Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138322e302f32342d3234203d3e2031323339.roa
File:                     352e3138312e3138322e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          Zv1gIB2NVEHJQO+pkp155S0dZQvs21HvmKKICYQXqQc=
Subject key identifier:   4A:B4:01:35:5E:6D:32:80:71:BB:D4:D5:31:1E:44:59:19:AB:EB:D4
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       5614CA5022E6CEAE20EFA981ED5EA447D8828FC1
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138322e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 26 Sep 2022 15:00:05 +0000
ROA not before:           Mon 26 Sep 2022 14:55:05 +0000
ROA not after:            Mon 25 Sep 2023 15:00:05 +0000
asID:                     1239
IP address blocks:        5.181.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:14:ca:50:22:e6:ce:ae:20:ef:a9:81:ed:5e:a4:47:d8:82:8f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:55:05 2022 GMT
            Not After : Sep 25 15:00:05 2023 GMT
        Subject: CN=4AB401355E6D328071BBD4D5311E445919ABEBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:37:b9:8c:8e:ed:31:ce:7f:6e:2c:81:34:
                    7c:b0:13:1a:e6:33:80:22:c8:48:73:69:4e:48:6f:
                    f9:34:b1:66:3c:01:3c:68:5a:74:d5:d1:b5:c0:0b:
                    32:30:42:17:3c:9f:2e:a7:e4:c9:b4:9e:f6:c6:58:
                    52:3b:5b:44:ea:ee:a5:9d:dd:4d:ed:77:9c:44:f7:
                    55:85:ae:b3:aa:f9:82:6a:8e:0c:b3:fb:3e:2a:69:
                    d3:8c:f3:25:b3:fe:16:d8:be:d1:89:6b:fc:91:a1:
                    fc:56:99:51:c0:18:51:ff:b3:77:de:5d:10:28:d6:
                    54:21:b5:89:69:fc:1a:34:25:88:19:ac:14:2f:da:
                    24:a3:57:2a:25:48:d9:96:93:f7:dc:e6:05:b4:e2:
                    d5:01:eb:58:76:36:c8:f6:8e:10:0e:b0:a4:b0:03:
                    5e:9b:a0:ea:90:7a:3e:0d:8c:b7:2c:97:29:a8:a1:
                    73:6f:93:11:45:d7:69:f3:39:f8:2f:dc:2b:ae:cc:
                    95:30:3c:84:2f:37:7f:86:f3:67:91:0f:59:ab:7e:
                    7b:7d:44:30:69:86:ff:2b:bf:9c:65:63:22:49:9a:
                    03:3d:de:4c:66:43:2d:a6:18:8e:19:cb:5e:d8:28:
                    fc:0b:91:80:ee:07:00:8d:44:02:b5:3c:6f:f0:11:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B4:01:35:5E:6D:32:80:71:BB:D4:D5:31:1E:44:59:19:AB:EB:D4
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/352e3138312e3138322e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:df:6d:18:94:54:56:b9:db:1c:ee:d4:59:cc:2a:46:c6:
         f1:cd:f1:9a:5e:9f:f8:c6:5e:76:a8:7a:9d:cf:09:5c:a9:8e:
         02:d4:35:47:4e:b4:1e:83:71:d0:5a:2e:7c:7f:2b:ef:d8:cd:
         12:60:65:ce:6b:37:55:25:5a:7c:84:39:fc:02:51:96:fa:57:
         4a:be:7f:27:50:18:ee:35:50:55:82:49:5a:83:b9:b8:b6:15:
         5d:be:d5:da:07:ba:7e:81:ad:33:26:5d:ae:10:52:bb:58:56:
         bf:7b:c3:25:9d:45:2f:09:d6:da:1c:bc:cc:35:8e:71:31:08:
         cf:dc:c5:b1:45:d5:af:a4:51:1a:81:79:e2:66:ab:e9:eb:cb:
         c3:c8:62:39:70:75:bf:68:d5:5c:2c:5e:49:cb:7d:12:fe:00:
         c6:c2:1f:c4:d0:5e:35:5c:0a:ee:d3:92:5d:f8:2f:64:04:00:
         b8:ed:05:55:79:00:bf:d1:1a:92:7a:13:ba:7f:21:3b:05:9f:
         65:22:4a:6e:9e:e8:ae:86:f3:db:ea:84:db:34:c2:92:74:8e:
         4d:bc:9f:1d:fd:89:14:ad:da:78:e0:93:1b:a5:ae:13:55:b8:
         45:0a:50:4e:e4:64:10:b5:e5:c6:6e:07:71:05:7d:c0:31:b5:
         8b:f5:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org