Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232352e302f32342d3234203d3e203535313534.roa
File:                     3230392e3230302e3232352e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          CGfVHZDO6lEfwNfoUc/kugBVy721GkXN/FridwCrG+Y=
Subject key identifier:   1A:EA:02:AC:88:16:80:4B:00:9D:14:CA:3E:0C:7A:A3:E7:02:BB:21
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       756584D11D4CB4CFA7DA63FFC57BFC4C086103CF
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232352e302f32342d3234203d3e203535313534.roa
Signing time:             Fri 01 Jul 2022 18:34:31 +0000
ROA not before:           Fri 01 Jul 2022 18:29:31 +0000
ROA not after:            Fri 30 Jun 2023 18:34:31 +0000
asID:                     55154
IP address blocks:        209.200.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:65:84:d1:1d:4c:b4:cf:a7:da:63:ff:c5:7b:fc:4c:08:61:03:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jul  1 18:29:31 2022 GMT
            Not After : Jun 30 18:34:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:2d:f0:f7:98:0c:76:78:85:c2:62:c1:93:
                    b7:5f:fc:7f:6c:28:2b:f3:71:4e:00:1c:3f:45:6a:
                    fd:ca:86:67:44:15:ba:83:59:bf:b5:d6:9c:b6:30:
                    0b:14:81:c3:fa:54:27:35:26:68:b2:93:fc:40:b1:
                    6d:fb:c8:57:d0:69:62:ef:40:ee:08:0c:17:4d:75:
                    11:52:dc:ae:4f:24:80:b8:1e:b2:7d:28:72:71:72:
                    3f:b5:c6:5c:c0:bf:22:47:f7:fe:83:34:b6:3b:af:
                    ef:c0:32:77:d4:55:06:6b:b3:75:03:d8:e2:29:d2:
                    b0:dd:bf:94:9a:83:61:a6:ef:2b:71:6f:ce:73:fc:
                    a1:0d:c9:f0:22:e9:48:7c:18:5b:d8:80:53:e0:4f:
                    4d:7c:0f:98:82:00:cf:3f:42:6d:3c:d9:4f:39:38:
                    25:0a:2e:cf:98:10:87:49:b5:28:f8:12:5f:36:6e:
                    3a:11:a4:19:47:c8:13:ab:d2:50:3f:b4:e9:56:b7:
                    9e:c7:d3:d6:d7:1d:61:55:69:35:31:23:84:f2:32:
                    75:16:2f:e0:9d:28:1a:b0:9c:e5:69:72:9d:97:27:
                    14:0b:ea:07:b7:46:04:6d:c4:8f:44:37:b3:73:d0:
                    d9:73:85:d1:7d:a1:da:6c:ec:98:d5:b2:0a:10:b8:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:02:AC:88:16:80:4B:00:9D:14:CA:3E:0C:7A:A3:E7:02:BB:21
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232352e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:21:fb:04:98:c4:02:b7:dc:cd:4d:72:7f:60:f0:b6:03:3f:
         fc:fd:c8:80:98:77:9f:78:03:7c:65:93:0a:49:36:07:b5:38:
         70:da:b7:f5:9b:f7:66:8f:d2:23:a2:5d:9c:cc:83:f4:5b:60:
         f7:4f:8f:a9:3b:d3:58:9b:d6:06:44:c2:10:5a:97:42:bc:27:
         3e:6b:ff:15:3c:57:0d:cd:c1:b9:5b:96:ab:21:e2:35:2e:ae:
