Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa
File:                     3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa (raw, json)
Hash identifier:          RbVVbE6JoCskA2AWEjZJclIeRYSrO1Kaheo6oZcgFW0=
Subject key identifier:   DF:99:1F:0B:FF:78:7F:88:0C:7A:6A:6B:3B:57:8B:6E:B7:EE:07:AF
Certificate issuer:       /CN=0B571D046EE5DDB45973505832427E4002C57BBD
Certificate serial:       3E9DE5393475CC36E2CD24FD44B503ADA3ABA93E
Authority key identifier: 0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD
Authority info access:    rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa
Signing time:             Wed 18 May 2022 14:55:05 +0000
ROA not before:           Wed 18 May 2022 14:50:05 +0000
ROA not after:            Wed 17 May 2023 14:55:05 +0000
asID:                     138156
IP address blocks:        103.141.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9d:e5:39:34:75:cc:36:e2:cd:24:fd:44:b5:03:ad:a3:ab:a9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B571D046EE5DDB45973505832427E4002C57BBD
        Validity
            Not Before: May 18 14:50:05 2022 GMT
            Not After : May 17 14:55:05 2023 GMT
        Subject: CN=3082010A0282010100DFD5570CE5E508E77C42DF212A9276F85AD5B76FBBB821C8778B4E2C499A45ECD9423812E80501E90B29E83CFECEF0783244A6A47C7645F8E197CFB0F63F2F79E4C492A251B4FC855529609AE999A123B94682466D629085D01616D4D177DD190FDB705006C4938B7F7928DEE45F19D1CB1045A7436605CAE45EC700AA29E469CDE3D317708E0B5BA87146B67101A68B531545542E559E0AD754513A1380BBB16EB7726F24025F441114542225B09F4A878D2B002303DDAA7FFE0E41B7B42A33E5FADC2DE4FD6D05F1F86307005935419A7E985DFAE9400F4F8FDE391C78DF5E1F0A5398356E7FEED7F018D3C7DE5B810333C5BE38244CBEF51B28F2FFD4FD0B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d5:57:0c:e5:e5:08:e7:7c:42:df:21:2a:92:
                    76:f8:5a:d5:b7:6f:bb:b8:21:c8:77:8b:4e:2c:49:
                    9a:45:ec:d9:42:38:12:e8:05:01:e9:0b:29:e8:3c:
                    fe:ce:f0:78:32:44:a6:a4:7c:76:45:f8:e1:97:cf:
                    b0:f6:3f:2f:79:e4:c4:92:a2:51:b4:fc:85:55:29:
                    60:9a:e9:99:a1:23:b9:46:82:46:6d:62:90:85:d0:
                    16:16:d4:d1:77:dd:19:0f:db:70:50:06:c4:93:8b:
                    7f:79:28:de:e4:5f:19:d1:cb:10:45:a7:43:66:05:
                    ca:e4:5e:c7:00:aa:29:e4:69:cd:e3:d3:17:70:8e:
                    0b:5b:a8:71:46:b6:71:01:a6:8b:53:15:45:54:2e:
                    55:9e:0a:d7:54:51:3a:13:80:bb:b1:6e:b7:72:6f:
                    24:02:5f:44:11:14:54:22:25:b0:9f:4a:87:8d:2b:
                    00:23:03:dd:aa:7f:fe:0e:41:b7:b4:2a:33:e5:fa:
                    dc:2d:e4:fd:6d:05:f1:f8:63:07:00:59:35:41:9a:
                    7e:98:5d:fa:e9:40:0f:4f:8f:de:39:1c:78:df:5e:
                    1f:0a:53:98:35:6e:7f:ee:d7:f0:18:d3:c7:de:5b:
                    81:03:33:c5:be:38:24:4c:be:f5:1b:28:f2:ff:d4:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:1F:0B:FF:78:7F:88:0C:7A:6A:6B:3B:57:8B:6E:B7:EE:07:AF
            X509v3 Authority Key Identifier:
                keyid:0B:57:1D:04:6E:E5:DD:B4:59:73:50:58:32:42:7E:40:02:C5:7B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/0B571D046EE5DDB45973505832427E4002C57BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/2/0B571D046EE5DDB45973505832427E4002C57BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/2/3130332e3134312e36392e302f32342d3234203d3e20313338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:03:1e:c7:b9:30:49:f1:49:81:ba:62:3b:0f:ae:3f:26:
         2a:0e:f3:c9:95:b0:cb:e7:95:29:f9:79:4f:fd:5f:a2:6f:b7:
         0c:e8:85:89:f5:49:4b:3a:fd:fb:27:9e:59:12:9d:da:51:4e:
         55:64:f6:9b:a7:88:43:e3:74:7e:f0:16:97:88:dd:a8:01:ca:
         e7:5e:e9:7c:62:ff:c4:f9:bc:fa:7f:ad:2e:35:70:15:5c:a7:
         46:e6:41:07:98:5a:b8:8e:66:11:79:12:30:a3:53:b2:85:77:
         20:a8:bc:ff:2e:31:e8:b2:df:6d:17:02:df:a6:01:3b:c3:63:
         a2:90:ff:43:f2:30:b6:f0:44:83:df:f8:d0:ca:39:e4:c6:b6:
         be:aa:b9:4f:be:87:f4:4e:00:9c:36:8f:f2:30:71:46:87:09:
         36:c1:4c:09:04:5d:34:f8:24:58:d2:2a:e4:ff:da:16:8f:fa:
         0c:44:df:d0:82:e0:9e:cd:04:be:3a:8a:74:e9:08:65:c7:16:
         d4:94:01:e4:02:15:ae:75:e3:ce:d8:ea:17:f5:40:10:65:76:
         ba:18:b2:06:75:bf:2a:d6:1c:b0:17:42:0f:87:1c:26:2b:6e:
         e2:83:b6:2e:da:6f:13:c5:2f:88:57:b8:2b:43:48:b6:7a:ff:
         54:c8:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org