Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235342e302f32342d3234203d3e2037303138.roa
File:                     3230392e3230302e3235342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          NNaxG6SMPC0zlmae3UGwIU5V+FYLCumyyWf/KHDm4oQ=
Subject key identifier:   FE:66:51:D7:6D:81:F2:F7:82:D2:07:8A:7E:7F:0A:80:AE:87:1A:06
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       51D4C58D9F6D66B9C30802184F3E88809AB4DB9E
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235342e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Apr 2022 02:46:06 +0000
ROA not before:           Wed 06 Apr 2022 02:41:06 +0000
ROA not after:            Wed 05 Apr 2023 02:46:06 +0000
asID:                     7018
IP address blocks:        209.200.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d4:c5:8d:9f:6d:66:b9:c3:08:02:18:4f:3e:88:80:9a:b4:db:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Apr  6 02:41:06 2022 GMT
            Not After : Apr  5 02:46:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:5b:97:7b:86:02:a8:9a:a6:b9:2b:2f:7a:
                    f3:d0:36:45:8a:0e:13:15:2f:e1:b8:1a:df:9f:8c:
                    55:62:98:4f:94:52:4f:79:58:c2:72:55:b8:41:35:
                    d9:05:d1:a4:8d:c0:47:55:85:81:fc:56:b7:a1:85:
                    c1:83:e7:94:10:15:e4:49:67:7f:a3:ae:72:a3:01:
                    ee:ab:9e:97:85:70:5d:4e:ab:af:e6:26:20:7f:85:
                    dd:41:1a:4e:d0:e5:40:7f:48:72:b2:92:17:4b:5a:
                    3b:a0:0a:33:fd:f7:b3:de:68:e3:ce:9f:47:a7:87:
                    cd:f2:52:0b:33:a0:08:f0:a5:36:a7:81:fa:86:92:
                    f4:99:e2:81:0e:36:d6:17:a5:5e:6b:f7:0c:20:03:
                    13:72:b2:c0:8d:16:80:45:b8:03:10:73:fa:76:ff:
                    3e:0f:c9:f6:70:85:01:92:31:1c:52:9d:7b:bf:7d:
                    8f:5f:c1:68:ad:f0:de:fd:46:58:d0:15:05:91:ba:
                    41:3d:52:d0:5c:4b:64:5a:d4:75:fd:35:e2:17:8e:
                    36:3e:69:6c:3e:56:19:11:af:e9:55:75:02:12:9d:
                    7a:54:7d:4e:fb:31:b9:25:72:2b:b7:e6:00:9d:cb:
                    d9:02:61:dd:41:f4:78:84:a7:f6:c7:62:c6:0b:89:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:66:51:D7:6D:81:F2:F7:82:D2:07:8A:7E:7F:0A:80:AE:87:1A:06
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235342e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:74:40:ec:a1:a3:15:b6:b7:2f:c4:67:bf:bc:0e:de:8d:3c:
         c7:ee:74:7c:41:96:6d:67:94:bb:2b:e3:5f:b3:4a:c6:ff:9f:
         46:c3:e8:10:38:56:6f:78:1b:7b:fd:9f:c4:e7:d6:43:4c:76:
         6b:52:ce:3d:1a:bc:37:f1:4d:c9:fd:c0:fc:a7:cb:fe:f3:22:
         8b:cf:ea:ec:0b:43:2d:c3:c4:ee:1d:fa:0b:80:92:aa:6d:d7:
         43:91:93:d9:fb:e2:1f:64:36:6d:5e:77:89:89:fa:d5:0e:99:
         66:44:3b:8c:40:d2:ab:10:b2:8a:05:99:bf:33:08:8e:d6:21:
         59:6d:f6:40:78:f4:f6:67:df:f8:68:ff:96:19:d0:87:be:d7:
         e5:54:0e:f7:4d:26:9b:9f:8d:4f:f6:12:78:68:37:cd:68:05:
         ec:a8:90:cf:90:11:ff:14:b1:b0:2e:f5:64:93:35:5d:d2:6e:
         fb:f7:51:51:ea:79:26:3b:c6:ca:ab:1a:5f:6a:84:f8:98:e2:
         60:2f:ea:33:a6:17:48:f5:10:23:2d:ce:2e:ed:8b:d9:9d:32:
         fe:98:17:5a:4e:ac:bb:67:d6:b9:96:a1:07:da:9a:11:de:d6:
         ea:93:c9:1c:8b:7c:f9:84:04:91:93:fc:41:b9:76:c3:c5:45:
         09:36:37:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org