         24:24:c6:91:51:44:3e:d2:d7:96:93:10:a2:d6:94:97:12:74:
         75:3f:a9:0f:fb:cd:01:e5:06:31:97:7e:bb:3b:4f:29:66:fc:
         28:2a:5f:41:e2:16:98:be:27:a7:65:07:a7:a5:19:93:d9:3e:
         92:37:2b:c9:0a:ba:dd:8f:a0:30:58:07:2a:0c:77:4d:e4:62:
         69:89:bd:45:9f:17:88:56:3e:c6:5f:1a:44:1d:71:2d:13:ef:
         2e:17:81:2c:8c:a3:7e:e6:e9:e4:47:16:48:ad:d0:ed:61:ef:
         98:71:eb:27:e8:44:76:77:f9:f1:37:6e:a4:cc:dc:e0:c9:bd:
         d2:8c:d2:73:c4:1a:bf:2e:d2:31:b5:33:cf:77:c7:c8:b7:3e:
         04:2a:f5:73:19:07:8b:f0:90:1c:f4:77:c7:5b:1e:2f:39:c8:
         5d:5e:8e:56
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUdWWE0R1MtM+n2mP/xXv8TAhhA88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA3MDExODI5MzFaFw0yMzA2MzAxODM0MzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JEMzJERjBGNzk4MEM3Njc4
ODVDMjYyQzE5M0I3NUZGQzdGNkMyODJCRjM3MTRFMDAxQzNGNDU2QUZEQ0E4NjY3
NDQxNUJBODM1OUJGQjVENjlDQjYzMDBCMTQ4MUMzRkE1NDI3MzUyNjY4QjI5M0ZD
NDBCMTZERkJDODU3RDA2OTYyRUY0MEVFMDgwQzE3NEQ3NTExNTJEQ0FFNEYyNDgw
QjgxRUIyN0QyODcyNzE3MjNGQjVDNjVDQzBCRjIyNDdGN0ZFODMzNEI2M0JBRkVG
QzAzMjc3RDQ1NTA2NkJCMzc1MDNEOEUyMjlEMkIwRERCRjk0OUE4MzYxQTZFRjJC
NzE2RkNFNzNGQ0ExMERDOUYwMjJFOTQ4N0MxODVCRDg4MDUzRTA0RjREN0MwRjk4
ODIwMENGM0Y0MjZEM0NEOTRGMzkzODI1MEEyRUNGOTgxMDg3NDlCNTI4RjgxMjVG
MzY2RTNBMTFBNDE5NDdDODEzQUJEMjUwM0ZCNEU5NTZCNzlFQzdEM0Q2RDcxRDYx
NTU2OTM1MzEyMzg0RjIzMjc1MTYyRkUwOUQyODFBQjA5Q0U1Njk3MjlEOTcyNzE0
MEJFQTA3Qjc0NjA0NkRDNDhGNDQzN0IzNzNEMEQ5NzM4NUQxN0RBMURBNkNFQzk4
RDVCMjBBMTBCODUzNzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy9Mt8PeYDHZ4hcJiwZO3X/x/bCgr83FOABw/RWr9yoZnRBW6g1m/
tdactjALFIHD+lQnNSZospP8QLFt+8hX0Gli70DuCAwXTXURUtyuTySAuB6yfShy
cXI/tcZcwL8iR/f+gzS2O6/vwDJ31FUGa7N1A9jiKdKw3b+UmoNhpu8rcW/Oc/yh
DcnwIulIfBhb2IBT4E9NfA+YggDPP0JtPNlPOTglCi7PmBCHSbUo+BJfNm46EaQZ
R8gTq9JQP7TpVreex9PW1x1hVWk1MSOE8jJ1Fi/gnSgasJzlaXKdlycUC+oHt0YE
bcSPRDezc9DZc4XRfaHabOyY1bIKELhTdwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FBrqAqyIFoBLAJ0Uyj4MeqPnArshMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMwMzkyZTMy
MzAzMDJlMzIzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTMxMzUzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANHI4TANBgkqhkiG9w0BAQsFAAOCAQEANSH7BJjEArfczU1yf2Dw
tgM//P3IgJh3n3gDfGWTCkk2B7U4cNq39Zv3Zo/SI6JdnMyD9Ftg90+PqTvTWJvW
BkTCEFqXQrwnPmv/FTxXDc3BuVuWqyHiNS6uJCTGkVFEPtLXlpMQotaUlxJ0dT+p
D/vNAeUGMZd+uztPKWb8KCpfQeIWmL4np2UHp6UZk9k+kjcryQq63Y+gMFgHKgx3
TeRiaYm9RZ8XiFY+xl8aRB1xLRPvLheBLIyjfubp5EcWSK3Q7WHvmHHrJ+hEdnf5
8TdupMzc4Mm90ozSc8Qavy7SMbUzz3fHyLc+BCr1cxkHi/CQHPR3x1seLznIXV6O
Vg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org