Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa
File:                     3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          ocFAquPFFnfRR+LYhX5Z3lZTt1EnjTDMlaF2p+I5V9c=
Subject key identifier:   7B:FD:E1:25:B9:4D:53:15:7A:E4:23:3D:E9:52:49:D1:39:1B:2A:50
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       634B1003C633CA1C1692809CE082D2ABF27C0CB4
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa
Signing time:             Thu 10 Mar 2022 04:41:40 +0000
ROA not before:           Thu 10 Mar 2022 04:36:40 +0000
ROA not after:            Thu 09 Mar 2023 04:41:40 +0000
asID:                     1239
IP address blocks:        209.200.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4b:10:03:c6:33:ca:1c:16:92:80:9c:e0:82:d2:ab:f2:7c:0c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar 10 04:36:40 2022 GMT
            Not After : Mar  9 04:41:40 2023 GMT
        Subject: CN=3082010A0282010100C16B7F407908340D85443BF903FB8FA609A44CDC66973999608C81F8E3E15C4FC1C3A654AF802C3F5A777E2430426FCAA9D34BED2875A13B60DE79B52FCFD5BDA81E8414932A9F8A677AF51C10E93F417848B7F0B044602E5F5DE02B76056FB3AA2820E7C2EB47FE38F31C7569B1F273721654E87709B7747C85D821AAC59A29FDD022B9AD1E75DEAEB20DC7F86A11F765288B2E96CD7142CEBD722C69AB026EA152B79902762D4E6EFCC0D65399F180C5DB26A7AFA6BD860C1483EC0FD8BE4B225BF1E1CAF972102FEABDCA833019ACBF545E0A57AFDF45609800CA7CE9720D4FD5693A8E29376A246D12E4D72D905F8912E9387BDC0FA3669E8AB4ADCF5EE70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:7f:40:79:08:34:0d:85:44:3b:f9:03:fb:
                    8f:a6:09:a4:4c:dc:66:97:39:99:60:8c:81:f8:e3:
                    e1:5c:4f:c1:c3:a6:54:af:80:2c:3f:5a:77:7e:24:
                    30:42:6f:ca:a9:d3:4b:ed:28:75:a1:3b:60:de:79:
                    b5:2f:cf:d5:bd:a8:1e:84:14:93:2a:9f:8a:67:7a:
                    f5:1c:10:e9:3f:41:78:48:b7:f0:b0:44:60:2e:5f:
                    5d:e0:2b:76:05:6f:b3:aa:28:20:e7:c2:eb:47:fe:
                    38:f3:1c:75:69:b1:f2:73:72:16:54:e8:77:09:b7:
                    74:7c:85:d8:21:aa:c5:9a:29:fd:d0:22:b9:ad:1e:
                    75:de:ae:b2:0d:c7:f8:6a:11:f7:65:28:8b:2e:96:
                    cd:71:42:ce:bd:72:2c:69:ab:02:6e:a1:52:b7:99:
                    02:76:2d:4e:6e:fc:c0:d6:53:99:f1:80:c5:db:26:
                    a7:af:a6:bd:86:0c:14:83:ec:0f:d8:be:4b:22:5b:
                    f1:e1:ca:f9:72:10:2f:ea:bd:ca:83:30:19:ac:bf:
                    54:5e:0a:57:af:df:45:60:98:00:ca:7c:e9:72:0d:
                    4f:d5:69:3a:8e:29:37:6a:24:6d:12:e4:d7:2d:90:
                    5f:89:12:e9:38:7b:dc:0f:a3:66:9e:8a:b4:ad:cf:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FD:E1:25:B9:4D:53:15:7A:E4:23:3D:E9:52:49:D1:39:1B:2A:50
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233342e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:e5:64:26:9d:7a:08:98:a8:04:ae:15:df:e8:36:54:ca:2f:
