Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/323430353a393234303a3a2f33322d3332203d3e203631333137.roa
File:                     323430353a393234303a3a2f33322d3332203d3e203631333137.roa (raw, json)
Hash identifier:          6p9V+yz2QlnMNa8HdMhMRpzWuJBo9o283kuwS344DQ4=
Subject key identifier:   DA:A8:79:A7:94:12:48:32:82:5A:78:6A:70:DD:CD:C2:F7:35:C0:0C
Certificate issuer:       /CN=17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB
Certificate serial:       1941487F6F2C8B50EDDB0559CEC34ECB1C8DE97E
Authority key identifier: 17:B5:A1:BE:F9:83:E5:82:78:E0:FB:AA:81:69:AD:7E:E9:2E:37:FB
Authority info access:    rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/323430353a393234303a3a2f33322d3332203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 07:24:31 +0000
ROA not before:           Mon 25 Oct 2021 07:19:31 +0000
ROA not after:            Mon 24 Oct 2022 07:24:31 +0000
asID:                     61317
IP address blocks:        2405:9240::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:41:48:7f:6f:2c:8b:50:ed:db:05:59:ce:c3:4e:cb:1c:8d:e9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB
        Validity
            Not Before: Oct 25 07:19:31 2021 GMT
            Not After : Oct 24 07:24:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4a:46:7d:83:3c:a2:9a:15:8c:48:09:a6:de:
                    22:bd:d4:96:32:e5:f9:d3:a5:4f:dc:0e:03:ee:2d:
                    d8:99:10:43:38:d7:b5:3b:58:a2:57:ab:f9:c2:87:
                    45:f6:13:c2:e2:5c:e0:1d:92:80:57:d3:ea:8d:62:
                    53:5c:0f:98:5c:c9:d7:a7:b9:a1:8d:35:10:4a:71:
                    bc:72:7a:71:48:b6:a4:ed:a8:fa:e9:d2:08:f3:e8:
                    3b:82:47:4b:50:5d:89:a9:1a:9e:64:e5:44:57:b0:
                    92:b9:c5:cb:46:14:ab:78:3f:c3:44:18:bf:bf:56:
                    09:cc:38:ad:d1:17:d4:e2:e7:f5:f3:bf:b7:5b:64:
                    bf:02:bd:66:3f:89:38:29:b4:0b:88:aa:c1:44:60:
                    b1:c3:2a:fe:b2:b5:d8:f2:49:2a:0a:e0:0a:19:1f:
                    5c:3b:2e:7f:a2:74:0b:e5:54:2a:a7:f7:7c:db:e1:
                    e5:02:ea:84:b1:8d:43:39:f0:96:74:97:6e:15:0e:
                    40:33:15:36:c1:1a:87:e7:81:00:88:b7:2a:99:a1:
                    9d:80:b2:78:25:50:fa:3c:05:51:17:d2:2d:aa:56:
                    42:90:97:aa:d3:d1:26:91:c3:a9:e4:ae:a8:6b:8e:
                    9a:5c:e6:a0:64:29:10:57:5d:00:ca:5f:60:2f:5c:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A8:79:A7:94:12:48:32:82:5A:78:6A:70:DD:CD:C2:F7:35:C0:0C
            X509v3 Authority Key Identifier:
                keyid:17:B5:A1:BE:F9:83:E5:82:78:E0:FB:AA:81:69:AD:7E:E9:2E:37:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/323430353a393234303a3a2f33322d3332203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9240::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:1e:e4:89:5d:d4:07:e3:cb:0b:0f:93:70:be:07:bc:66:
         49:97:40:c3:1f:cc:df:bd:9a:06:43:f9:ce:1c:9e:90:20:bc:
         66:32:a6:ed:64:86:89:42:82:8e:6f:71:fb:91:ee:b3:3d:dd:
         37:54:f3:a7:85:b7:62:6a:8e:77:58:fa:a6:7d:53:ce:7e:23:
         ca:70:f2:df:4c:30:cd:ad:6d:83:28:95:96:4a:f3:97:04:9d:
