Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233312e302f32342d3234203d3e203436353632.roa
File:                     3230392e3230302e3233312e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          BCtAfRDEX3HRAjzTPSftsDBw5AZZ3icy1B0x4bZga2M=
Subject key identifier:   AA:98:58:3A:F8:6F:4E:D5:0E:60:86:5A:2A:1E:75:E0:6C:17:62:67
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       11E23E49A7A26716B824A30960BAFC8A1B448280
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233312e302f32342d3234203d3e203436353632.roa
Signing time:             Mon 28 Feb 2022 16:26:08 +0000
ROA not before:           Mon 28 Feb 2022 16:21:08 +0000
ROA not after:            Mon 27 Feb 2023 16:26:08 +0000
asID:                     46562
IP address blocks:        209.200.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e2:3e:49:a7:a2:67:16:b8:24:a3:09:60:ba:fc:8a:1b:44:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 28 16:21:08 2022 GMT
            Not After : Feb 27 16:26:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c8:87:4f:0d:f3:40:3a:87:b0:79:c5:f9:a7:
                    aa:34:32:a1:35:6a:ff:d5:29:d0:a8:39:70:b9:16:
                    53:55:ca:df:fc:6e:d3:5d:9f:01:14:01:1f:08:d9:
                    74:63:30:25:e2:0d:da:9f:4f:7b:c0:48:62:74:69:
                    49:63:46:ab:01:13:33:e4:af:3e:66:df:20:1f:2b:
                    ac:05:f7:28:93:13:f1:ba:ff:04:25:3e:f5:2f:6e:
                    d2:a5:6f:84:30:e5:19:02:ac:c6:79:80:b0:7c:dd:
                    03:ff:da:26:57:d5:b4:78:be:8f:92:bb:80:7f:90:
                    c0:7e:70:40:d0:33:de:54:b9:fc:b9:ab:2f:8c:20:
                    a4:59:94:7a:53:a8:9a:37:6b:d0:ba:0d:a5:c5:22:
                    84:12:c6:e3:a3:fc:12:5e:66:c5:4c:2d:1f:35:19:
                    16:cd:72:8b:84:68:ce:9b:a9:3a:8d:6d:bd:3d:d6:
                    cb:6d:85:dd:56:2c:9f:1c:3d:4e:a2:9a:3c:eb:24:
                    83:9a:83:6d:de:78:0b:df:2c:a8:66:11:d3:73:21:
                    b0:06:2c:6d:1d:6e:73:3c:67:67:d9:e5:72:fd:c9:
                    a2:a5:95:51:5f:8e:84:f2:6b:bd:17:94:91:7a:e7:
                    83:79:c2:fe:05:e2:8d:29:41:33:45:a9:72:d5:3f:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:98:58:3A:F8:6F:4E:D5:0E:60:86:5A:2A:1E:75:E0:6C:17:62:67
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233312e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:5d:3d:f5:61:c3:eb:38:5c:ab:7e:a4:66:ad:08:1e:0a:
         6e:d1:3d:fa:26:29:19:d4:75:a0:10:16:ae:b8:0c:c9:b5:05:
         07:35:11:97:c1:6a:7a:af:7f:d4:93:51:bb:59:44:1c:38:c0:
         5b:6d:39:00:90:d1:3f:aa:e4:97:60:d8:4d:6a:ec:1e:9e:9f:
         26:56:cd:f9:74:ad:8e:6d:3b:45:d0:20:6b:d2:19:f3:66:66:
         e5:b9:b6:17:d9:bd:10:97:ff:8c:0c:c8:56:bb:d3:f9:d2:d3:
         05:0b:21:21:05:ed:d7:4d:9d:f0:7c:bf:4c:5a:c9:69:b6:be:
         f5:68:c7:41:3a:bf:0e:a0:17:ea:72:cd:02:86:6c:a8:8b:6d:
         90:0d:df:f3:15:2e:a4:ce:1c:aa:9f:b0:2d:00:e5:92:70:15:
         4f:d4:cc:3a:73:4f:74:3e:60:2e:42:f2:c6:8c:96:ef:d9:4d:
         1b:c5:81:fc:01:84:99:a0:45:88:2c:9f:60:1c:a2:cc:6f:e3:
         16:43:b5:84:51:24:98:00:b8:3d:90:62:0d:01:49:ba:54:72:
         0c:c0:9c:89:8c:35:03:66:91:ea:70:33:2d:78:e2:9a:59:87:
         e9:1b:58:0c:8d:bc:af:22:3e:a4:84:bf:82:29:d5:e3:e9:fd:
         38:8e:d5:af
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUEeI+SaeiZxa4JKMJYLr8ihtEgoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjAyMjgxNjIxMDhaFw0yMzAyMjcxNjI2MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDhDODg3NEYwREYzNDAzQTg3
QjA3OUM1RjlBN0FBMzQzMkExMzU2QUZGRDUyOUQwQTgzOTcwQjkxNjUzNTVDQURG
RkM2RUQzNUQ5RjAxMTQwMTFGMDhEOTc0NjMzMDI1RTIwRERBOUY0RjdCQzA0ODYy
NzQ2OTQ5NjM0NkFCMDExMzMzRTRBRjNFNjZERjIwMUYyQkFDMDVGNzI4OTMxM0Yx
QkFGRjA0MjUzRUY1MkY2RUQyQTU2Rjg0MzBFNTE5MDJBQ0M2Nzk4MEIwN0NERDAz
RkZEQTI2NTdENUI0NzhCRThGOTJCQjgwN0Y5MEMwN0U3MDQwRDAzM0RFNTRCOUZD
QjlBQjJGOEMyMEE0NTk5NDdBNTNBODlBMzc2QkQwQkEwREE1QzUyMjg0MTJDNkUz
QTNGQzEyNUU2NkM1NEMyRDFGMzUxOTE2Q0Q3MjhCODQ2OENFOUJBOTNBOEQ2REJE
M0RENkNCNkQ4NURENTYyQzlGMUMzRDRFQTI5QTNDRUIyNDgzOUE4MzZEREU3ODBC
REYyQ0E4NjYxMUQzNzMyMUIwMDYyQzZEMUQ2RTczM0M2NzY3RDlFNTcyRkRDOUEy
QTU5NTUxNUY4RTg0RjI2QkJEMTc5NDkxN0FFNzgzNzlDMkZFMDVFMjhEMjk0MTMz
NDVBOTcyRDUzRjg0NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2MiHTw3zQDqHsHnF+aeqNDKhNWr/1SnQqDlwuRZTVcrf/G7TXZ8B
FAEfCNl0YzAl4g3an097wEhidGlJY0arARMz5K8+Zt8gHyusBfcokxPxuv8EJT71
L27SpW+EMOUZAqzGeYCwfN0D/9omV9W0eL6PkruAf5DAfnBA0DPeVLn8uasvjCCk
WZR6U6iaN2vQug2lxSKEEsbjo/wSXmbFTC0fNRkWzXKLhGjOm6k6jW29PdbLbYXd
ViyfHD1Oopo86ySDmoNt3ngL3yyoZhHTcyGwBixtHW5zPGdn2eVy/cmipZVRX46E
8mu9F5SReueDecL+BeKNKUEzRaly1T+EQwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FKqYWDr4b07VDmCGWioedeBsF2JnMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMwMzkyZTMy
MzAzMDJlMzIzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjM1MzYzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANHI5zANBgkqhkiG9w0BAQsFAAOCAQEAA71dPfVhw+s4XKt+pGat
CB4KbtE9+iYpGdR1oBAWrrgMybUFBzURl8Fqeq9/1JNRu1lEHDjAW205AJDRP6rk
l2DYTWrsHp6fJlbN+XStjm07RdAga9IZ82Zm5bm2F9m9EJf/jAzIVrvT+dLTBQsh
IQXt102d8Hy/TFrJaba+9WjHQTq/DqAX6nLNAoZsqIttkA3f8xUupM4cqp+wLQDl
knAVT9TMOnNPdD5gLkLyxoyW79lNG8WB/AGEmaBFiCyfYByizG/jFkO1hFEkmAC4
PZBiDQFJulRyDMCciYw1A2aR6nAzLXjimlmH6RtYDI28ryI+pIS/ginV4+n9OI7V
rw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org