Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232372e302f32342d3234203d3e203436353632.roa
File:                     3230392e3230302e3232372e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          DeLZWBTrvh5T3v9JSOrt5zCzXx41OPAcYVLgiypStwQ=
Subject key identifier:   EB:47:D3:10:75:6A:84:7E:52:0D:5B:28:2D:F2:75:2C:4B:B7:B7:15
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       62E98AD7F40BF9F259FC4299A8A90254D9DC8FDD
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232372e302f32342d3234203d3e203436353632.roa
Signing time:             Sat 19 Feb 2022 11:26:29 +0000
ROA not before:           Sat 19 Feb 2022 11:21:29 +0000
ROA not after:            Sat 18 Feb 2023 11:26:29 +0000
asID:                     46562
IP address blocks:        209.200.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:8a:d7:f4:0b:f9:f2:59:fc:42:99:a8:a9:02:54:d9:dc:8f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 19 11:21:29 2022 GMT
            Not After : Feb 18 11:26:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:64:d4:7f:7c:cd:76:ec:8f:93:30:22:6a:
                    e1:a4:d4:55:b5:61:5d:05:12:c4:47:24:59:0d:40:
                    6d:86:88:97:ba:57:58:e8:cf:b4:93:c4:12:39:4d:
                    59:d3:06:ae:1d:97:35:6e:2b:28:5f:78:6e:f3:48:
                    56:87:ae:11:d0:60:cb:04:8a:26:f8:55:9e:4f:96:
                    31:f1:a3:e0:5e:8e:97:31:0e:fa:48:ee:f4:d5:86:
                    fb:d7:3c:98:e2:33:6a:71:c3:97:5c:b1:cf:9f:b0:
                    fc:89:27:6d:ba:af:c2:c7:e7:7a:e3:3f:7d:72:02:
                    fb:34:9e:c0:f9:81:fc:d3:2e:fd:18:0f:43:7b:b5:
                    74:a9:b8:10:c5:88:b3:52:53:96:13:67:19:29:83:
                    18:45:45:2a:04:2d:bc:3c:93:bb:eb:4f:b2:ca:6b:
                    4e:a6:ba:8c:84:05:76:32:a4:92:12:4e:d8:42:e0:
                    99:6d:af:50:bf:e4:db:20:68:91:71:3c:8f:04:24:
                    cd:d9:da:a6:1b:4c:8a:b3:01:86:c0:0d:b2:cc:a1:
                    fa:0a:b8:31:1d:be:f3:92:73:0c:19:cc:46:75:2b:
                    db:2b:a8:e7:c8:23:3a:72:fa:f6:e7:34:75:52:71:
                    8c:a6:d3:1f:fe:3c:b5:97:d4:7e:bb:fd:ba:c9:5f:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:47:D3:10:75:6A:84:7E:52:0D:5B:28:2D:F2:75:2C:4B:B7:B7:15
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232372e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:26:fd:bc:53:82:eb:e2:8a:08:9b:21:55:4a:47:8d:3e:
         e2:70:87:16:66:1f:92:13:fd:2e:2e:c2:04:3f:7d:2e:0f:46:
         8d:93:3e:9c:80:f3:31:f7:5f:90:42:f7:79:87:9d:2f:27:b0:
         33:73:f6:e4:4e:fc:65:7e:de:5b:33:bc:54:e4:da:00:f5:27:
         f7:3f:49:6a:53:ea:83:46:30:dd:e4:3c:f0:5a:08:fe:cc:25:
         0e:ee:d9:4c:68:4a:39:01:2a:ce:bf:47:78:6b:a3:e1:6c:45:
         23:95:d4:b9:ff:11:4a:37:b1:ad:30:de:fd:04:29:62:77:2e:
         26:c8:ff:f3:f1:09:3a:b3:b5:11:1a:f7:c4:e1:47:5a:14:8e:
         69:12:4d:06:98:a1:5c:47:23:8b:97:04:c1:80:0d:c8:8c:d3:
         82:9f:11:16:7a:41:48:12:4c:c9:9b:be:d2:6d:55:b0:30:c8:
         2c:0c:b6:56:c6:8c:59:1a:a3:a5:02:10:cd:51:1d:6a:73:80:
         6d:5a:dd:a1:d1:1f:60:9c:ac:9e:21:ea:89:a4:42:4a:23:5e:
         78:01:39:b6:e1:3a:57:d7:75:d5:21:32:40:22:12:fc:b4:bd:
         a4:9c:98:ef:f7:1b:d5:39:bc:90:d7:0a:68:1f:61:9e:a5:7b:
         fc:00:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org