Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138322e302f32332d3234203d3e20383334.roa
File:                     352e3138312e3138322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          ocH2vML6X2hezQXeYTsggWdXlO7Xw7IDLVlJuzIaX+A=
Subject key identifier:   EC:16:9D:98:21:ED:AF:FE:A4:18:C6:A1:39:BA:D4:46:AA:B2:20:DD
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       7501C40C5E92F4A595E87F5E6992E92452EFE8BC
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138322e302f32332d3234203d3e20383334.roa
Signing time:             Mon 26 Sep 2022 14:59:46 +0000
ROA not before:           Mon 26 Sep 2022 14:54:46 +0000
ROA not after:            Mon 25 Sep 2023 14:59:46 +0000
asID:                     834
IP address blocks:        5.181.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:01:c4:0c:5e:92:f4:a5:95:e8:7f:5e:69:92:e9:24:52:ef:e8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:54:46 2022 GMT
            Not After : Sep 25 14:59:46 2023 GMT
        Subject: CN=EC169D9821EDAFFEA418C6A139BAD446AAB220DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:b1:f5:19:40:58:20:ca:69:65:f1:ad:1e:
                    7f:54:43:f7:55:df:67:b6:a2:39:a4:89:04:ab:ba:
                    4a:97:51:4b:a9:3e:05:9b:11:7a:a5:66:07:2d:0c:
                    73:29:fa:7b:9f:82:81:0a:b3:ff:04:6f:0c:47:72:
                    f8:34:22:38:fc:e9:25:de:6a:8b:fb:4c:0c:7d:db:
                    10:53:ea:db:f6:60:d7:ac:87:f1:f7:69:55:19:dd:
                    5c:8f:d2:fb:6e:4d:f7:5b:5a:b8:58:8c:c5:ed:1c:
                    62:76:3b:49:f2:f3:b5:fc:33:4b:e6:fb:7c:bf:99:
                    74:fb:20:36:80:5e:50:ce:e7:15:b4:49:ec:02:be:
                    9f:90:c2:19:1e:a5:55:a0:d5:67:25:81:28:9f:b4:
                    af:1f:9a:b4:89:1d:55:af:79:1c:81:de:43:cd:13:
                    4a:38:3f:3a:af:45:46:2d:bb:06:9f:13:8b:09:89:
                    48:29:35:cb:1b:52:b7:83:d1:98:6a:e0:8e:b2:bf:
                    11:9f:c7:24:4b:03:05:39:4c:c0:c7:60:c4:5e:c2:
                    97:37:2f:f6:ca:73:a7:2b:55:3d:ff:74:8d:c6:e3:
                    3d:64:e0:d3:13:8c:a9:69:11:68:15:e6:c9:15:e2:
                    8c:08:ba:e8:80:b9:74:20:88:92:ff:6a:5e:c4:03:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:16:9D:98:21:ED:AF:FE:A4:18:C6:A1:39:BA:D4:46:AA:B2:20:DD
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:f0:48:35:67:c0:ab:67:e2:44:e5:7b:d1:e5:86:f0:87:
         8a:e8:ea:e6:ad:a4:b3:77:98:5f:ae:e1:b8:dd:82:43:be:66:
         3b:bf:38:df:0a:01:af:7d:08:cb:f0:67:5c:22:f7:e1:07:04:
         0b:16:73:1e:77:d3:86:df:d0:ab:d6:39:b5:01:73:76:95:83:
         22:7a:a5:fb:c1:66:d3:9e:74:f5:f5:4a:97:83:86:d2:60:b2:
         ab:b2:98:32:eb:99:59:3a:9b:e9:8c:39:01:e2:a0:4d:ae:e7:
         a0:6f:6d:9a:ac:18:fe:30:2e:70:b4:42:4d:aa:89:7e:63:02:
         62:54:b2:c4:06:8b:28:51:0b:ec:8d:00:4c:d5:d6:de:f3:ed:
         f8:0a:dd:bc:d5:a2:53:84:5a:d2:b4:72:08:56:28:d3:c1:b4:
         a0:c7:09:a8:a6:95:f4:1a:66:1f:34:99:ad:ef:5b:a2:fe:9b:
         ed:07:8c:47:75:90:55:2b:7c:aa:d3:bc:ce:c1:ef:14:76:b9:
         a7:ad:47:f2:44:5e:fb:f7:34:b1:21:09:c2:3d:56:9b:8e:16:
         6b:46:75:ff:11:83:89:a6:c8:da:59:66:35:22:58:c8:79:b1:
         c9:43:96:80:94:18:f2:a1:16:9c:73:f3:14:61:79:1e:59:57:
         41:a4:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org