Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234342e302f32332d3234203d3e2031323339.roa
File:                     3230392e3230302e3234342e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          9ypYUZVd3DZy4h0IcPJvrvH8qHuvmkBrPUmtwJMa9ro=
Subject key identifier:   7C:62:54:C6:EB:73:61:DC:8C:03:E2:27:27:38:37:96:ED:96:25:9E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       42AC4E7C56AC486BEEFDECF521E4F0D6D317B1ED
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234342e302f32332d3234203d3e2031323339.roa
Signing time:             Wed 09 Mar 2022 00:19:25 +0000
ROA not before:           Wed 09 Mar 2022 00:14:25 +0000
ROA not after:            Wed 08 Mar 2023 00:19:25 +0000
asID:                     1239
IP address blocks:        209.200.244.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ac:4e:7c:56:ac:48:6b:ee:fd:ec:f5:21:e4:f0:d6:d3:17:b1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  9 00:14:25 2022 GMT
            Not After : Mar  8 00:19:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:8f:ce:30:61:e3:05:ca:25:2a:e9:4e:cc:
                    da:c8:3c:2b:71:13:1d:55:9e:4e:e0:0c:7c:2a:9d:
                    dd:6c:2d:c5:c3:27:9b:a1:0a:b1:58:03:b6:3b:6e:
                    e2:1d:2a:b9:6a:0b:3e:2f:2a:fb:fd:55:12:76:44:
                    30:9b:e3:82:0d:c3:1e:ee:e8:f7:2f:53:c1:b4:82:
                    4a:30:83:24:48:bb:6f:be:3a:35:0c:5d:54:37:f1:
                    0d:f0:5f:d0:6a:c3:ad:50:da:ac:a7:ae:fa:39:3e:
                    ae:4d:ae:f6:b0:2b:2f:b7:b2:59:3e:2b:4a:40:dc:
                    b3:a5:8a:dc:ad:98:50:b2:13:a4:3b:a7:e6:88:ca:
                    a5:e6:6c:b2:78:25:a7:f9:19:15:1d:42:87:82:5c:
                    58:74:b6:88:e8:67:9d:30:a3:82:2b:32:0b:f0:53:
                    a4:e6:0c:51:51:f4:68:b2:34:12:0a:0f:5b:70:eb:
                    6f:61:4c:74:51:3f:a4:22:d9:5d:3a:fe:70:f4:d1:
                    92:9d:67:8a:9d:67:e2:70:2c:11:39:8a:f4:bc:5e:
                    1b:7c:a7:66:af:28:65:6b:85:06:d0:3c:bc:cb:2c:
                    c1:3e:69:f7:18:89:4d:7e:91:ff:d9:a7:87:38:07:
                    10:89:97:05:f7:a1:07:db:a3:10:e5:f7:06:ec:6b:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:54:C6:EB:73:61:DC:8C:03:E2:27:27:38:37:96:ED:96:25:9E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234342e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:6f:9d:b2:55:a1:a1:ac:4c:83:ec:5b:ff:27:27:9d:23:a8:
         00:e2:aa:66:57:14:39:40:48:15:43:9e:51:22:6a:ca:d0:f3:
         06:ba:c3:90:58:fc:70:8f:90:25:8c:64:64:85:44:9e:0b:6a:
         3b:4c:03:71:87:de:b5:07:3a:8f:87:4a:37:5e:85:0e:51:b5:
         9d:fa:2c:9f:77:9f:8a:8c:37:0d:6c:cf:29:e8:99:c6:ab:6a:
         0f:ff:fe:f9:3f:63:75:4d:62:f1:43:70:ab:ae:1e:5b:c4:d4:
         9c:83:ca:57:ec:07:4d:fa:6a:11:9f:17:26:99:39:99:e8:ab:
         a9:c3:30:97:50:38:80:91:89:84:be:2c:ba:63:79:92:61:68:
         c0:fb:2d:51:d5:5f:5c:e1:2a:49:c7:7b:e9:5e:b4:85:55:c3:
         ff:f8:2d:19:8d:ae:02:4c:fa:32:ab:c5:67:71:26:2a:84:a7:
         cd:b5:d1:a0:a4:b5:8c:ab:3f:d2:1b:3d:b4:fc:d5:a7:bc:0d:
         7e:4b:e9:88:42:79:20:8b:fc:25:49:cb:67:58:4f:67:41:7d:
         e0:83:71:58:9c:8b:6c:99:64:08:f8:cd:65:66:02:d6:55:55:
         c0:1a:f8:ef:6a:85:da:a8:c6:16:10:c3:d8:3b:6b:6a:c3:95:
         bf:1e:82:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org