Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20383334.roa
File:                     352e3138312e3138302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          9PGNckM6YQs7tBc6/qc9ihb6frsfYr5rgDZu89hlfgg=
Subject key identifier:   D4:83:48:3F:2F:D2:D1:DD:B8:74:E1:F1:97:54:4F:E0:DF:F4:0C:0D
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       4258A14D93F082C66D5B34D90873E5C0F8C4227C
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:58:57 +0000
ROA not before:           Mon 26 Sep 2022 14:53:57 +0000
ROA not after:            Mon 25 Sep 2023 14:58:57 +0000
asID:                     834
IP address blocks:        5.181.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:58:a1:4d:93:f0:82:c6:6d:5b:34:d9:08:73:e5:c0:f8:c4:22:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:53:57 2022 GMT
            Not After : Sep 25 14:58:57 2023 GMT
        Subject: CN=D483483F2FD2D1DDB874E1F197544FE0DFF40C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:80:ed:12:48:8e:96:2f:e4:5f:36:2b:34:
                    d2:1c:3e:ee:0b:b5:59:2e:6f:1a:c7:21:69:53:4a:
                    8c:3a:8e:a3:ff:be:5b:fc:87:ce:cc:f5:be:11:8b:
                    b0:9c:55:3a:dc:73:13:17:fc:42:1a:a4:9e:e3:e7:
                    af:ae:d8:84:19:b7:2b:0d:86:fc:ef:59:5b:4d:b2:
                    11:63:3e:6e:f6:4c:89:20:0d:7f:2a:53:8c:9b:35:
                    23:7f:e1:33:9e:1e:40:eb:34:3c:6f:4a:78:08:ea:
                    79:d8:4d:19:10:74:be:ce:93:3d:16:f6:74:9d:82:
                    6c:bc:78:0b:68:e0:95:5c:68:02:e6:f4:b5:da:c1:
                    b1:cd:1b:4a:fb:1f:12:38:68:53:40:53:8f:dc:54:
                    ed:74:0c:2e:74:38:b7:bc:24:27:3a:bd:d3:5f:d2:
                    4c:36:1f:88:40:d4:49:0d:da:bc:36:b3:5c:56:ef:
                    f7:4d:c3:af:56:de:e4:74:d3:fa:97:06:3c:a6:3c:
                    18:43:ad:ed:2f:19:95:3a:ee:32:b4:88:5d:6a:8e:
                    ea:4d:a6:43:23:dd:21:e1:73:e8:fd:41:56:11:d2:
                    e0:64:b0:89:93:1a:62:19:28:5b:f2:a3:e5:2b:1b:
                    35:5b:ba:50:85:68:52:3e:69:db:66:c2:7b:25:12:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:48:3F:2F:D2:D1:DD:B8:74:E1:F1:97:54:4F:E0:DF:F4:0C:0D
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:97:24:f1:e0:03:98:1d:80:12:4e:09:e0:67:59:4e:fc:
         7b:16:f9:c4:4e:fb:5b:f3:b9:7a:ce:a3:f0:4d:d9:a8:98:a9:
         4b:25:d8:54:34:e2:7b:74:ac:b0:f3:a9:61:54:00:07:6c:db:
         f6:b6:5f:f1:80:d9:58:db:e4:9d:09:b5:0d:b4:28:aa:03:d1:
         69:f8:0a:4b:bf:9a:b8:b1:3d:11:03:d2:8d:0e:6e:98:c0:2e:
         80:6e:3c:87:ea:fb:99:96:eb:bc:6e:d8:d1:d2:bf:29:ae:61:
         22:ee:06:d7:e1:ac:ae:24:ba:e5:f6:3e:fa:54:9f:ae:3b:6d:
         9c:dc:9a:2d:fa:23:5c:d6:3c:a5:aa:e9:33:d3:39:b6:5b:19:
         c7:16:3e:3f:3e:42:09:94:00:ef:83:3d:90:0b:f0:4f:35:cf:
         38:cb:16:1f:3c:3f:d3:0c:8e:a4:a8:9c:39:c7:58:81:65:81:
         90:a1:65:4d:99:1a:74:d6:83:72:d8:01:d4:f8:fb:01:03:5b:
         db:ae:51:33:b7:25:cf:70:e3:6b:31:b0:83:cb:2e:a1:09:49:
         b4:04:3c:90:45:4a:ff:f1:e4:34:1d:e7:7d:32:1b:22:a0:8c:
         9d:8b:03:24:fd:c7:13:07:80:0f:61:c7:c0:d0:23:54:37:ed:
         9e:9a:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org