         d2:32:61:b6:17:07:f2:d0:33:a9:61:6a:8c:d1:38:fa:31:ba:
         cc:03:67:07:60:af:10:06:6a:d9:5f:b6:92:3e:90:c3:bd:4a:
         e2:81:16:48:90:c1:c7:f0:93:a5:69:b2:4f:59:4a:c6:c3:cf:
         32:cf:c2:fc:09:4f:29:6b:1d:82:44:b6:56:fb:b8:92:42:d8:
         96:af:63:50:21:e1:e3:dc:90:4f:90:2e:3e:1b:ee:71:b5:06:
         9e:d2:33:08:83:bf:d9:0c:8b:81:21:5c:26:b8:c3:a7:63:95:
         24:f1:9c:c1:b3:86:4d:82:15:a3:99:d7:e3:29:a0:7a:f9:f6:
         bc:60:21:f2:35:e6:a3:1f:8b:75:d8:49:8c:83:cf:41:44:01:
         dc:e8:c3:b1:41:fa:12:fa:9c:6a:4a:a5:2f:e4:65:ed:3a:73:
         64:e7:52:7b
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUGUFIf28si1Dt2wVZzsNOyxyN6X4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdCNUExQkVGOTgzRTU4Mjc4RTBGQkFBODE2OUFEN0VF
OTJFMzdGQjAeFw0yMTEwMjUwNzE5MzFaFw0yMjEwMjQwNzI0MzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTY0QTQ2N0Q4MzNDQTI5QTE1
OEM0ODA5QTZERTIyQkRENDk2MzJFNUY5RDNBNTRGREMwRTAzRUUyREQ4OTkxMDQz
MzhEN0I1M0I1OEEyNTdBQkY5QzI4NzQ1RjYxM0MyRTI1Q0UwMUQ5MjgwNTdEM0VB
OEQ2MjUzNUMwRjk4NUNDOUQ3QTdCOUExOEQzNTEwNEE3MUJDNzI3QTcxNDhCNkE0
RURBOEZBRTlEMjA4RjNFODNCODI0NzRCNTA1RDg5QTkxQTlFNjRFNTQ0NTdCMDky
QjlDNUNCNDYxNEFCNzgzRkMzNDQxOEJGQkY1NjA5Q0MzOEFERDExN0Q0RTJFN0Y1
RjNCRkI3NUI2NEJGMDJCRDY2M0Y4OTM4MjlCNDBCODhBQUMxNDQ2MEIxQzMyQUZF
QjJCNUQ4RjI0OTJBMEFFMDBBMTkxRjVDM0IyRTdGQTI3NDBCRTU1NDJBQTdGNzdD
REJFMUU1MDJFQTg0QjE4RDQzMzlGMDk2NzQ5NzZFMTUwRTQwMzMxNTM2QzExQTg3
RTc4MTAwODhCNzJBOTlBMTlEODBCMjc4MjU1MEZBM0MwNTUxMTdEMjJEQUE1NjQy
OTA5N0FBRDNEMTI2OTFDM0E5RTRBRUE4NkI4RTlBNUNFNkEwNjQyOTEwNTc1RDAw
Q0E1RjYwMkY1Q0IzMzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5kpGfYM8opoVjEgJpt4ivdSWMuX506VP3A4D7i3YmRBDONe1O1ii
V6v5wodF9hPC4lzgHZKAV9PqjWJTXA+YXMnXp7mhjTUQSnG8cnpxSLak7aj66dII
8+g7gkdLUF2JqRqeZOVEV7CSucXLRhSreD/DRBi/v1YJzDit0RfU4uf187+3W2S/
Ar1mP4k4KbQLiKrBRGCxwyr+srXY8kkqCuAKGR9cOy5/onQL5VQqp/d82+HlAuqE
sY1DOfCWdJduFQ5AMxU2wRqH54EAiLcqmaGdgLJ4JVD6PAVRF9ItqlZCkJeq09Em
kcOp5K6oa46aXOagZCkQV10Ayl9gL1yzMQIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FNqoeaeUEkgyglp4anDdzcL3NcAMMB8GA1UdIwQYMBaAFBe1ob75g+WCeOD7qoFp
rX7pLjf7MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2Y4MWM0Y2VhLWE5YWYtNDE5ZC04
ZmE2LTU5Yzc0Y2I4OTRkNC0xLzEvMTdCNUExQkVGOTgzRTU4Mjc4RTBGQkFBODE2
OUFEN0VFOTJFMzdGQi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZjgxYzRjZWEtYTlh
Zi00MTlkLThmYTYtNTljNzRjYjg5NGQ0LTIvMS8xN0I1QTFCRUY5ODNFNTgyNzhF
MEZCQUE4MTY5QUQ3RUU5MkUzN0ZCLmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZjgx
YzRjZWEtYTlhZi00MTlkLThmYTYtNTljNzRjYjg5NGQ0LTEvMS8zMjM0MzAzNTNh
MzkzMjM0MzAzYTNhMmYzMzMyMmQzMzMyMjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA
AjAHAwUAJAWSQDANBgkqhkiG9w0BAQsFAAOCAQEAa5se5Ild1AfjywsPk3C+B7xm
SZdAwx/M372aBkP5zhyekCC8ZjKm7WSGiUKCjm9x+5Husz3dN1Tzp4W3YmqOd1j6
pn1Tzn4jynDy30wwza1tgyiVlkrzlwSd0jJhthcH8tAzqWFqjNE4+jG6zANnB2Cv
EAZq2V+2kj6Qw71K4oEWSJDBx/CTpWmyT1lKxsPPMs/C/AlPKWsdgkS2Vvu4kkLY
lq9jUCHh49yQT5AuPhvucbUGntIzCIO/2QyLgSFcJrjDp2OVJPGcwbOGTYIVo5nX
4ymgevn2vGAh8jXmox+LddhJjIPPQUQB3OjDsUH6EvqcakqlL+Rl7TpzZOdSew==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:20:06 2025 by rpki-client