Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232372e302f32342d3234203d3e203239383032.roa
File:                     3230392e3230302e3232372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          auU+DjtfcT4v8kLWHWam+iNiPW/3fLdsjaAbDCbKfzk=
Subject key identifier:   D6:A3:E5:79:88:D8:05:15:42:F3:F0:BC:F1:10:7A:F0:B3:5F:30:F2
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       47CA49EA78B295C3DAB51EF81E59EC5DF5C60B2B
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232372e302f32342d3234203d3e203239383032.roa
Signing time:             Fri 24 Jun 2022 23:54:58 +0000
ROA not before:           Fri 24 Jun 2022 23:49:58 +0000
ROA not after:            Fri 23 Jun 2023 23:54:58 +0000
asID:                     29802
IP address blocks:        209.200.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ca:49:ea:78:b2:95:c3:da:b5:1e:f8:1e:59:ec:5d:f5:c6:0b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 24 23:49:58 2022 GMT
            Not After : Jun 23 23:54:58 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:c2:b2:bc:ae:0c:59:5d:90:7f:eb:ee:79:
                    3d:a0:4f:43:2b:75:1e:8d:7f:ee:22:26:59:66:df:
                    f9:30:ad:2e:16:9a:03:46:09:b0:e9:55:fb:31:87:
                    81:d0:16:a7:68:b9:61:c3:a0:cb:69:da:be:14:99:
                    de:6c:8a:cb:4d:e6:1f:01:c0:6b:96:52:40:1b:ff:
                    b2:77:52:9d:f0:04:fb:61:6a:08:c9:23:32:53:8b:
                    ce:23:48:a3:96:47:a3:40:c8:e6:02:71:e0:53:67:
                    55:ff:1b:c8:58:61:ac:fe:fe:98:b0:22:83:a3:63:
                    8b:5a:46:10:f8:27:c7:15:04:08:0a:57:af:bb:2c:
                    fd:8b:35:c3:e5:9f:2c:c2:ac:80:54:31:25:d6:c6:
                    aa:ee:17:85:06:f5:3b:19:60:1b:73:81:01:70:1e:
                    32:ca:e7:43:64:5d:4f:dc:00:06:9b:2a:b3:66:c7:
                    1a:6a:ab:a4:ae:e7:f4:03:6e:83:03:03:4e:99:01:
                    67:05:87:83:e2:03:40:bf:4b:ae:27:56:88:df:3f:
                    e2:f0:65:d5:0a:27:34:9a:7e:5d:67:44:e3:8d:c2:
                    a4:1a:a6:7d:20:15:44:8a:ea:f2:e9:f7:37:0a:85:
                    7c:ca:9a:aa:2e:ed:23:a8:7f:f7:6a:53:73:cd:59:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A3:E5:79:88:D8:05:15:42:F3:F0:BC:F1:10:7A:F0:B3:5F:30:F2
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232372e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:53:e7:33:36:ab:b9:59:d9:e1:ca:b0:c8:ee:25:fc:04:af:
         0a:27:06:0f:98:5f:83:ab:e8:b0:77:a7:16:8a:09:f2:cc:c4:
         b0:bf:f3:16:9d:ae:95:77:95:51:a3:88:72:35:be:f3:0d:95:
         28:65:6a:c6:7a:2a:23:a9:ef:e9:7b:90:e5:f2:6a:7c:ce:f7:
         f9:67:af:31:70:62:c9:e5:79:1e:bf:ea:aa:36:12:f4:14:04:
         e8:41:63:ca:e2:24:0a:eb:34:9f:55:32:ee:a0:c6:bf:e3:73:
         31:94:c1:e8:31:34:78:8b:e8:00:ab:a4:63:52:80:24:24:d9:
         16:80:b3:e9:1d:cc:f5:e7:b5:a5:65:de:03:c1:00:13:15:f0:
         56:d9:c5:a1:e9:bf:bb:21:39:c9:01:e0:4a:47:e0:f9:ef:6e:
         6b:b6:e8:ab:49:05:1d:2c:3d:60:84:f6:15:02:5f:34:91:9e:
         ae:85:e7:8c:c4:cd:0c:03:ae:19:69:a4:0f:20:8c:26:20:63:
         b5:aa:59:99:75:20:a7:e1:95:0b:b8:bb:b1:07:f1:3c:0d:da:
         2d:7b:05:b1:a5:d4:24:ac:5e:83:3f:65:6b:cd:05:ce:71:21:
         2d:96:da:67:99:67:3d:5a:77:f9:9c:ee:44:15:ec:59:93:a3:
         af:22:91:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org