Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323032363733.roa
File:                     352e3138312e3138302e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier:          6P0iP4YWD/k2C/cOUmZ5V02yz42hzOy/AyA2vUhK0qY=
Subject key identifier:   C4:0E:60:17:AE:C3:39:0A:7C:44:09:19:7B:61:92:9E:DB:9F:37:48
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       7D97210E11B1BB6ECEC1A515C260BB38E4BA1816
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323032363733.roa
Signing time:             Wed 03 May 2023 16:40:37 +0000
ROA not before:           Wed 03 May 2023 16:35:37 +0000
ROA not after:            Wed 01 May 2024 16:40:37 +0000
asID:                     202673
IP address blocks:        5.181.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:97:21:0e:11:b1:bb:6e:ce:c1:a5:15:c2:60:bb:38:e4:ba:18:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: May  3 16:35:37 2023 GMT
            Not After : May  1 16:40:37 2024 GMT
        Subject: CN=C40E6017AEC3390A7C4409197B61929EDB9F3748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:70:bc:7e:d4:85:e8:8d:be:78:ff:3c:78:
                    79:11:74:44:b6:66:7d:2b:c3:f9:aa:4a:bc:a6:a5:
                    3e:5a:00:fd:b2:fd:2a:29:cc:b5:fa:ef:31:62:dc:
                    ec:06:28:e9:6f:24:5e:09:f9:f2:5a:54:9e:3d:85:
                    4c:2a:78:1f:7c:b3:45:99:b4:29:4f:9f:97:e8:d2:
                    a1:a6:ff:54:11:bc:70:09:04:07:f2:28:16:f9:c5:
                    65:48:06:23:dd:92:b6:2d:41:1c:98:c2:5c:90:44:
                    dd:47:3c:46:19:fa:cb:1d:4b:0a:03:d5:98:a3:12:
                    d5:74:48:0e:76:bb:4a:5d:de:74:b7:33:c8:57:b1:
                    53:ba:33:c3:b4:38:fa:24:31:11:a3:83:51:72:10:
                    f9:eb:65:90:5b:ce:29:a7:3e:50:55:4d:1f:16:d7:
                    06:6a:0f:a8:ae:ee:47:77:96:07:26:7c:20:9f:d8:
                    a0:2a:9f:4a:54:78:cf:5a:fa:58:15:f3:c9:b6:45:
                    16:33:75:e2:be:9e:07:05:42:00:65:28:e9:69:46:
                    33:23:36:41:14:9c:bb:2d:cb:68:6e:4a:1d:a5:3a:
                    02:92:b4:e1:80:88:d9:57:bc:47:77:f7:9b:3c:80:
                    f2:84:a6:a7:41:96:c1:32:3a:56:3a:db:d9:f4:b9:
                    a0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:60:17:AE:C3:39:0A:7C:44:09:19:7B:61:92:9E:DB:9F:37:48
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323032363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:c1:d6:77:33:e4:45:e9:5d:e7:d4:e5:8f:80:d7:5d:d1:
         3a:ae:9b:72:cd:74:74:ac:45:37:ec:d8:fb:ea:57:0b:86:fc:
         2d:a9:86:dd:02:cf:28:eb:31:b8:24:7e:b7:bd:46:a0:16:b1:
         36:d1:08:b5:fc:83:21:cf:74:90:5a:5c:94:87:20:64:cc:f3:
         2c:b0:47:13:c9:b9:33:13:1e:6a:fb:98:34:53:9f:da:32:52:
         39:d9:c9:b8:52:d0:1f:f9:c2:3d:97:06:a0:54:2d:9a:87:ef:
         04:83:d2:5b:bf:d5:c3:41:3a:ee:b1:1f:8f:b9:06:c8:c5:7c:
         57:a2:ff:51:3e:aa:7e:9b:40:91:a8:53:64:b0:82:ce:4b:51:
         3b:5a:75:61:a7:31:2a:ea:fb:ef:f8:67:af:d3:18:9f:64:08:
         ab:63:b5:6d:af:66:ea:0e:a2:db:e4:90:3c:d9:ca:c7:f0:dc:
         74:32:1e:8c:76:2a:bf:07:31:9d:f6:b0:32:51:f1:74:3d:0b:
         0d:12:82:12:15:92:be:5a:c6:10:7a:9c:ff:6b:62:7e:5f:44:
         53:95:7f:1a:d6:c0:94:34:d3:73:0e:01:b9:69:5e:08:08:e7:
         38:f3:21:00:50:e4:d6:4a:9d:03:6c:ac:ff:e4:63:f7:b9:bb:
         37:18:d7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org