Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138312e302f32342d3234203d3e2031323339.roa
File:                     352e3138312e3138312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          qanb/HaVBST/esTgGe9sAaChrLIrUkrD3o1VNhZHAkw=
Subject key identifier:   D0:4F:04:6B:DF:AB:BA:B2:91:B7:C4:EC:0E:5D:7E:9A:98:7F:3C:41
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       59A0B372185378AF9A21CEC93CC85BAFBA833F85
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138312e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 26 Sep 2022 14:59:10 +0000
ROA not before:           Mon 26 Sep 2022 14:54:10 +0000
ROA not after:            Mon 25 Sep 2023 14:59:10 +0000
asID:                     1239
IP address blocks:        5.181.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a0:b3:72:18:53:78:af:9a:21:ce:c9:3c:c8:5b:af:ba:83:3f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:54:10 2022 GMT
            Not After : Sep 25 14:59:10 2023 GMT
        Subject: CN=D04F046BDFABBAB291B7C4EC0E5D7E9A987F3C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:83:31:cb:84:ce:9a:32:b8:10:0c:77:65:
                    eb:53:a8:85:ed:f4:3e:9d:e0:1d:69:56:49:18:9a:
                    58:1f:4e:a5:29:9f:68:65:1a:f2:0d:bf:62:6f:71:
                    0b:fe:f3:70:18:5e:1b:9d:6a:0a:19:10:7f:b9:79:
                    3e:df:a1:46:5f:7c:e9:c4:de:07:84:d7:2d:53:64:
                    66:09:43:a8:93:69:fc:59:fe:98:d6:00:d8:7a:94:
                    57:ec:23:7a:05:7e:e1:a6:de:8a:8f:14:c5:bd:82:
                    27:e0:33:25:a0:ef:9e:3f:60:a1:13:80:89:95:dd:
                    9e:60:6d:5a:b9:e4:08:a6:ca:fe:aa:a0:b7:ea:aa:
                    13:c7:64:54:1e:01:bf:be:20:93:c4:83:88:dd:ca:
                    17:2f:29:ce:bb:39:bf:30:91:c5:bb:6a:4d:1e:a5:
                    0f:ff:af:e8:05:2d:b0:86:ba:31:64:24:3b:a7:f2:
                    7d:f6:e9:98:4a:45:11:f0:9e:a6:81:8d:ae:1b:36:
                    4b:a0:c9:30:e8:b4:da:c7:76:3f:f1:9c:ba:c4:61:
                    ad:b2:7a:fd:db:4f:72:bd:08:c5:20:e4:37:9f:51:
                    1a:57:43:37:df:ec:52:11:e8:0a:de:d2:af:5d:3c:
                    82:37:c9:02:a6:22:6e:13:63:41:19:8f:d4:58:4a:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4F:04:6B:DF:AB:BA:B2:91:B7:C4:EC:0E:5D:7E:9A:98:7F:3C:41
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138312e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:e3:19:b6:70:fe:88:ce:6c:ce:d7:fd:3d:f8:63:7e:e7:d4:
         d6:7d:a1:1f:59:60:70:dd:0e:9d:98:ce:75:61:d0:ad:0d:db:
         b0:62:2b:78:37:2d:3a:a6:4b:c2:f5:48:42:42:b4:8a:ff:7e:
         d4:ca:10:e5:f7:46:80:5e:f4:9a:5c:85:ac:98:a3:f8:71:97:
         4b:d3:d4:f3:44:e4:63:d0:ee:f9:a9:65:a3:f6:71:86:c5:96:
         5f:7b:07:87:c6:49:d1:db:9d:f6:38:56:49:9b:e7:11:26:da:
         e6:9d:6a:53:3c:5e:93:0d:05:2f:2a:39:fb:86:b1:8b:8c:61:
         0f:fc:0b:d4:a1:09:e9:10:2c:a0:93:ec:c4:eb:5d:7e:de:97:
         a5:92:5a:80:74:8c:f0:c1:cd:c8:cf:28:2b:d0:5f:ea:33:37:
         8e:39:f8:02:a1:72:bc:ef:77:58:15:86:ca:18:f9:e2:af:0a:
         c5:4a:59:08:5a:28:ed:bd:e6:4e:ed:5a:c4:72:5b:28:7e:3a:
         dd:c8:c5:c6:95:03:f4:11:a0:a8:2e:c4:11:40:e9:b4:1f:ab:
         dd:2a:94:4f:f8:95:68:fd:9e:ed:fd:a9:6c:f8:b1:c1:ac:3c:
         85:ea:a3:02:a7:c6:81:2b:76:67:ce:6f:88:40:3b:0b:4b:f0:
         87:ef:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org