Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa
File:                     3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier:          UFENXypg3nDmz4miYn1vjQ8aL2lYWEbQm++Q5NJYNNQ=
Subject key identifier:   8E:41:FB:50:91:9D:F3:82:77:E5:E7:8F:CB:FA:48:97:B7:7E:47:10
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       589AEFA0C5CC2D578FF6DDABA9A0A86C33FA5207
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa
Signing time:             Mon 25 Oct 2021 12:57:13 +0000
ROA not before:           Mon 25 Oct 2021 12:52:13 +0000
ROA not after:            Mon 24 Oct 2022 12:57:13 +0000
asID:                     1239
IP address blocks:        216.227.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9a:ef:a0:c5:cc:2d:57:8f:f6:dd:ab:a9:a0:a8:6c:33:fa:52:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:13 2021 GMT
            Not After : Oct 24 12:57:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:35:1b:f6:9e:48:bc:26:67:0e:07:4d:72:30:
                    13:d5:6d:3d:16:f1:aa:b7:09:40:f8:ee:66:64:86:
                    ac:10:2e:29:af:ec:84:b7:7b:ed:21:d0:1f:d0:3a:
                    d0:48:fc:89:44:4f:91:0f:a8:8d:e7:bf:dc:e1:dc:
                    e2:6a:0c:02:f8:a2:69:b1:00:84:c5:2c:3d:73:73:
                    5d:64:5e:70:21:5e:80:08:ef:6a:06:43:c4:48:c6:
                    dd:48:39:80:90:56:99:8d:cd:6e:c0:7d:e2:1f:30:
                    a8:b0:74:ae:b4:b0:f3:7f:03:03:ad:50:22:c4:41:
                    cd:64:94:06:a8:86:1b:28:9d:97:ba:92:ef:20:57:
                    0c:2a:64:55:7c:51:21:21:4c:9a:d4:a5:5a:37:db:
                    99:4f:e4:c4:86:d6:34:e4:92:01:f8:8b:f3:1b:fc:
                    7c:09:96:48:35:2c:a4:d4:f4:dd:29:d8:b7:48:39:
                    38:2a:5d:f4:97:79:cf:e7:82:45:be:ae:53:77:d7:
                    ed:44:e0:39:e9:b2:cc:ef:ff:36:20:04:93:fc:a3:
                    cb:ba:ac:37:ee:c0:fd:f4:bd:64:72:a2:43:0e:87:
                    65:ed:d3:10:31:51:47:38:3a:d4:92:f5:b5:e0:58:
                    a1:18:f5:13:3e:e2:c4:2a:a4:41:6e:1f:18:93:58:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:41:FB:50:91:9D:F3:82:77:E5:E7:8F:CB:FA:48:97:B7:7E:47:10
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3230382e302f32322d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:99:f7:85:8c:67:f6:7d:33:f6:28:0f:a1:f2:38:23:c9:c8:
         c6:43:a4:17:17:15:1b:c1:39:e0:df:7d:d2:b8:dd:15:36:0d:
         48:ab:e5:7a:af:97:4b:09:3c:5e:8b:5c:5f:61:05:aa:38:82:
         cd:fe:00:56:8f:f1:28:69:3e:1c:7d:1e:45:6d:36:61:75:a0:
         22:88:23:d0:c3:b8:4a:81:ad:55:d8:3c:52:e5:1c:5b:6d:56:
         08:3d:41:c1:f2:10:a0:15:4c:9f:10:ed:9d:b6:24:ba:cc:63:
         88:3c:12:73:78:11:5e:c0:7b:5e:27:5b:dc:95:07:a2:e3:65:
         d7:52:79:34:10:93:ae:31:9e:b5:71:5a:b1:13:13:89:e6:6d:
         23:fb:da:9d:71:84:07:19:d5:ef:9a:17:f6:27:a1:e5:b2:6d:
         90:51:c6:7a:11:bd:24:20:03:51:33:e0:37:08:36:f1:10:8d:
         d5:f3:b3:31:97:cf:17:d8:76:d7:89:83:0a:0b:bf:54:b1:cb:
         8c:e7:2f:10:0e:e0:94:f5:29:f3:10:de:1d:da:c6:7a:27:71:
         c7:24:c0:71:1e:ed:21:c9:09:eb:4a:1e:d2:00:77:f5:c7:96:
         0b:d7:33:a1:00:1e:27:36:da:a3:95:97:3d:37:f9:3e:76:cc:
         9f:74:b1:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org