Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32322d3234203d3e2037303239.roa
File:                     3230392e3230302e3233362e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          FUfrJOWfpjqCg11ntbihSvbBeHNs00FSjP1zdshv2Lg=
Subject key identifier:   1E:82:CD:0B:55:11:3F:3A:4A:0D:33:3C:0E:8D:FC:89:C7:D3:4D:6E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       5BAB4DC30C312C90C63AD24C9D1CF2C34812388E
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:57:46 +0000
ROA not before:           Mon 25 Oct 2021 12:52:46 +0000
ROA not after:            Mon 24 Oct 2022 12:57:46 +0000
asID:                     7029
IP address blocks:        209.200.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ab:4d:c3:0c:31:2c:90:c6:3a:d2:4c:9d:1c:f2:c3:48:12:38:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:46 2021 GMT
            Not After : Oct 24 12:57:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:84:74:d2:df:05:d3:69:52:e2:6a:c6:2e:60:
                    ec:e2:93:fe:22:fc:d2:ea:87:f7:24:34:4d:77:c1:
                    c0:d8:0a:93:4c:e2:4f:8f:e3:d3:d4:32:4c:02:15:
                    7a:f0:6a:22:a3:f4:74:e7:dd:f7:4e:18:fe:27:2d:
                    04:6e:cd:0d:87:88:ae:89:79:66:ed:a0:83:3d:4c:
                    7f:39:2d:3a:a9:52:88:f7:7b:30:bc:e4:cb:97:60:
                    e0:85:df:3f:d6:2c:f9:38:df:a6:d9:4e:2c:8c:b8:
                    c2:a2:71:c2:8c:83:2a:c3:c2:dd:2f:5d:85:6f:8d:
                    be:29:fd:28:4f:c0:31:d1:ce:8f:dc:bd:29:90:a0:
                    3e:a3:46:42:17:17:4d:ab:a6:a9:ee:0b:74:35:70:
                    9c:96:80:bc:70:21:d3:01:d4:6d:22:ff:cb:1e:8a:
                    c9:21:5e:1c:7b:8c:e1:11:b4:66:a1:92:2a:91:f2:
                    05:bd:ac:bf:7c:8c:84:5d:41:47:a4:48:05:4a:b7:
                    0e:11:cb:69:2a:28:98:e0:2f:aa:90:3d:46:85:03:
                    8f:64:91:c3:c8:d9:36:e9:85:8e:18:f4:68:3a:0f:
                    73:40:b8:59:d1:d7:8f:75:b7:6d:ac:d3:d8:e8:d2:
                    54:2b:6f:dd:5f:16:88:53:fe:7d:21:9c:fd:f7:d6:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:82:CD:0B:55:11:3F:3A:4A:0D:33:3C:0E:8D:FC:89:C7:D3:4D:6E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:c8:91:20:1c:d6:a3:ed:3c:10:cb:9a:d9:5d:9f:10:a8:38:
         6a:92:69:1f:66:2d:9a:07:fa:ea:3a:7d:90:1d:86:ec:d8:c4:
         37:25:b1:07:27:03:12:87:0f:79:41:5a:88:3b:9a:1c:96:bd:
         10:76:54:25:e9:1f:22:b7:83:eb:0f:27:9c:16:01:64:96:97:
         f2:6e:9d:c5:6d:3f:af:da:be:35:5a:17:4d:ad:7c:de:57:05:
         ea:ed:e1:2f:52:f5:84:e0:d9:e5:56:0d:fa:ff:a0:78:08:b2:
         75:fc:66:b7:77:5b:73:4a:43:81:d6:08:db:e9:fb:f3:8e:77:
         67:79:b8:8f:4c:65:e3:ff:2b:29:5d:19:ad:05:41:84:de:dc:
         17:ce:e0:07:e9:c1:c4:c4:fb:d4:eb:8e:85:ea:c9:01:de:58:
         1b:ca:14:5a:44:ba:31:05:a4:a0:aa:5f:64:cb:b1:4c:e3:8f:
         f7:2c:ad:f5:1e:5e:eb:37:96:b7:37:ae:f7:31:ca:09:2b:c1:
         c5:90:64:6b:2e:55:d0:8f:d5:d5:ad:66:c9:59:b5:5f:34:a7:
         75:4c:67:de:27:af:33:b7:01:0c:25:cd:7f:00:9e:49:85:23:
         2c:e6:83:79:ba:b4:0e:31:27:4d:6c:c5:8a:f6:ad:75:43:a2:
         76:e0:b9:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org