Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234322e302f32332d3234203d3e2031323339.roa
File:                     3230392e3230302e3234322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          Pdw5uGOqmwOUjrwWuS7fhSn7eMlo9LWzNh5Jl2QrvI8=
Subject key identifier:   69:8E:1D:DE:51:EC:E8:2C:DB:05:25:77:0F:F7:C1:A7:05:06:F7:AC
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       38C114E9E04D62E14F479FC437FFE4071009A3C0
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234322e302f32332d3234203d3e2031323339.roa
Signing time:             Wed 09 Mar 2022 00:19:06 +0000
ROA not before:           Wed 09 Mar 2022 00:14:06 +0000
ROA not after:            Wed 08 Mar 2023 00:19:06 +0000
asID:                     1239
IP address blocks:        209.200.242.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c1:14:e9:e0:4d:62:e1:4f:47:9f:c4:37:ff:e4:07:10:09:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  9 00:14:06 2022 GMT
            Not After : Mar  8 00:19:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:b1:26:be:80:83:f2:1d:ae:f4:1b:f5:62:
                    3a:17:87:ba:e3:4c:12:84:32:66:2e:f0:f1:dd:61:
                    54:15:fd:29:4d:10:11:d7:6d:e9:b1:b1:20:c6:cd:
                    cf:39:01:25:f7:b4:85:3d:4e:2a:9e:ad:b2:49:62:
                    7f:6a:14:7d:0e:48:bf:21:43:35:04:1a:27:1e:7f:
                    bd:bc:99:57:83:a2:35:dd:6e:ef:f8:78:2b:8c:d7:
                    44:27:64:4a:ba:f4:61:1b:e6:3c:b0:08:90:b9:ff:
                    d2:eb:ce:c5:d9:2c:a7:ce:fd:8d:d8:1d:6c:52:3e:
                    23:4d:4e:d3:a4:6b:62:60:18:07:57:35:23:77:f4:
                    4f:cd:9e:2c:36:a0:11:6d:c6:f7:31:4e:85:70:e9:
                    0a:ca:df:07:3e:75:c8:40:44:11:ab:54:87:d4:e3:
                    7f:1b:77:6b:9a:c8:4d:83:79:fb:aa:0e:aa:35:de:
                    f3:ad:53:29:9a:2c:ff:73:a0:05:7d:98:c9:f9:60:
                    5f:b3:e6:58:b5:b0:11:f6:4a:e7:cd:5a:0d:5d:da:
                    af:c6:59:e1:32:05:86:3c:c2:b4:45:3b:a3:1c:c0:
                    b2:91:65:4e:91:06:7d:66:08:f7:a4:f5:35:18:a1:
                    ff:25:f8:27:2b:d8:eb:9b:00:44:d8:65:3f:e9:dd:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8E:1D:DE:51:EC:E8:2C:DB:05:25:77:0F:F7:C1:A7:05:06:F7:AC
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234322e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:2a:d4:64:17:15:0a:b7:b7:3b:fc:46:9b:79:92:3b:0a:5d:
         c3:e9:03:ff:3e:b0:e3:da:fc:01:04:13:d5:b1:18:46:13:cd:
         bf:b0:be:35:52:4f:57:c8:a4:55:dd:ab:83:70:be:b3:df:55:
         33:b1:9c:71:ce:7e:c1:b3:22:02:1e:a5:6d:46:7d:f8:ab:71:
         ce:6e:a2:17:ab:33:54:90:46:aa:f6:15:8a:ab:bd:68:c7:f3:
         9e:54:0b:fc:6c:57:55:cf:f6:31:f6:d2:6e:65:bb:7b:4a:1f:
         84:3d:b7:5b:69:bf:d4:4f:02:50:cc:64:66:89:05:29:82:67:
         1e:b3:57:14:9b:94:40:06:24:d6:2f:b7:14:78:8f:99:af:35:
         72:dd:45:91:dd:0a:81:68:4d:78:6b:50:15:84:84:3e:09:12:
         54:56:eb:6e:fb:46:77:37:72:ce:7e:97:d0:fc:a4:8a:8b:19:
         93:ba:51:9c:5d:49:a9:cf:75:20:57:ac:61:f3:ff:d2:33:37:
         ca:87:8a:3f:b7:06:f6:1f:0f:a3:08:b5:0f:99:5d:7f:87:e3:
         1e:e8:9b:ee:3d:4b:2f:b1:0e:61:b8:67:e9:60:f0:8c:67:c2:
         8c:bc:10:5a:d4:ab:4f:b7:e6:2c:5a:f0:90:2b:af:66:df:2d:
         20:e5:6c:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org