:d9:de:89:24:01:8a:20:9b:25:9f:c5:04:f8:
         73:df:fb:fe:02:5e:70:4b:78:ab:eb:3f:a9:e5:13:5f:cf:9b:
         51:55:de:c9:82:1a:21:ed:05:a0:25:b2:0d:26:aa:27:36:ca:
         72:c3:2b:aa:16:fc:6c:f8:c5:6a:44:2f:f3:70:f3:c4:88:da:
         8e:19:be:c3:de:d2:f1:2c:b4:b4:47:c9:80:44:ec:98:04:c9:
         69:cc:31:3d:34:f9:d5:2f:2e:c5:13:6e:3f:df:af:5e:06:c7:
         89:47:9d:bd:fb:ba:53:21:c5:fc:8d:f8:7d:0b:37:0b:45:3d:
         01:6b:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org