Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235332e302f32342d3234203d3e2037303138.roa
File:                     3230392e3230302e3235332e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          o4DMDHTWi3aKtFOcTv/wJJkRZJUr0KpBES/dVbilaoQ=
Subject key identifier:   DF:73:DB:8B:3A:79:E3:3E:D5:C7:9F:2D:16:9A:C4:5D:EA:C5:5F:35
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       7FB801BBED0A08FF089772121032556B13C15DFD
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235332e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Apr 2022 02:45:54 +0000
ROA not before:           Wed 06 Apr 2022 02:40:54 +0000
ROA not after:            Wed 05 Apr 2023 02:45:54 +0000
asID:                     7018
IP address blocks:        209.200.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b8:01:bb:ed:0a:08:ff:08:97:72:12:10:32:55:6b:13:c1:5d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Apr  6 02:40:54 2022 GMT
            Not After : Apr  5 02:45:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:6b:f8:5e:d4:d2:1f:59:98:04:f9:17:e3:
                    d0:25:6c:aa:56:00:77:2d:d2:fb:d5:b6:b8:c5:a1:
                    d8:f1:e7:5f:3f:ea:98:17:50:b6:1c:03:7b:e9:18:
                    8a:7c:8d:7c:5c:11:75:c6:cb:46:70:2f:c2:1f:41:
                    69:dc:ba:d3:4c:b8:eb:b7:74:ab:1c:95:83:55:bb:
                    6b:32:a4:5f:94:7f:2c:f4:5f:61:26:d6:57:4e:ba:
                    b7:5f:a2:e4:0a:ed:61:06:a4:57:34:bc:e0:e1:ae:
                    09:56:06:65:f6:94:79:86:8f:77:3a:d7:53:44:27:
                    76:37:86:55:e0:4e:14:59:55:c9:09:62:7d:54:41:
                    b3:41:1c:e8:75:6e:64:bf:3b:1e:93:20:f5:d2:93:
                    73:b4:b1:37:2c:1a:98:12:5a:12:c2:f0:c7:87:15:
                    2e:29:f8:59:19:50:b5:ea:db:fe:72:a1:7c:19:51:
                    a3:4b:d6:15:b1:98:39:53:ae:d3:4a:c4:05:1b:ae:
                    58:e7:bb:b1:70:1a:3e:de:c1:b9:e9:b2:e0:80:cf:
                    c5:1c:19:70:fc:9b:c4:63:f6:d4:df:98:27:ab:06:
                    db:80:c1:1f:0a:5a:07:00:bb:91:fc:df:8f:db:07:
                    c4:00:c5:c3:a2:ce:cc:9c:99:64:61:9a:34:af:2c:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:73:DB:8B:3A:79:E3:3E:D5:C7:9F:2D:16:9A:C4:5D:EA:C5:5F:35
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235332e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:b6:c4:d4:0e:ad:80:ac:94:e6:d5:af:0a:49:b0:d6:80:88:
         f6:87:8a:44:7c:7f:8e:c3:00:a5:4d:d1:de:8a:1c:ae:59:33:
         42:72:ac:4e:0b:f6:53:06:6b:df:c2:7a:34:9a:f5:1b:a0:09:
         5b:48:14:45:ed:36:cd:b1:e5:3a:23:0e:f8:de:2c:bd:fb:13:
         73:4b:25:53:de:2e:31:71:2e:22:6a:2a:0e:43:23:35:9e:2e:
         f2:07:2a:e5:55:5f:bf:cc:a2:1e:c6:d3:80:6a:5f:c5:f6:10:
         c6:26:92:2a:a7:49:b5:93:14:ef:ef:b9:d0:23:87:f2:14:84:
         0c:bb:be:46:f2:87:10:a8:12:73:9f:36:9b:19:d1:39:f5:8f:
         4a:af:b9:b3:62:91:f9:30:e9:84:3c:90:85:33:4c:13:fd:01:
         27:a7:a9:33:ac:e9:39:7e:01:27:21:46:c7:0d:18:c1:98:21:
         c4:0a:59:0a:2c:9d:fa:79:81:79:43:f1:c3:1b:36:63:9c:39:
         c8:50:dc:7c:52:04:ef:e0:0f:37:c2:45:21:89:85:6f:7c:f1:
         33:b5:10:0f:70:fa:12:b3:69:d6:e3:d7:6c:58:7f:ef:6f:38:
         70:4b:02:12:96:75:39:1b:9c:01:65:cd:e4:9f:9e:b5:44:69:
         b0:a7:00:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org