         7e:1d:ff:5a:8a:44:d4:90:cd:19:d8:d6:df:f0:93:d1:73:94:
         78:5e:ed:34:8b:a3:de:af:4b:fa:ba:02:48:64:a6:28:a6:f2:
         08:f9:24:87:fe:3e:1e:31:2a:5d:97:bc:80:23:ff:ba:d8:21:
         59:2f:95:14:06:35:fe:4a:38:1d:3e:de:b1:9f:13:a1:9a:17:
         f1:79:a3:8b:7f:61:2e:0a:b9:5b:5d:d8:6d:f7:36:7c:37:54:
         4a:eb:27:e0:95:ec:ee:1d:ee:38:8d:47:bc:17:35:7e:e8:6d:
         0b:12:11:1d:97:a5:21:55:6a:f9:c5:3c:b0:16:04:8e:a1:90:
         9e:5e:67:5f:d3:c5:82:f5:ca:df:66:11:f6:85:4f:e7:f1:70:
         2f:75:4b:06:8d:6a:76:cd:01:1c:60:01:d9:37:8f:c9:81:85:
         d5:a9:19:63:ad:dc:f5:b0:f8:92:a4:f2:0b:01:29:c0:f0:a7:
         e4:f0:41:97:56:80:f1:c0:22:10:b5:a3:cd:4d:99:d5:b2:9f:
         e1:2f:15:0e:6e:4a:ce:cc:69:ec:bb:45:de:9f:0f:7b:30:23:
         d6:f0:a6:aa:62:5f:38:eb:e0:16:72:29:b0:6b:c8:6c:8e:27:
         a1:f2:64:2f
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUY0sQA8YzyhwWkoCc4ILSq/J8DLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjAzMTAwNDM2NDBaFw0yMzAzMDkwNDQxNDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE2QjdGNDA3OTA4MzQwRDg1
NDQzQkY5MDNGQjhGQTYwOUE0NENEQzY2OTczOTk5NjA4QzgxRjhFM0UxNUM0RkMx
QzNBNjU0QUY4MDJDM0Y1QTc3N0UyNDMwNDI2RkNBQTlEMzRCRUQyODc1QTEzQjYw
REU3OUI1MkZDRkQ1QkRBODFFODQxNDkzMkE5RjhBNjc3QUY1MUMxMEU5M0Y0MTc4
NDhCN0YwQjA0NDYwMkU1RjVERTAyQjc2MDU2RkIzQUEyODIwRTdDMkVCNDdGRTM4
RjMxQzc1NjlCMUYyNzM3MjE2NTRFODc3MDlCNzc0N0M4NUQ4MjFBQUM1OUEyOUZE
RDAyMkI5QUQxRTc1REVBRUIyMERDN0Y4NkExMUY3NjUyODhCMkU5NkNENzE0MkNF
QkQ3MjJDNjlBQjAyNkVBMTUyQjc5OTAyNzYyRDRFNkVGQ0MwRDY1Mzk5RjE4MEM1
REIyNkE3QUZBNkJEODYwQzE0ODNFQzBGRDhCRTRCMjI1QkYxRTFDQUY5NzIxMDJG
RUFCRENBODMzMDE5QUNCRjU0NUUwQTU3QUZERjQ1NjA5ODAwQ0E3Q0U5NzIwRDRG
RDU2OTNBOEUyOTM3NkEyNDZEMTJFNEQ3MkQ5MDVGODkxMkU5Mzg3QkRDMEZBMzY2
OUU4QUI0QURDRjVFRTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwWt/QHkINA2FRDv5A/uPpgmkTNxmlzmZYIyB+OPhXE/Bw6ZUr4As
P1p3fiQwQm/KqdNL7Sh1oTtg3nm1L8/VvagehBSTKp+KZ3r1HBDpP0F4SLfwsERg
Ll9d4Ct2BW+zqigg58LrR/448xx1abHyc3IWVOh3Cbd0fIXYIarFmin90CK5rR51
3q6yDcf4ahH3ZSiLLpbNcULOvXIsaasCbqFSt5kCdi1ObvzA1lOZ8YDF2yanr6a9
hgwUg+wP2L5LIlvx4cr5chAv6r3KgzAZrL9UXgpXr99FYJgAynzpcg1P1Wk6jik3
aiRtEuTXLZBfiRLpOHvcD6Nmnoq0rc9e5wIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FHv94SW5TVMVeuQjPelSSdE5GypQMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMwMzkyZTMy
MzAzMDJlMzIzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMjMzMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADRyOowDQYJKoZIhvcNAQELBQADggEBAM/lZCadegiYqASuFd/oNlTK
L34d/1qKRNSQzRnY1t/wk9FzlHhe7TSLo96vS/q6Akhkpiim8gj5JIf+Ph4xKl2X
vIAj/7rYIVkvlRQGNf5KOB0+3rGfE6GaF/F5o4t/YS4KuVtd2G33Nnw3VErrJ+CV
7O4d7jiNR7wXNX7obQsSER2XpSFVavnFPLAWBI6hkJ5eZ1/TxYL1yt9mEfaFT+fx
cC91SwaNanbNARxgAdk3j8mBhdWpGWOt3PWw+JKk8gsBKcDwp+TwQZdWgPHAIhC1
o81NmdWyn+EvFQ5uSs7Maey7Rd6fD3swI9bwpqpiXzjr4BZyKbBryGyOJ6HyZC8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org