Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231322e302f32322d3232203d3e203439393939.roa
File:                     3231362e3232372e3231322e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          C7ZYvvltR1Eb95+83FQS89+rEAhy5sWfFN/q93tP2bg=
Subject key identifier:   D3:6F:45:56:22:4F:D3:FB:0F:8E:F0:F2:24:9D:35:9F:C5:4E:30:A0
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       7197F3DA5AF797535FEE7AA6327E2B3185A634DA
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231322e302f32322d3232203d3e203439393939.roa
Signing time:             Wed 06 Apr 2022 00:49:27 +0000
ROA not before:           Wed 06 Apr 2022 00:44:27 +0000
ROA not after:            Wed 05 Apr 2023 00:49:27 +0000
asID:                     49999
IP address blocks:        216.227.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:97:f3:da:5a:f7:97:53:5f:ee:7a:a6:32:7e:2b:31:85:a6:34:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Apr  6 00:44:27 2022 GMT
            Not After : Apr  5 00:49:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:f3:9b:fa:62:31:d3:e5:04:1c:ed:02:27:
                    ff:1c:4e:cf:b3:4b:e1:34:3d:c6:10:26:e0:22:50:
                    82:ee:c6:86:d2:10:32:f7:ad:09:5c:e9:5f:07:7e:
                    de:94:96:2c:31:0e:26:46:99:de:34:d7:05:0d:bd:
                    da:bc:65:14:bf:6c:c5:fc:45:51:df:60:42:05:59:
                    3d:49:11:9b:76:78:ae:4e:10:3f:00:2d:af:63:43:
                    33:45:5a:b2:08:72:51:1e:d9:c0:15:11:35:12:8c:
                    74:02:cc:55:97:c3:c5:5e:1e:93:96:03:6e:db:3c:
                    8b:a0:ca:3a:5a:02:10:52:b7:3c:56:2f:0e:1c:22:
                    bb:f1:7d:d9:d3:7a:02:99:57:4c:24:95:20:35:0d:
                    9d:90:e9:7b:69:2e:8f:bb:3b:75:4d:6a:d3:0c:d8:
                    78:81:42:b4:ee:e9:e0:b7:25:b0:57:32:dd:6e:90:
                    59:04:06:cb:5b:2b:b5:d7:a9:9c:2f:bf:6c:f3:30:
                    fc:8e:d3:a8:a2:a2:c0:cc:14:8f:bd:9f:74:93:00:
                    eb:0b:53:bb:7d:63:af:62:44:19:ac:eb:7a:e0:05:
                    5d:5b:38:5b:ed:36:08:bb:a3:6e:ad:21:39:d5:7a:
                    9b:9f:ef:49:d5:36:9e:2c:9d:2c:10:e5:95:6b:89:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:45:56:22:4F:D3:FB:0F:8E:F0:F2:24:9D:35:9F:C5:4E:30:A0
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231322e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:0b:12:56:08:72:e3:e9:50:3c:40:7a:e3:4e:de:ec:87:
         7c:4e:60:11:11:c8:67:d9:28:4a:cb:0b:08:16:1f:cd:81:4d:
         49:b2:7a:8c:d1:23:89:81:90:c1:a5:18:a4:81:c7:6d:e1:e3:
         3e:41:4d:07:09:81:51:cb:22:66:2f:fb:fa:a4:24:df:24:bf:
         af:57:61:4e:81:d4:bd:33:1f:54:e4:ae:b6:a8:7b:8c:eb:f7:
         37:22:d8:4e:43:a1:1d:c0:34:00:68:21:c9:71:72:1f:be:a1:
         09:8f:c9:54:8c:b9:55:55:18:35:28:29:7d:80:1a:40:07:21:
         79:ca:fc:fa:1a:d0:81:33:9d:f2:9f:35:e7:77:6b:6a:7e:90:
         30:f2:cc:02:af:dc:08:a1:39:83:57:1f:65:62:7c:36:91:c4:
         09:4a:a3:47:84:29:a4:09:da:8c:9e:2d:ae:48:d2:87:67:91:
         3d:c1:d2:b7:9f:25:e6:43:9b:c8:be:ad:77:88:fe:9d:be:0d:
         51:65:07:f5:ad:f4:83:e3:f6:ae:7f:41:75:06:d8:74:b2:3c:
         0e:17:b7:81:a0:8c:4c:db:6f:95:0b:92:68:9f:fe:ed:fb:fe:
         51:48:a9:33:7e:0c:5f:57:27:68:41:72:8e:a6:66:b7:60:01:
         b6:bc:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org