Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234312e302f32342d3234203d3e203436353632.roa
File:                     3230392e3230302e3234312e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          Ee52iwYuRsos7SwzWpOR6KVguwSYcL5+VgwC29HACtQ=
Subject key identifier:   AD:59:DF:87:6F:23:CB:36:76:56:A8:04:5C:19:49:CB:7E:D2:20:2B
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       31E97B4B7AE50B6F50613A2B079AEF1AD5E00B0C
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234312e302f32342d3234203d3e203436353632.roa
Signing time:             Sat 19 Feb 2022 11:26:50 +0000
ROA not before:           Sat 19 Feb 2022 11:21:50 +0000
ROA not after:            Sat 18 Feb 2023 11:26:50 +0000
asID:                     46562
IP address blocks:        209.200.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e9:7b:4b:7a:e5:0b:6f:50:61:3a:2b:07:9a:ef:1a:d5:e0:0b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 19 11:21:50 2022 GMT
            Not After : Feb 18 11:26:50 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:e6:08:2b:04:df:73:1a:6d:60:92:ca:21:
                    9e:1a:50:d4:95:dd:1e:f3:3b:91:61:67:79:44:6a:
                    d7:6e:49:5d:8b:c2:a7:ae:94:0c:12:5d:c9:a5:64:
                    51:a8:ad:02:fb:6f:a8:67:26:27:e5:9e:f4:18:bd:
                    26:75:4a:ad:aa:20:c9:04:57:13:36:23:a2:59:82:
                    4a:bb:db:e7:65:3e:73:8b:b5:cb:d9:06:5c:11:91:
                    89:ab:2a:0d:ec:03:a7:b4:39:f7:92:cb:8d:08:cb:
                    c7:b9:97:de:2d:bf:61:a0:71:69:35:a2:e9:4e:9a:
                    b6:1f:0b:e7:af:79:91:93:85:0b:0e:0d:a0:a3:36:
                    90:ec:11:8f:0a:31:b7:bb:9b:db:fc:31:fe:cb:5a:
                    9e:de:d8:de:1e:e6:ce:50:32:1f:2a:92:a0:1c:7f:
                    d8:f6:e8:52:0e:a9:47:d4:d9:3d:a1:9f:6b:a2:e5:
                    18:fd:fa:7c:e1:ba:85:14:36:88:a0:b6:39:f3:bc:
                    18:50:e5:49:8f:28:2e:cf:80:0d:77:c4:56:3e:99:
                    2c:4a:5a:18:88:6e:62:9f:4a:9c:93:70:15:3b:78:
                    00:70:5d:de:9e:66:cf:ae:e3:a0:f7:ba:5e:e4:bc:
                    e0:16:52:17:2b:23:16:04:c9:af:36:62:8e:13:77:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:59:DF:87:6F:23:CB:36:76:56:A8:04:5C:19:49:CB:7E:D2:20:2B
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234312e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:e7:3f:89:f7:3c:43:a2:3d:93:b5:c3:d8:c1:fb:9c:4f:2e:
         c4:89:af:29:da:15:bb:54:02:0e:4b:d0:67:96:9a:62:a0:6c:
         bf:53:e4:cc:53:7f:e9:b2:24:c0:d1:c8:76:16:f2:09:70:1e:
         f6:56:73:f5:e5:6b:ef:69:f1:b8:84:47:2c:a5:34:21:8c:21:
         5c:2c:3f:bb:87:95:4c:91:04:72:08:c6:7e:5b:2d:df:28:40:
         fe:b5:d2:4c:03:3f:7e:94:0a:17:72:f8:65:79:ee:f5:02:8c:
         50:f8:76:78:c1:fb:82:87:80:f4:69:ef:6b:6a:21:d2:c4:9c:
         9a:77:83:c7:58:cc:91:54:20:57:0a:ba:72:dd:3f:cf:3b:26:
         b7:35:32:18:84:bb:70:79:6f:9f:59:fc:de:ea:1a:3e:51:2b:
         f3:28:a8:e5:53:8e:13:e1:e6:af:25:3f:10:c4:1c:c7:e7:7c:
         3e:a6:81:77:76:de:84:5f:e6:f6:7a:d5:c7:d6:f4:f5:e0:15:
         93:9a:09:a6:6d:af:08:ef:ea:69:89:bb:79:85:ef:63:ce:1d:
         47:78:9a:5a:0b:2f:98:a9:10:b4:aa:0a:ba:a4:6f:40:10:70:
         74:c6:17:7c:f0:22:81:e6:b1:36:1b:e0:a6:4e:0a:52:0b:46:
         76:97:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org