Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323131323337.roa
File:                     352e3138312e3138302e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier:          8noPpujHz3KtAmyR6U5Mbi/0vUYomAEhF5E1DNlCZoE=
Subject key identifier:   CA:85:3D:73:0D:F9:8C:BD:05:60:2D:6D:6E:2B:F4:F7:50:30:77:31
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       3535F61ECF04B948FB3539456CD2DF3044846C01
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323131323337.roa
Signing time:             Mon 26 Sep 2022 14:58:25 +0000
ROA not before:           Mon 26 Sep 2022 14:53:25 +0000
ROA not after:            Mon 25 Sep 2023 14:58:25 +0000
asID:                     211237
IP address blocks:        5.181.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:35:f6:1e:cf:04:b9:48:fb:35:39:45:6c:d2:df:30:44:84:6c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:53:25 2022 GMT
            Not After : Sep 25 14:58:25 2023 GMT
        Subject: CN=CA853D730DF98CBD05602D6D6E2BF4F750307731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:51:54:f9:d9:ba:4b:ce:eb:01:79:bb:ae:
                    16:52:c9:d9:41:38:70:66:34:fc:21:bf:c4:e5:45:
                    52:ae:2e:b1:30:1a:2a:50:2d:61:b0:a9:21:b0:3d:
                    bc:b5:61:a7:42:6d:96:d9:2c:db:80:4d:16:4e:eb:
                    7f:2f:93:2b:fa:eb:cc:2f:67:ce:a7:1e:d1:0b:26:
                    fc:5e:6e:46:96:d5:70:81:45:21:0d:af:8c:c4:01:
                    57:10:2c:d7:54:eb:24:b9:40:14:00:c4:3b:b9:25:
                    d6:a0:e7:1f:60:df:6d:e0:09:4b:0b:6e:0a:84:2f:
                    8b:af:97:55:1d:95:8c:e5:6c:91:3c:29:73:63:05:
                    5a:07:41:2a:6f:be:cd:cf:95:fb:e3:4b:2d:05:0e:
                    4c:fe:29:3a:00:93:cd:35:0b:30:77:c5:a2:9c:1f:
                    fc:4d:f9:9f:8b:d3:44:7a:d4:09:83:bc:3a:d8:84:
                    6e:21:1d:b4:cd:97:25:d8:28:21:48:17:80:b2:e2:
                    5e:12:8b:02:af:54:e1:2b:a8:43:40:35:4d:36:bd:
                    a1:04:62:9e:b1:d8:9e:7d:c9:06:58:e2:65:04:5c:
                    b8:8f:e2:d3:cd:3a:f2:41:e8:a2:93:b8:1d:b7:f4:
                    1b:3d:e4:5f:bf:af:81:e8:5c:e1:f7:37:4e:ff:a4:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:85:3D:73:0D:F9:8C:BD:05:60:2D:6D:6E:2B:F4:F7:50:30:77:31
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20323131323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ea:8a:42:84:fa:93:1d:81:4e:be:f5:ba:d7:72:f9:03:87:
         90:a6:93:2e:c2:94:e7:7d:ed:5b:34:10:2e:bf:e1:0e:f1:52:
         05:c8:11:10:50:15:eb:37:e6:ce:dd:00:4e:a3:d8:37:7b:44:
         07:97:6c:23:f9:f1:65:7b:7b:a2:5a:f9:3a:09:25:5a:f7:1d:
         3f:c1:f4:a4:9e:c1:40:57:ab:1c:2a:b1:fc:ec:5a:0c:ed:f5:
         66:5c:ba:4a:6e:59:b5:30:70:3b:c6:ad:42:03:72:41:0a:93:
         c7:7c:ee:ff:59:00:24:09:61:2c:71:5f:91:01:b5:9a:d0:e0:
         56:b2:f5:c8:03:c1:9f:40:08:02:f4:42:bc:63:c4:b4:61:93:
         39:7d:0c:62:38:71:27:9b:8c:1e:d8:5a:7f:19:8d:59:35:44:
         a4:4a:be:56:e8:da:f2:34:6a:19:32:3f:a4:9b:70:66:f0:22:
         75:c3:51:38:3c:5a:a9:6c:67:ca:66:69:ef:40:45:76:76:c2:
         28:66:91:a6:53:8e:a5:0a:0f:99:ae:56:25:9f:01:96:e1:81:
         50:aa:d6:8a:c9:18:88:0c:ad:16:6f:c6:73:e4:df:8c:30:5a:
         cd:e0:42:be:46:ba:b5:62:f4:fc:62:ed:6c:6e:73:fc:f2:c2:
         48:55:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org