Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3230382e302f32322d3234203d3e203631333137.roa
File:                     3231362e3232372e3230382e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          N488wQiwcbtkjJwMldoTnG6DEXVWolrQxeE0BOqwFus=
Subject key identifier:   26:4B:3E:FC:EC:4C:CE:56:5F:06:6D:DE:04:A9:ED:AC:85:A6:6A:DC
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       5EC4B38E8D0D3EE15A2D3E0AA351C86D5F657BA9
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3230382e302f32322d3234203d3e203631333137.roa
Signing time:             Wed 27 Oct 2021 10:34:31 +0000
ROA not before:           Wed 27 Oct 2021 10:29:31 +0000
ROA not after:            Wed 26 Oct 2022 10:34:31 +0000
asID:                     61317
IP address blocks:        216.227.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c4:b3:8e:8d:0d:3e:e1:5a:2d:3e:0a:a3:51:c8:6d:5f:65:7b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 27 10:29:31 2021 GMT
            Not After : Oct 26 10:34:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:36:c7:13:fe:41:03:d8:6f:30:fc:9d:a4:
                    c4:67:d1:72:52:12:2a:44:fb:f2:96:14:e0:f7:0a:
                    4d:5a:d5:12:c4:ac:7e:34:f2:f7:b1:c8:f2:ef:56:
                    56:43:1d:fd:91:5b:d7:9d:cb:d2:29:3d:bf:45:f6:
                    40:5e:4c:6b:d8:4f:78:8d:a3:f6:39:d9:2d:67:f1:
                    e2:6f:39:07:2b:a0:f0:f5:1b:53:83:62:b7:6f:68:
                    cd:ea:51:29:19:ea:72:90:6a:12:bb:4a:52:e2:c9:
                    6e:12:56:b0:27:52:ca:fc:e4:97:20:c4:cc:0f:19:
                    7a:41:37:e3:70:a7:e3:6f:10:38:31:12:ea:de:c0:
                    19:13:60:6f:18:7b:4c:0b:30:5d:ca:8b:0f:12:9b:
                    4f:a6:7d:2c:65:b8:b7:be:c8:ae:0e:60:d5:f1:16:
                    99:2f:5c:15:75:b0:f6:63:40:47:5c:7e:7b:6d:4d:
                    75:bf:2c:67:4e:95:a7:b1:7e:5a:62:fa:e4:33:e9:
                    d6:29:10:a3:ce:3e:6d:e7:ad:b3:12:7b:b2:4a:29:
                    74:65:a9:8b:cd:b8:08:04:d5:7a:48:4e:14:9c:d6:
                    64:71:be:79:41:f8:4d:18:c1:0a:37:e6:80:cb:a6:
                    80:47:9a:c9:7d:6a:ff:4e:0f:18:fb:c9:07:65:92:
                    c6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:3E:FC:EC:4C:CE:56:5F:06:6D:DE:04:A9:ED:AC:85:A6:6A:DC
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3230382e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:c2:da:aa:60:5a:be:fb:26:c9:b3:ce:58:37:8f:f9:b1:7f:
         42:dc:7a:a9:2e:3d:2d:d0:1c:e1:2a:c2:fa:d9:51:f8:d5:2f:
         21:c5:9f:76:ac:7c:e4:04:1e:bf:12:1c:c3:bc:da:2d:09:4d:
         02:f5:e4:1e:72:30:70:a4:26:91:f7:09:3b:6e:d6:12:68:0d:
         16:e9:be:7e:42:8e:2d:a6:2d:3b:b2:45:33:58:c5:59:44:f7:
         ad:6f:3b:23:c2:d2:4e:ab:d4:32:5a:92:f6:a3:ce:6c:6a:7a:
         b9:ce:0f:67:91:c5:6e:b1:95:0d:f8:7e:98:e7:74:25:76:e9:
         2b:9c:a7:04:d4:6d:af:8a:7a:77:5b:3f:18:93:ae:a6:f8:f4:
         af:7f:39:3e:82:3b:18:fe:56:3e:95:f1:ed:79:71:c2:b7:8f:
         ed:7a:f7:38:dd:66:46:ca:e7:d7:02:b0:7e:0a:c7:d8:d6:c1:
         dc:de:fb:9d:a3:a9:93:12:d6:b6:6f:b4:72:9c:75:5b:b8:ff:
         03:0e:32:3c:50:5b:15:e6:e0:41:62:fc:57:a2:16:51:2c:b6:
         a9:19:94:33:15:4f:f3:7d:53:0c:47:c8:f3:a7:09:70:f7:0e:
         86:09:42:6f:5e:d0:d2:17:98:62:3a:b4:73:04:26:dc:ab:2a:
         04:e2:b7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org