Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/323430353a393234303a3a2f34382d3438203d3e203631333137.roa
File:                     323430353a393234303a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier:          2pwlmwTKoCxuHpyNlBT1lymUoTv1wfbu/EXPyL94cfI=
Subject key identifier:   79:58:F3:1C:53:DB:8F:01:53:90:24:1D:90:66:7E:D6:70:15:9A:FF
Certificate issuer:       /CN=17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB
Certificate serial:       30C45C8480892F7297F40210EF51C2EA6AE763A8
Authority key identifier: 17:B5:A1:BE:F9:83:E5:82:78:E0:FB:AA:81:69:AD:7E:E9:2E:37:FB
Authority info access:    rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/323430353a393234303a3a2f34382d3438203d3e203631333137.roa
Signing time:             Tue 25 Jan 2022 12:12:50 +0000
ROA not before:           Tue 25 Jan 2022 12:07:50 +0000
ROA not after:            Tue 24 Jan 2023 12:12:50 +0000
asID:                     61317
IP address blocks:        2405:9240::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c4:5c:84:80:89:2f:72:97:f4:02:10:ef:51:c2:ea:6a:e7:63:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB
        Validity
            Not Before: Jan 25 12:07:50 2022 GMT
            Not After : Jan 24 12:12:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:05:a2:8d:71:ee:07:29:6d:a5:47:be:b5:
                    b6:fc:98:d3:52:82:ce:5b:0d:e4:c0:44:b2:64:44:
                    b4:24:42:8e:91:44:3d:05:5b:97:94:4b:34:d6:79:
                    b4:87:34:aa:cf:ac:ad:5a:97:f6:c7:45:7b:ee:49:
                    fc:a2:b4:0c:aa:a6:46:90:86:98:7b:93:df:58:ee:
                    0a:05:07:2c:0c:ad:21:63:69:2d:ee:46:0c:74:fd:
                    98:10:d2:e0:05:f3:2f:28:5e:2c:2b:5f:71:07:7f:
                    00:91:c6:12:24:f8:85:b1:0f:d7:19:a9:0b:c7:f8:
                    0a:bb:5b:60:f1:f1:68:51:a2:65:1d:7e:cb:2d:a9:
                    d6:5a:ab:7e:96:45:9e:e9:b4:b8:0e:43:3d:55:9d:
                    ef:23:d6:00:28:7e:75:54:f6:c6:96:a7:4d:f5:5e:
                    0b:48:db:7e:51:8d:a9:1a:ac:f4:94:44:5e:84:80:
                    bd:46:c5:ae:2d:f7:d6:8d:9c:cc:5b:f8:6e:5b:a4:
                    c9:48:34:63:2f:b2:b4:9e:fe:38:af:88:2d:29:d6:
                    6a:e4:5e:66:47:77:61:00:0d:b8:ff:7b:7f:da:c2:
                    8f:a4:bf:6b:38:2f:d0:39:ee:78:ed:73:9a:5a:c1:
                    6b:a2:bd:93:eb:c9:64:6a:30:e1:10:47:31:eb:10:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:F3:1C:53:DB:8F:01:53:90:24:1D:90:66:7E:D6:70:15:9A:FF
            X509v3 Authority Key Identifier:
                keyid:17:B5:A1:BE:F9:83:E5:82:78:E0:FB:AA:81:69:AD:7E:E9:2E:37:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-2/1/17B5A1BEF983E58278E0FBAA8169AD7EE92E37FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/f81c4cea-a9af-419d-8fa6-59c74cb894d4-1/1/323430353a393234303a3a2f34382d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9240::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:23:f9:3e:73:57:b1:f3:68:f7:38:6e:ba:73:80:f5:a9:30:
         83:eb:01:b1:73:ef:1e:92:f5:ac:23:85:2e:72:13:47:92:4c:
         7a:d8:7c:f8:96:78:7d:3c:b5:65:4f:13:7e:59:b8:09:b0:b9:
         59:6e:20:95:90:a0:aa:c2:55:49:77:b0:2c:66:c6:ab:b7:b3:
         03:18:2d:3f:f1:92:13:ab:25:a7:f9:26:51:ea:80:28:76:93:
         45:8b:c5:e5:6f:a6:e0:e4:b8:29:c5:f5:2e:71:24:4f:05:ef:
         c3:aa:11:85:51:b3:58:e2:e2:5c:e7:f2:99:9f:a9:91:63:04:
         19:e6:75:ef:72:99:83:ac:1f:6f:46:82:9d:f1:f0:27:ce:a1:
         82:2c:ab:44:f3:1c:0c:6b:40:ae:58:32:6f:c6:7e:e5:21:d4:
         4c:0b:a9:89:bc:34:84:31:70:5c:53:8e:9e:67:86:e9:86:05:
         97:66:e8:4f:b7:86:29:e1:57:42:a3:d4:67:76:42:39:2e:f1:
         7a:d6:87:04:96:a5:9a:e3:da:55:1b:52:b4:7c:98:dd:37:14:
         e5:a4:bf:b2:d4:5e:22:dc:0f:0c:47:cb:53:68:f3:31:e8:11:
         5f:20:0a:a3:de:3f:ab:13:e9:1e:28:44:a5:45:40:69:c9:6e:
         d5:86:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:56:06 2025 by rpki-client