Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232362e302f32342d3234203d3e203237363330.roa
File:                     3230392e3230302e3232362e302f32342d3234203d3e203237363330.roa (raw, json)
Hash identifier:          5q4I4NfsaxI2+Z+/ebs5q/RYCFcSRHhBJDVcyFByrn8=
Subject key identifier:   42:ED:FA:D9:0A:BE:54:B6:44:93:7E:52:EB:D9:22:58:90:5C:12:91
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       68375906A0E26A411363B1EFEBCD7885925A1534
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232362e302f32342d3234203d3e203237363330.roa
Signing time:             Wed 02 Mar 2022 15:06:36 +0000
ROA not before:           Wed 02 Mar 2022 15:01:36 +0000
ROA not after:            Wed 01 Mar 2023 15:06:36 +0000
asID:                     27630
IP address blocks:        209.200.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:37:59:06:a0:e2:6a:41:13:63:b1:ef:eb:cd:78:85:92:5a:15:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  2 15:01:36 2022 GMT
            Not After : Mar  1 15:06:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:f9:d8:66:ca:da:d1:ec:1e:5b:99:01:1b:
                    91:70:6f:45:9c:24:b9:c4:f4:83:52:e0:6a:70:c9:
                    cb:d4:e7:b5:ad:75:df:6d:bd:14:76:c2:67:fa:0e:
                    20:95:7b:9e:62:2a:64:0d:2d:62:8e:eb:45:d3:17:
                    74:3b:be:7f:63:cc:27:e4:82:f6:9d:62:6e:8c:67:
                    73:4c:a9:2e:44:82:d2:be:05:92:51:62:06:b2:d1:
                    36:a4:2c:da:eb:06:52:10:fb:f7:95:49:69:c5:1c:
                    5d:a4:18:c1:fa:9e:1c:9f:2b:f3:39:95:bc:a0:f3:
                    14:e1:85:49:dc:c6:20:3e:7d:49:e5:5a:ed:fe:f7:
                    de:28:40:59:f9:9c:d7:14:52:4b:a4:b3:18:3d:d8:
                    88:68:c3:e6:4a:67:da:52:0b:19:46:1e:fd:42:2b:
                    dd:2d:1d:03:1b:1d:91:66:44:ce:d6:20:af:3b:b3:
                    9f:72:13:12:16:9f:f0:c8:21:9f:dc:6f:ee:6a:ce:
                    83:89:37:92:d2:80:42:48:94:69:ae:59:26:c2:05:
                    f8:2a:e7:61:97:71:90:5b:ad:74:60:79:6a:25:48:
                    5d:27:09:7b:93:de:d2:05:c9:9e:54:60:7a:b3:67:
                    63:fd:6f:77:30:a6:56:ac:37:e3:d1:bd:48:3a:60:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:FA:D9:0A:BE:54:B6:44:93:7E:52:EB:D9:22:58:90:5C:12:91
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232362e302f32342d3234203d3e203237363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:5b:fc:0e:7d:c8:9b:02:20:47:bf:30:af:bf:e4:d6:97:54:
         fd:4f:3a:d3:e7:99:f2:89:d8:a6:ea:2e:d0:4c:da:f5:c6:31:
         cf:ac:bb:a2:84:f9:9e:89:58:38:e8:03:31:8f:66:79:a9:91:
         08:64:cb:6c:d9:de:7c:8f:82:ba:89:29:dc:a8:f9:a8:41:4b:
         13:37:83:e5:18:1b:00:e4:e7:37:5f:e2:1c:6d:0f:a6:70:dc:
         4a:17:e5:45:72:f4:f9:8e:27:b9:bf:6a:82:6d:03:ae:8d:e2:
         3e:1c:16:fd:59:01:02:a3:d9:d4:05:cb:bf:73:d7:45:79:41:
         25:0a:ee:c5:11:13:fa:68:15:20:b4:54:06:f9:5c:fa:9b:4c:
         97:6a:7b:e0:5d:eb:ce:b6:9a:16:44:d8:bc:28:79:90:b5:b2:
         72:01:29:95:3e:92:91:45:83:8e:ae:15:75:76:d5:e2:9b:d3:
         17:69:ca:c7:7c:8f:3a:c6:f6:35:7a:dd:a0:4d:f8:d5:ee:5f:
         3a:60:e7:9f:aa:04:57:cd:5b:e2:29:ff:1e:a0:e4:b2:72:ed:
         3e:87:04:12:c7:de:00:8c:ec:dd:d3:7f:cf:e1:98:f6:9c:84:
         72:d0:42:4a:ae:ff:4b:05:f9:21:ef:14:4c:52:60:76:8c:ea:
         e5:3b:ec:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org