Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234382e302f32322d3234203d3e2031323339.roa
File:                     3230392e3230302e3234382e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier:          5BrC7aRzSbJau8BVo7g95HkwukABVl0E66ScfA1Ijb4=
Subject key identifier:   1D:87:59:21:35:E9:C0:FE:EB:94:31:65:C2:14:62:14:A9:12:60:67
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       721503762F63187225D9CAD82A74E21EE0356C6D
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234382e302f32322d3234203d3e2031323339.roa
Signing time:             Wed 11 May 2022 16:53:36 +0000
ROA not before:           Wed 11 May 2022 16:48:36 +0000
ROA not after:            Wed 10 May 2023 16:53:36 +0000
asID:                     1239
IP address blocks:        209.200.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:15:03:76:2f:63:18:72:25:d9:ca:d8:2a:74:e2:1e:e0:35:6c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May 11 16:48:36 2022 GMT
            Not After : May 10 16:53:36 2023 GMT
        Subject: CN=3082010A0282010100B9C9808D9ABFB39A4F9E2CD98A122DF19112DC59E9500D1695380BB2BBFEB302B09751BF6284122FF6DF8019461195831A7098F7509047BEAD720CBBD70AA83B38B4A46BCA713086EED9E436BD396788CFE4F8B8E7DFB577FF0240E083D2DC68A9FAFC3862E97DD3CCCF4C13A588A6FA3C51C9249C7954025B2F310953131E503D83D0A2FE73F7BCCBF32CC59CE933CA4BBF939A6308EBD88EF1564503EB46BBCA186E49722B9C33105944F1E92422A025FBA550584F934D49530513B3F98C5278293E60CDE06DBE6C428440F8343F1CB54DBAB598507E676A8ECE3D268FEF827E4159F594349BD7CA299E2AEEE8EE41A216984DD0E65280F30F5BF72D0C82710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:80:8d:9a:bf:b3:9a:4f:9e:2c:d9:8a:12:
                    2d:f1:91:12:dc:59:e9:50:0d:16:95:38:0b:b2:bb:
                    fe:b3:02:b0:97:51:bf:62:84:12:2f:f6:df:80:19:
                    46:11:95:83:1a:70:98:f7:50:90:47:be:ad:72:0c:
                    bb:d7:0a:a8:3b:38:b4:a4:6b:ca:71:30:86:ee:d9:
                    e4:36:bd:39:67:88:cf:e4:f8:b8:e7:df:b5:77:ff:
                    02:40:e0:83:d2:dc:68:a9:fa:fc:38:62:e9:7d:d3:
                    cc:cf:4c:13:a5:88:a6:fa:3c:51:c9:24:9c:79:54:
                    02:5b:2f:31:09:53:13:1e:50:3d:83:d0:a2:fe:73:
                    f7:bc:cb:f3:2c:c5:9c:e9:33:ca:4b:bf:93:9a:63:
                    08:eb:d8:8e:f1:56:45:03:eb:46:bb:ca:18:6e:49:
                    72:2b:9c:33:10:59:44:f1:e9:24:22:a0:25:fb:a5:
                    50:58:4f:93:4d:49:53:05:13:b3:f9:8c:52:78:29:
                    3e:60:cd:e0:6d:be:6c:42:84:40:f8:34:3f:1c:b5:
                    4d:ba:b5:98:50:7e:67:6a:8e:ce:3d:26:8f:ef:82:
                    7e:41:59:f5:94:34:9b:d7:ca:29:9e:2a:ee:e8:ee:
                    41:a2:16:98:4d:d0:e6:52:80:f3:0f:5b:f7:2d:0c:
                    82:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:87:59:21:35:E9:C0:FE:EB:94:31:65:C2:14:62:14:A9:12:60:67
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234382e302f32322d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:ae:f8:58:64:4d:ff:29:c3:6b:90:de:b5:14:53:73:82:80:
         b0:ab:af:37:5f:26:73:9c:44:43:f0:c7:43:2f:a8:6f:d1:2c:
         25:b8:0f:4c:14:ad:bc:01:b8:c0:d0:39:0b:d2:80:2e:d7:e9:
         4b:d3:14:86:27:76:91:22:5e:68:c5:5f:ad:2b:36:64:1d:7e:
         53:1a:72:32:87:3c:e2:35:83:b7:02:1f:8b:43:29:e8:fc:22:
         71:31:71:d0:dd:73:c6:35:a9:17:e8:01:66:39:48:40:6b:88:
         c3:ed:fb:a9:11:d9:14:9f:00:10:df:45:2f:1d:72:50:c7:11:
         fb:93:84:cb:8b:ff:6f:45:04:84:b9:01:c3:45:73:69:02:44:
         81:30:9b:4c:69:fb:fd:1e:a2:09:41:73:0a:f0:bb:be:76:eb:
         4c:39:b5:c4:38:73:02:7b:0d:ca:9c:5d:3e:ba:69:42:1a:8e:
         f9:49:93:e5:e4:d3:25:fd:c3:a9:f6:59:09:b2:ea:3e:8d:53:
         e9:7a:c8:9d:90:c9:5b:15:ed:1e:b9:7c:27:68:37:0f:4c:8c:
         90:4b:ed:c0:22:c7:4d:da:56:ef:df:86:bd:14:74:bc:58:a1:
         21:c9:f8:3f:c5:10:28:e5:ff:05:10:d7:04:f1:72:9d:d3:ac:
         dd:50:eb:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org