Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323039323630.roa
File:                     352e3138312e3138302e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier:          oGMaPBuaqMMIttVX2QaFkL0Sz22CTK8Yr4diB/63F7g=
Subject key identifier:   92:23:9F:2F:C9:3F:FE:ED:91:D8:3B:B7:38:63:5F:55:CD:CF:FC:75
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       0A22B50247B616BD254A2D2990CEB332D5B527CF
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323039323630.roa
Signing time:             Wed 09 Nov 2022 14:42:27 +0000
ROA not before:           Wed 09 Nov 2022 14:37:27 +0000
ROA not after:            Wed 08 Nov 2023 14:42:27 +0000
asID:                     209260
IP address blocks:        5.181.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:22:b5:02:47:b6:16:bd:25:4a:2d:29:90:ce:b3:32:d5:b5:27:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Nov  9 14:37:27 2022 GMT
            Not After : Nov  8 14:42:27 2023 GMT
        Subject: CN=92239F2FC93FFEED91D83BB738635F55CDCFFC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:a7:3a:b0:5f:04:22:eb:34:30:5f:7c:ef:
                    12:bd:02:07:66:68:a3:7d:dd:ce:1f:78:43:31:92:
                    e8:38:0f:ca:ae:8b:e9:dd:f4:fc:44:6d:d7:fa:99:
                    0d:2a:9b:d0:fd:b8:5c:1c:d2:b3:d5:bb:67:dd:db:
                    2e:48:69:1f:28:a2:eb:d3:96:30:0c:4d:ed:7d:94:
                    c3:b1:8f:d4:80:8d:5d:7f:13:0e:c4:27:44:7b:5f:
                    20:6b:29:93:07:96:48:39:2e:e9:87:e8:d1:37:4b:
                    cd:99:1b:60:d8:de:91:9d:f0:66:a1:5a:48:6d:41:
                    9c:c0:fd:ad:75:69:76:07:0e:01:b5:7f:33:84:93:
                    56:4d:41:2b:30:57:04:8d:14:57:54:47:a1:9d:5c:
                    75:10:6c:44:66:8f:fb:12:26:aa:6c:9c:09:05:84:
                    da:97:6e:62:52:ac:54:fa:54:e5:94:09:cd:2b:e5:
                    6e:a3:4b:93:87:da:95:07:01:a4:32:03:54:2a:28:
                    25:fd:e2:d0:f9:1e:cb:43:a6:4b:86:f7:c8:05:23:
                    f7:92:42:4a:e2:ef:94:b1:a1:fb:86:c0:e2:92:14:
                    85:44:dc:e0:b9:0b:fc:3b:b0:d2:18:7c:e6:01:0d:
                    1f:ca:22:fd:9e:71:f9:7e:80:4b:52:6b:67:88:0c:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:23:9F:2F:C9:3F:FE:ED:91:D8:3B:B7:38:63:5F:55:CD:CF:FC:75
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323039323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:f3:f9:54:8c:66:3f:6e:5b:83:0d:05:e2:5f:93:6c:81:31:
         39:d0:66:8e:15:9c:fd:f0:ef:04:09:78:0f:08:34:9e:6c:04:
         69:c3:de:42:6c:4e:a7:34:e6:a7:7d:3d:56:40:19:19:5c:8c:
         41:96:0f:54:96:72:d3:64:86:5d:59:41:ba:9f:05:04:b6:ad:
         d4:4d:87:29:b7:0b:1c:99:a4:69:8c:1e:da:a3:d7:b0:4d:2f:
         85:95:4e:69:07:e8:83:2b:0e:d7:86:b0:dd:43:22:6e:7a:e0:
         57:ba:12:b0:d0:a2:d7:b5:b7:46:61:08:be:4e:ab:e9:58:68:
         a5:5d:cb:42:80:f7:88:38:c3:e6:74:01:31:c9:3e:b3:02:fa:
         d1:38:5c:1b:a2:db:b9:b2:59:04:cd:c0:97:b4:aa:a3:1d:f5:
         94:be:ed:a3:a3:8c:cb:de:4f:66:69:e4:6a:e7:f3:dc:13:02:
         a3:5e:ec:49:b9:88:e5:6b:4d:69:f6:b7:83:af:68:36:87:65:
         32:7d:1c:58:73:36:89:3a:d4:25:d6:d1:33:be:30:c6:56:83:
         84:7c:8d:48:93:9b:19:f5:94:ab:65:23:a3:ba:4f:e1:80:05:
         56:72:16:0a:d3:78:5e:4b:8b:cb:42:ed:7e:bf:3b:5f:36:17:
         0b:ca:ab:85
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUCiK1Ake2Fr0lSi0pkM6zMtW1J88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMjExMDkxNDM3MjdaFw0yMzExMDgxNDQyMjdaMDMxMTAvBgNV
BAMTKDkyMjM5RjJGQzkzRkZFRUQ5MUQ4M0JCNzM4NjM1RjU1Q0RDRkZDNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfPqc6sF8EIus0MF987xK9Agdm
aKN93c4feEMxkug4D8qui+nd9PxEbdf6mQ0qm9D9uFwc0rPVu2fd2y5IaR8oouvT
ljAMTe19lMOxj9SAjV1/Ew7EJ0R7XyBrKZMHlkg5LumH6NE3S82ZG2DY3pGd8Gah
WkhtQZzA/a11aXYHDgG1fzOEk1ZNQSswVwSNFFdUR6GdXHUQbERmj/sSJqpsnAkF
hNqXbmJSrFT6VOWUCc0r5W6jS5OH2pUHAaQyA1QqKCX94tD5HstDpkuG98gFI/eS
Qkri75SxofuGwOKSFIVE3OC5C/w7sNIYfOYBDR/KIv2ecfl+gEtSa2eIDGm1AgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUkiOfL8k//u2R2Du3OGNfVc3P/HUwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBpAYI
KwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zNTJlMzEzODMxMmUzMTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzMjMwMzkzMjM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFtbQwDQYJKoZIhvcNAQELBQADggEB
AL3z+VSMZj9uW4MNBeJfk2yBMTnQZo4VnP3w7wQJeA8INJ5sBGnD3kJsTqc05qd9
PVZAGRlcjEGWD1SWctNkhl1ZQbqfBQS2rdRNhym3CxyZpGmMHtqj17BNL4WVTmkH
6IMrDteGsN1DIm564Fe6ErDQote1t0ZhCL5Oq+lYaKVdy0KA94g4w+Z0ATHJPrMC
+tE4XBui27myWQTNwJe0qqMd9ZS+7aOjjMveT2Zp5Grn89wTAqNe7Em5iOVrTWn2
t4OvaDaHZTJ9HFhzNok61CXW0TO+MMZWg4R8jUiTmxn1lKtlI6O6T+GABVZyFgrT
eF5Li8tC7X6/O182FwvKq4U=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org