Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235322e302f32342d3234203d3e2038313030.roa
File:                     3230392e3230302e3235322e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          jJ/bfGobO5QPd6ZLAtiClxeo2y5xucugnq/0WJVT3B0=
Subject key identifier:   AA:4A:B2:DD:A4:5A:82:A5:AE:D0:8C:46:06:88:2C:B1:3C:BC:CA:B0
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       41DD9ACCDE5C2980B5CAA092E11D2E6630CCFEF3
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235322e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 05 Apr 2022 16:19:53 +0000
ROA not before:           Tue 05 Apr 2022 16:14:53 +0000
ROA not after:            Tue 04 Apr 2023 16:19:53 +0000
asID:                     8100
IP address blocks:        209.200.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dd:9a:cc:de:5c:29:80:b5:ca:a0:92:e1:1d:2e:66:30:cc:fe:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Apr  5 16:14:53 2022 GMT
            Not After : Apr  4 16:19:53 2023 GMT
        Subject: CN=3082010A0282010100C21C06FA059EB2B6DB88AF9DD634E7C8F643C5273F59FC425BA08267B4CD5D34EE3E7038819AB1374F5DA1D3D31C2C540F7E9C9F630284D862C7003AFBB9258CA1E280BCA137DA1FDAFE8299B0E4AA2E46A120A59B4F61DD1241EDCFE90738E8708B7595C4240F4874207FDEB40D07BE3BAD0DF5986536E8C752E2EB9DBF20B1981381C041CE930414517B76B5017E80FAE4B5948C6AB949723B3A57E166306EB4CD9DC4349E9259DDBDF5F68D53A20410F3A93E45CFB9AC112C57F729FF2940B2AB34291F6B6FE7E0A42604EDDF2FC0DA5F1267D2F0B89E6CC5CFC54EC724400B5BFFB9CA601B9192925CA18F040657B0B2CA82DEA30A43C71686080E9A28B30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:06:fa:05:9e:b2:b6:db:88:af:9d:d6:34:
                    e7:c8:f6:43:c5:27:3f:59:fc:42:5b:a0:82:67:b4:
                    cd:5d:34:ee:3e:70:38:81:9a:b1:37:4f:5d:a1:d3:
                    d3:1c:2c:54:0f:7e:9c:9f:63:02:84:d8:62:c7:00:
                    3a:fb:b9:25:8c:a1:e2:80:bc:a1:37:da:1f:da:fe:
                    82:99:b0:e4:aa:2e:46:a1:20:a5:9b:4f:61:dd:12:
                    41:ed:cf:e9:07:38:e8:70:8b:75:95:c4:24:0f:48:
                    74:20:7f:de:b4:0d:07:be:3b:ad:0d:f5:98:65:36:
                    e8:c7:52:e2:eb:9d:bf:20:b1:98:13:81:c0:41:ce:
                    93:04:14:51:7b:76:b5:01:7e:80:fa:e4:b5:94:8c:
                    6a:b9:49:72:3b:3a:57:e1:66:30:6e:b4:cd:9d:c4:
                    34:9e:92:59:dd:bd:f5:f6:8d:53:a2:04:10:f3:a9:
                    3e:45:cf:b9:ac:11:2c:57:f7:29:ff:29:40:b2:ab:
                    34:29:1f:6b:6f:e7:e0:a4:26:04:ed:df:2f:c0:da:
                    5f:12:67:d2:f0:b8:9e:6c:c5:cf:c5:4e:c7:24:40:
                    0b:5b:ff:b9:ca:60:1b:91:92:92:5c:a1:8f:04:06:
                    57:b0:b2:ca:82:de:a3:0a:43:c7:16:86:08:0e:9a:
                    28:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4A:B2:DD:A4:5A:82:A5:AE:D0:8C:46:06:88:2C:B1:3C:BC:CA:B0
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235322e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:76:e4:67:b0:b2:cd:81:c7:45:cc:a8:34:7b:d2:88:5e:
         86:e6:c4:93:85:0b:62:88:1f:57:30:42:d0:af:20:2c:58:3b:
         09:d3:88:4b:ed:7c:da:dd:5d:d2:7b:20:ec:13:f8:0c:9f:96:
         10:c8:39:16:68:60:4b:d6:30:ba:d1:07:a9:9a:e6:0c:27:26:
         18:3d:12:9e:a6:2b:f1:c6:7e:87:04:a8:58:66:bd:f4:31:7d:
         71:92:45:c1:6a:57:f1:65:78:d2:fb:58:27:5d:02:28:a6:c3:
         58:fd:65:7e:46:b8:2b:58:89:39:6c:4c:e5:71:10:1b:2b:86:
         95:9a:55:5b:76:44:15:c2:45:84:0d:69:9d:cc:6f:78:65:f2:
         fb:44:52:ad:89:b6:d6:02:e7:b7:29:03:7d:b8:01:41:e5:d3:
         d7:e7:51:38:08:cc:69:94:1e:66:84:39:29:1d:4c:21:05:70:
         56:0e:37:73:8d:a4:77:60:09:d1:d2:05:0a:d4:d8:92:c0:03:
         bf:da:c7:d1:e8:96:a9:98:46:3c:bc:e2:cc:13:e0:b8:0f:9f:
         54:73:4c:b7:3f:82:24:75:fe:1f:4a:36:18:7d:20:0b:12:58:
         67:72:7f:a3:66:30:d4:6d:eb:c4:74:ec:21:0f:3d:36:9e:ab:
         7d:e3:7d:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org