Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232392e302f32342d3234203d3e2031323339.roa
File:                     3230392e3230302e3232392e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          0OHnarsnNavPZX8iv73GtpuOr1vl5Gz4ZC4m4ZiviJ0=
Subject key identifier:   BE:93:7F:82:88:8B:54:F0:AA:77:39:70:2A:47:9B:21:58:7F:A8:55
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       07DB221E7410685E55A523ADCB4C80D029F0A6A0
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232392e302f32342d3234203d3e2031323339.roa
Signing time:             Tue 01 Mar 2022 17:34:53 +0000
ROA not before:           Tue 01 Mar 2022 17:29:53 +0000
ROA not after:            Tue 28 Feb 2023 17:34:53 +0000
asID:                     1239
IP address blocks:        209.200.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:db:22:1e:74:10:68:5e:55:a5:23:ad:cb:4c:80:d0:29:f0:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  1 17:29:53 2022 GMT
            Not After : Feb 28 17:34:53 2023 GMT
        Subject: CN=3082010A0282010100E84284FE1EFE3BC53F55491A7B3AD548639B9D4E174A5736F418CCB76D18E4E8E1410F272F8AD9D69FC2363B2A96806119A9C53732A9E10AAA4982BDAB87F464D1395296E46A4D4C62976CF56A1AFE243F1A6227606E1A8492EAFE8B9F583FA1B6BD7C003D71619D51FE74AE6A1061D55AC7C722EE755D2B6D7DB12CFAD7F7E7331D69245EECFB875DEC24AD43047473615AE4E4B0833A4E01F2F2436D5512F1A950A5B141AE1973724345FBE6693C2A1D4CA4455CE648ACA3CF5FAFD2D15745C7482EBDBC2F6BEB2A8C19EED5F7A618E3578C17A55520060D2B56F422106D041A3F64F25F9E809B8A0F9E14A535E533412901D23680F44E00F4AB42CB18332B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:42:84:fe:1e:fe:3b:c5:3f:55:49:1a:7b:3a:
                    d5:48:63:9b:9d:4e:17:4a:57:36:f4:18:cc:b7:6d:
                    18:e4:e8:e1:41:0f:27:2f:8a:d9:d6:9f:c2:36:3b:
                    2a:96:80:61:19:a9:c5:37:32:a9:e1:0a:aa:49:82:
                    bd:ab:87:f4:64:d1:39:52:96:e4:6a:4d:4c:62:97:
                    6c:f5:6a:1a:fe:24:3f:1a:62:27:60:6e:1a:84:92:
                    ea:fe:8b:9f:58:3f:a1:b6:bd:7c:00:3d:71:61:9d:
                    51:fe:74:ae:6a:10:61:d5:5a:c7:c7:22:ee:75:5d:
                    2b:6d:7d:b1:2c:fa:d7:f7:e7:33:1d:69:24:5e:ec:
                    fb:87:5d:ec:24:ad:43:04:74:73:61:5a:e4:e4:b0:
                    83:3a:4e:01:f2:f2:43:6d:55:12:f1:a9:50:a5:b1:
                    41:ae:19:73:72:43:45:fb:e6:69:3c:2a:1d:4c:a4:
                    45:5c:e6:48:ac:a3:cf:5f:af:d2:d1:57:45:c7:48:
                    2e:bd:bc:2f:6b:eb:2a:8c:19:ee:d5:f7:a6:18:e3:
                    57:8c:17:a5:55:20:06:0d:2b:56:f4:22:10:6d:04:
                    1a:3f:64:f2:5f:9e:80:9b:8a:0f:9e:14:a5:35:e5:
                    33:41:29:01:d2:36:80:f4:4e:00:f4:ab:42:cb:18:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:93:7F:82:88:8B:54:F0:AA:77:39:70:2A:47:9B:21:58:7F:A8:55
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232392e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:93:6e:e0:5b:2d:03:80:17:16:e7:8e:1b:25:3f:51:e8:2f:
         b9:6a:df:09:4e:62:bb:df:6f:b8:ff:1c:c5:18:21:cd:86:e0:
         92:16:95:fb:3a:7a:6b:af:2b:e1:88:58:83:92:78:ee:43:4f:
         6e:d5:f3:07:7b:15:7a:de:bb:fc:70:a5:2f:70:b8:31:06:45:
         0b:fc:fc:5e:c1:5a:83:4a:e8:0b:4c:57:04:97:7d:09:5e:ce:
         2f:a8:c4:1d:5d:97:06:78:b8:ca:af:d5:14:5f:5e:52:dc:5c:
         90:4a:ba:15:4d:97:83:4b:a5:59:9e:1a:35:b3:f2:dd:49:e3:
         24:ec:a4:ae:31:b3:83:83:c8:5f:b0:55:a0:b3:72:d6:9e:b5:
         bf:f9:2d:ac:5c:84:fc:00:8e:d6:41:e3:da:7c:73:17:58:29:
         e5:59:fe:e1:fa:d6:0b:dd:5d:60:ad:03:06:95:c2:9a:8f:be:
         0a:00:3a:d2:75:ca:f4:fd:47:84:33:1d:4a:48:4a:7d:e8:c9:
         cb:ea:9a:df:38:3f:07:cd:b1:f4:b6:20:d9:b1:be:50:85:fd:
         ae:cb:39:56:71:c2:e1:a4:7f:34:7b:87:1b:60:4b:1d:62:09:
         29:6b:c6:14:fc:81:ff:06:4e:74:47:b5:40:e1:7d:61:70:69:
         b7:77:d5:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org