Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32342d3234203d3e203239383032.roa
File:                     3230392e3230302e3233362e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          9bzbz07y0I0JVuS0ot0913nTBVvJ1gRoaQ9uNb/+yfg=
Subject key identifier:   81:21:8A:56:E4:9F:32:B6:57:87:3B:C4:C3:70:7F:9E:69:8B:5F:9E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       1EAD4C21D03F68E97199163B75493E8ACBBC5FA6
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32342d3234203d3e203239383032.roa
Signing time:             Fri 24 Jun 2022 23:54:36 +0000
ROA not before:           Fri 24 Jun 2022 23:49:36 +0000
ROA not after:            Fri 23 Jun 2023 23:54:36 +0000
asID:                     29802
IP address blocks:        209.200.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ad:4c:21:d0:3f:68:e9:71:99:16:3b:75:49:3e:8a:cb:bc:5f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 24 23:49:36 2022 GMT
            Not After : Jun 23 23:54:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:80:ab:0f:0d:96:74:6b:00:63:2f:38:5f:8d:
                    3a:ef:3c:83:69:dc:e9:ad:7c:a2:07:46:f8:6a:aa:
                    3c:94:8d:56:13:70:30:54:52:ad:8b:27:c1:70:30:
                    b3:c6:bc:57:87:21:00:2f:4c:f6:7f:19:8e:35:d9:
                    83:7f:4e:34:e6:bd:72:c6:5d:e3:36:c4:ec:f3:31:
                    a1:c1:8e:0c:04:bd:f1:75:6c:23:43:cc:ed:06:63:
                    5e:01:11:ae:73:fb:07:d6:16:ca:e8:ca:56:e4:e9:
                    d4:6b:0a:5f:bb:32:c7:47:27:0a:ed:7b:83:47:23:
                    5a:3b:4d:35:db:26:2d:9f:5a:28:b1:e0:ed:63:23:
                    af:80:0c:47:e5:70:74:17:3a:8f:8b:87:5b:29:0e:
                    7a:77:d1:4c:42:3d:08:f6:2b:59:fe:eb:c7:43:93:
                    a8:da:3b:86:b4:ee:88:d5:fa:02:95:f3:69:4d:40:
                    aa:f9:de:78:d7:34:e5:a5:3c:51:99:00:73:f4:e6:
                    3f:01:76:cd:2d:06:79:5c:24:1e:4e:f3:cd:c8:26:
                    44:b2:f3:35:70:63:93:bf:20:fd:7c:7b:4b:d2:3b:
                    0f:fd:71:65:64:45:01:4d:bb:c5:02:33:ee:eb:84:
                    f1:5e:0d:16:4b:ef:a6:45:8f:50:27:c2:e5:af:7a:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:21:8A:56:E4:9F:32:B6:57:87:3B:C4:C3:70:7F:9E:69:8B:5F:9E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3233362e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:85:0d:aa:bf:66:b3:85:9b:a1:9e:07:18:1d:61:15:a4:ae:
         5a:5e:8e:5d:9f:13:89:e6:ee:96:f8:1c:68:5d:65:41:b5:eb:
         75:10:67:1a:f8:db:0d:40:1b:df:fb:19:2d:7b:39:16:c2:fa:
         bc:90:2c:5a:98:f3:60:51:65:f6:b5:25:0a:63:57:19:7b:9b:
         c6:ce:fc:39:6d:ee:46:76:43:61:77:e1:e1:3e:bb:64:51:de:
         32:ee:4a:22:dd:dd:b5:51:d5:cc:65:24:14:e5:ba:37:d2:90:
         6e:f3:51:e2:e0:c5:d5:f9:7c:b1:82:04:61:12:11:f0:a1:54:
         92:f7:ca:da:8e:17:86:f6:51:d3:bd:bf:62:48:5e:07:62:1b:
         71:17:1c:d4:15:d5:66:c5:c4:75:9e:d7:81:c0:52:74:09:65:
         db:13:42:dc:ff:ce:40:08:97:d6:d8:e3:62:b3:e4:a9:d3:6d:
         03:0d:7f:e1:23:51:26:c0:03:d7:04:5f:fe:55:2a:ed:36:93:
         4e:e0:01:06:6f:68:7b:6b:bd:2d:77:9f:bb:11:09:d5:2c:71:
         89:b4:03:30:f0:88:81:76:e6:99:96:dd:c8:84:22:34:b2:d3:
         3e:95:a6:b7:25:ed:c6:b8:94:b3:92:96:a7:29:42:d6:a6:47:
         5d:4b:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org