Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234372e302f32342d3234203d3e203436353632.roa
File:                     3230392e3230302e3234372e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          xd6TwfxKQKCYvHUdYF1LDlq6zQL0bX7kaoVG6Q1dBQA=
Subject key identifier:   67:B6:3F:36:D2:28:B1:BA:76:6C:7A:56:12:40:23:5B:6C:BE:02:27
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       5ABDE99D100E725A287ACABEE7034B33971C70F3
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234372e302f32342d3234203d3e203436353632.roa
Signing time:             Sat 19 Feb 2022 11:27:04 +0000
ROA not before:           Sat 19 Feb 2022 11:22:04 +0000
ROA not after:            Sat 18 Feb 2023 11:27:04 +0000
asID:                     46562
IP address blocks:        209.200.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bd:e9:9d:10:0e:72:5a:28:7a:ca:be:e7:03:4b:33:97:1c:70:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 19 11:22:04 2022 GMT
            Not After : Feb 18 11:27:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:8b:24:95:26:4f:ad:e3:d3:61:2f:85:36:
                    a5:78:63:de:3e:ab:bd:92:a3:59:9c:96:e7:7f:5d:
                    4c:3d:be:8d:92:ef:94:a1:ee:a0:57:aa:bd:d4:cc:
                    57:f6:85:67:a0:d8:18:b5:9f:27:37:eb:89:3c:68:
                    a8:f7:3e:5c:b4:80:a6:a8:8d:af:d9:55:2f:37:0b:
                    6c:c3:ba:ea:60:bf:71:61:39:6f:7b:04:46:30:6d:
                    f6:95:18:8c:ed:0b:95:ef:c1:21:0b:14:0f:23:3f:
                    ce:bb:c3:3e:99:c8:d5:e0:15:86:d5:06:6d:89:52:
                    cf:8f:3b:c4:94:ca:26:6e:4c:1d:6f:de:16:b7:23:
                    35:e4:53:ea:6d:6a:45:b3:4d:9c:74:ef:b3:76:56:
                    e7:9c:93:2f:88:53:6e:02:b3:31:cf:00:d6:f6:50:
                    56:4c:a9:6a:6f:f0:2a:23:2c:22:27:dd:18:8c:7c:
                    5b:86:f3:b9:ef:68:fd:26:6c:73:52:b1:e9:bf:7c:
                    14:ce:b7:e2:97:73:a5:73:ee:45:b1:3f:e0:38:c6:
                    a4:13:cc:38:22:d1:47:8e:61:6e:8c:50:76:54:79:
                    87:fa:94:a2:ea:ee:93:66:d9:e5:1e:2f:c2:12:c3:
                    94:9c:a8:58:86:03:b6:db:39:ce:ca:06:12:3e:5e:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B6:3F:36:D2:28:B1:BA:76:6C:7A:56:12:40:23:5B:6C:BE:02:27
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234372e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:51:e8:e6:3d:db:88:71:9a:8e:68:33:9e:df:94:f5:e4:ac:
         3e:e8:d5:7b:b1:15:e9:55:55:b3:bf:d7:38:15:97:20:2d:e5:
         e6:40:c1:ab:71:ef:c6:ce:16:5a:0d:b4:c8:7c:aa:c6:b7:25:
         a3:82:4d:7d:7c:30:eb:dd:ef:6d:38:fb:23:ee:1a:c3:d7:87:
         df:8b:4e:3f:a3:c7:76:35:82:85:90:b7:f6:6a:f0:0a:7a:7e:
         0d:c8:51:41:58:f7:33:9c:ed:8a:88:e0:01:9d:3f:f7:ff:a8:
         51:6e:94:ee:3a:95:27:75:ff:8b:af:d8:e4:00:1a:f0:09:05:
         70:22:d0:a3:9e:d0:45:c8:43:9a:69:fd:5c:73:54:5e:6a:de:
         a9:71:cf:f3:28:ea:0d:53:87:a1:a3:f2:eb:9e:df:d4:5e:0e:
         93:06:f0:68:ce:7a:8e:5b:d2:02:b2:c9:26:49:54:10:42:01:
         2c:44:a6:db:23:71:28:4e:71:0e:3e:34:69:be:b6:42:d7:eb:
         99:a0:89:d7:45:bb:6e:09:06:22:2d:41:da:ee:50:d1:c0:31:
         ed:27:a3:ed:f2:64:b0:e2:ad:6d:41:25:8b:98:9c:8c:a5:be:
         ea:8c:9f:0c:99:ed:bf:ed:5d:10:21:60:d3:71:37:23:60:c3:
         46:38:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org