Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232382e302f32342d3234203d3e203436353632.roa
File:                     3230392e3230302e3232382e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          YFh9V1y/pqMdTpsj3mvBnQlIqmizYtJ30Co4Acn3FaQ=
Subject key identifier:   2F:F0:65:E3:1E:53:AD:25:AE:07:BB:6B:2A:E9:27:08:DE:B5:EF:AA
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       032A57001607A3C8FDDFBBE12AF6900500C3C765
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232382e302f32342d3234203d3e203436353632.roa
Signing time:             Mon 28 Feb 2022 16:25:46 +0000
ROA not before:           Mon 28 Feb 2022 16:20:46 +0000
ROA not after:            Mon 27 Feb 2023 16:25:46 +0000
asID:                     46562
IP address blocks:        209.200.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2a:57:00:16:07:a3:c8:fd:df:bb:e1:2a:f6:90:05:00:c3:c7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 28 16:20:46 2022 GMT
            Not After : Feb 27 16:25:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:eb:b5:72:cf:6a:4f:aa:35:4f:fc:02:f0:
                    71:74:cc:99:2c:0d:b7:1d:4c:7a:1a:25:e8:da:26:
                    68:7f:1d:a2:ea:cc:20:29:27:06:7c:35:d4:4a:d0:
                    c4:00:24:14:b3:d5:27:f9:ed:e1:32:2d:b2:cb:a7:
                    e0:1f:ad:9b:5e:38:f6:0c:7c:dd:db:1a:a4:28:6a:
                    05:0b:80:7b:26:fd:04:13:6d:c1:97:cb:4e:22:dc:
                    f7:06:51:ab:97:a7:a6:aa:81:5d:4d:5c:0f:cf:eb:
                    80:d0:80:81:78:0c:92:21:6a:00:9e:ed:81:50:07:
                    dc:50:4c:5d:d3:7f:73:03:7b:93:ae:0f:90:a7:95:
                    cf:9c:0d:fc:88:59:8d:e2:9e:bb:d7:87:eb:87:a5:
                    40:6c:1b:bf:d6:1c:f4:af:79:6c:b2:95:48:09:99:
                    e9:46:35:33:be:af:51:bc:c4:2b:f6:6b:b0:5b:40:
                    eb:4f:58:d8:05:c8:c8:29:af:69:1b:3d:09:65:52:
                    f1:31:95:9e:4d:27:7e:37:ed:57:8f:c5:dd:01:bb:
                    f4:74:1c:01:0d:f9:d4:9d:eb:b1:8a:1d:54:9f:b7:
                    22:a7:ab:03:2b:9d:7c:70:d9:c6:ee:ad:d9:25:f8:
                    f0:97:0c:b4:e6:a3:94:bf:9e:c1:2b:50:14:6a:53:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F0:65:E3:1E:53:AD:25:AE:07:BB:6B:2A:E9:27:08:DE:B5:EF:AA
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232382e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:82:65:a6:33:c7:5e:88:f6:9e:98:04:d0:60:04:d3:ca:7e:
         c2:63:f8:b8:08:10:09:a8:f3:95:36:e2:16:8e:2e:92:63:09:
         e2:77:96:22:09:cf:f7:ed:62:63:8d:1d:70:72:5f:53:a8:d8:
         6b:72:c4:fe:ef:ea:90:2d:50:b8:c4:89:79:e7:f1:95:ca:c9:
         47:3d:06:78:67:10:4b:61:2d:1a:20:99:08:f3:64:36:e0:f0:
         13:66:78:71:74:5b:95:31:57:07:0a:ff:c7:03:87:ff:3a:a6:
         8c:c8:1f:25:3f:26:10:d3:9a:2a:20:b0:09:18:06:0e:e5:59:
         f9:84:a6:6a:eb:71:07:0a:fe:7d:d5:7d:b5:0a:3b:e4:92:fd:
         44:02:93:00:fd:7d:c0:76:31:89:86:aa:70:26:51:0c:02:b9:
         18:05:19:5f:11:ae:0f:e6:70:4b:91:d3:df:f9:cc:d8:05:b2:
         00:08:05:9f:0f:87:3c:41:8b:89:2a:39:c3:4d:b5:af:48:f8:
         74:36:c7:be:8a:d9:79:d2:3f:4c:86:13:72:10:df:13:cd:73:
         27:eb:59:48:26:8a:c8:29:9a:0a:ac:d3:79:a2:59:c6:17:e7:
         be:b4:8c:83:35:d8:66:9a:a2:80:91:12:f5:b9:f9:3a:f8:15:
         5b:c9:2f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org