Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235352e302f32342d3234203d3e2037303138.roa
File:                     3230392e3230302e3235352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          eBU/sgRMDybm9RVl4g3Hb+vyU3Y47KBRpdqlKtHh/b0=
Subject key identifier:   38:D2:0C:DF:D5:6C:4E:43:84:57:26:A3:06:52:BC:36:9F:A8:DE:2E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       113B6AC0989B1094727BB7B46EBE411F3287D090
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235352e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 06 Apr 2022 02:46:13 +0000
ROA not before:           Wed 06 Apr 2022 02:41:13 +0000
ROA not after:            Wed 05 Apr 2023 02:46:13 +0000
asID:                     7018
IP address blocks:        209.200.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3b:6a:c0:98:9b:10:94:72:7b:b7:b4:6e:be:41:1f:32:87:d0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Apr  6 02:41:13 2022 GMT
            Not After : Apr  5 02:46:13 2023 GMT
        Subject: CN=3082010A0282010100D1F37063B000344BB8FFB51EFBE89D9B94104A68E8801ADCCC106F9F5356C79BA534BC2651CC10EF14E005BF1C58D90DF0E34CE2D56FD1233BCE592AD2BBFF6CD424D913A5CCD0D4BBDF1768510EE7C084C960512386C3FD8EFC1A97068AB01049345DF8B9D2A5BE49CB02BAA268D0BE4DA3C52BB6DDA0D5AC7D42259E52B1D40ABF05B11A6A15BE4D0A5513502613742ACE2E2F773C9CCADC21E21623A8B1B5A8D5C35A8E518E6477537CE0D71CAFC813A612EF16A4921FF36578829CABD4D620992E307A6C80852CD56CCC916AF0F4E1A2B1437B4D8A042CC0AF121227549496CD76A557F612BE9095EE616AFC13531C7F99B37D0A27D111E6E5B8227EA0030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:70:63:b0:00:34:4b:b8:ff:b5:1e:fb:e8:
                    9d:9b:94:10:4a:68:e8:80:1a:dc:cc:10:6f:9f:53:
                    56:c7:9b:a5:34:bc:26:51:cc:10:ef:14:e0:05:bf:
                    1c:58:d9:0d:f0:e3:4c:e2:d5:6f:d1:23:3b:ce:59:
                    2a:d2:bb:ff:6c:d4:24:d9:13:a5:cc:d0:d4:bb:df:
                    17:68:51:0e:e7:c0:84:c9:60:51:23:86:c3:fd:8e:
                    fc:1a:97:06:8a:b0:10:49:34:5d:f8:b9:d2:a5:be:
                    49:cb:02:ba:a2:68:d0:be:4d:a3:c5:2b:b6:dd:a0:
                    d5:ac:7d:42:25:9e:52:b1:d4:0a:bf:05:b1:1a:6a:
                    15:be:4d:0a:55:13:50:26:13:74:2a:ce:2e:2f:77:
                    3c:9c:ca:dc:21:e2:16:23:a8:b1:b5:a8:d5:c3:5a:
                    8e:51:8e:64:77:53:7c:e0:d7:1c:af:c8:13:a6:12:
                    ef:16:a4:92:1f:f3:65:78:82:9c:ab:d4:d6:20:99:
                    2e:30:7a:6c:80:85:2c:d5:6c:cc:91:6a:f0:f4:e1:
                    a2:b1:43:7b:4d:8a:04:2c:c0:af:12:12:27:54:94:
                    96:cd:76:a5:57:f6:12:be:90:95:ee:61:6a:fc:13:
                    53:1c:7f:99:b3:7d:0a:27:d1:11:e6:e5:b8:22:7e:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D2:0C:DF:D5:6C:4E:43:84:57:26:A3:06:52:BC:36:9F:A8:DE:2E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3235352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ea:02:b3:75:8d:38:ed:d1:71:6e:20:7c:f5:be:52:a3:d1:
         49:57:3f:9a:be:bc:29:9d:12:d5:20:a9:af:f0:3e:23:2c:67:
         de:6c:bf:51:b3:6e:5d:91:39:5b:91:9c:39:7d:ee:9e:12:27:
         e4:e6:dd:9c:78:e1:73:fb:bb:1f:7d:d4:ae:80:db:a9:c1:b8:
         94:49:0d:32:5f:ea:bc:52:7c:96:2e:54:74:91:01:47:c3:96:
         1b:35:d1:0a:7e:d8:1c:db:1b:bf:65:27:bd:43:b8:b1:65:69:
         fe:36:a0:45:cb:54:1c:90:14:d4:6a:ea:0f:9a:84:fb:e4:e8:
         9e:ec:7d:fc:7e:37:e5:f5:27:4b:81:a7:10:6a:02:70:ba:16:
         bc:6c:a4:18:b2:a4:89:df:4d:44:64:2c:b1:44:aa:08:3f:40:
         eb:dd:85:16:4f:37:87:d2:0a:f8:6d:17:87:77:d1:73:48:2e:
         86:57:a7:4d:0e:e3:02:d1:14:0d:eb:20:e0:44:20:bf:67:e0:
         95:af:7a:3f:fd:65:cd:37:19:2c:f0:88:cf:45:2f:69:86:3d:
         c5:65:a3:2a:83:89:2b:b3:b4:92:73:39:0f:f7:2f:e5:36:71:
         83:ba:3e:2b:dd:e3:1f:c3:71:2c:7a:95:f6:32:4d:59:e6:d0:
         ba:5d:f7:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org