Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
File:                     3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa (raw, json)
Hash identifier:          tSRoyfNLSTdJuJZttLrpvSXYBIyCVx2SCFx48FJkB10=
Subject key identifier:   BF:BE:43:AA:32:C0:F8:BA:7C:36:C8:3B:90:7A:B0:E0:E8:88:21:7D
Certificate issuer:       /CN=17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB
Certificate serial:       391B824962E262612DEBB274C7A69266D4B19B14
Authority key identifier: 17:B5:A1:BE:F9:83:E5:82:78:E0:FB:AA:81:69:AD:7E:E9:2E:37:FB
Authority info access:    rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa
Signing time:             Mon 25 Oct 2021 07:24:34 +0000
ROA not before:           Mon 25 Oct 2021 07:19:34 +0000
ROA not after:            Mon 24 Oct 2022 07:24:34 +0000
asID:                     138156
IP address blocks:        103.141.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1b:82:49:62:e2:62:61:2d:eb:b2:74:c7:a6:92:66:d4:b1:9b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB
        Validity
            Not Before: Oct 25 07:19:34 2021 GMT
            Not After : Oct 24 07:24:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:a3:51:27:20:a7:42:18:1f:d2:45:44:a9:
                    cf:84:25:bf:33:f0:b6:b8:7e:f0:56:12:1b:8d:7e:
                    cf:d7:c9:90:88:1a:f4:38:11:a9:4c:8a:55:25:7f:
                    ad:a7:43:d2:23:37:5c:ac:71:49:35:27:3b:72:e1:
                    07:bf:e8:80:55:f5:b2:32:02:36:b6:23:33:2f:91:
                    9e:b3:92:79:4d:45:51:1d:17:c4:f9:7b:f5:f1:98:
                    5c:01:13:53:ff:79:74:93:00:ee:cc:bd:20:dd:50:
                    2a:42:18:c7:e2:56:13:86:c4:d9:61:20:aa:f0:1c:
                    e8:d1:0f:27:e4:71:ae:a0:11:81:69:09:4a:c0:15:
                    fd:f4:0b:7e:94:62:a9:9a:76:16:fe:b5:d3:25:3e:
                    22:ef:48:65:56:4a:30:12:55:fa:c9:84:c1:21:84:
                    b3:34:c8:ed:3c:65:33:cd:34:49:6c:fa:8c:dd:7c:
                    20:b5:8d:d0:b6:c0:3b:5d:24:3a:f9:d9:a1:a2:ba:
                    31:35:1c:87:e0:e9:6c:ca:72:18:9d:15:06:db:e3:
                    48:66:e9:a5:6e:34:a8:aa:9f:51:fd:b4:3d:62:6d:
                    8f:d4:53:ac:60:11:a7:1c:b9:da:f3:08:13:cf:56:
                    e6:e2:78:1f:57:10:05:34:f3:48:87:38:6c:eb:82:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:43:AA:32:C0:F8:BA:7C:36:C8:3B:90:7A:B0:E0:E8:88:21:7D
            X509v3 Authority Key Identifier:
                keyid:17:B5:A1:BE:F9:83:E5:82:78:E0:FB:AA:81:69:AD:7E:E9:2E:37:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/3130332e3134312e36382e302f32342d3234203d3e20313338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:7d:d9:36:1e:a0:52:86:c7:d7:27:2e:9a:67:cf:1e:36:62:
         a8:21:aa:72:18:20:d2:1b:c8:92:f2:f3:84:a5:40:61:ad:4e:
         6e:2b:6a:3e:42:c6:8f:a2:9e:b6:b7:18:76:d5:df:86:38:3e:
         4b:2a:c0:e7:27:da:2a:b0:4c:14:8e:9d:a3:56:7b:79:c2:71:
         ce:76:fd:91:87:ff:8e:18:81:fc:55:37:89:b9:a1:75:79:ff:
         58:63:53:f6:dc:8c:95:b0:48:fa:0e:f4:39:58:fd:dc:82:b1:
         2a:b0:87:cc:16:ee:91:fb:4c:c1:27:5e:c8:c7:39:65:3c:f4:
         c4:21:b6:ff:b5:9f:66:62:07:37:82:52:b9:d1:54:63:9b:cd:
         45:b5:49:64:35:10:8c:1e:a9:4e:b1:7b:30:e7:9d:57:d8:67:
         81:76:e1:2e:e0:5c:1c:e6:7c:d1:00:91:86:ea:0f:8e:68:6a:
         6c:00:a3:ee:c3:5e:10:75:d2:cf:1e:22:3d:2f:d5:45:18:d0:
         af:a5:84:78:b4:cf:db:f3:10:b2:db:fd:6a:c9:5e:58:fa:8e:
         2e:74:bc:32:20:55:cd:c7:91:fa:24:1a:76:bb:b0:99:39:a1:
         55:89:91:d8:02:d2:01:39:75:e2:e0:2a:47:bd:c7:fe:03:99:
         ad:85:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:20:04 2025 by rpki-client