Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231342e302f32342d3234203d3e203631333137.roa
File:                     3231362e3232372e3231342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          r6VLHBB6lLSqMXLtQvxvdMcR56ftzLT1ho0NeQRE7XE=
Subject key identifier:   DE:3C:9E:DE:DF:AE:8A:0C:95:3C:C7:87:F5:A9:7A:9F:74:E1:E5:AC
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       0A872DC4632B81B720EC60DB182C3A1FCCCEADBD
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231342e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 27 Jun 2022 15:21:07 +0000
ROA not before:           Mon 27 Jun 2022 15:16:07 +0000
ROA not after:            Mon 26 Jun 2023 15:21:07 +0000
asID:                     61317
IP address blocks:        216.227.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:87:2d:c4:63:2b:81:b7:20:ec:60:db:18:2c:3a:1f:cc:ce:ad:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 27 15:16:07 2022 GMT
            Not After : Jun 26 15:21:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:e3:0d:69:17:96:00:83:83:a7:c5:b6:13:
                    48:b8:9e:2f:a1:66:2e:a9:55:f6:6d:4d:7a:93:4c:
                    29:a4:34:46:43:f7:10:47:99:30:0c:ac:f4:a6:10:
                    b7:8d:c5:94:27:28:a6:ee:9e:07:f3:7b:07:ca:5f:
                    ba:b1:7e:a3:29:ab:65:4c:3a:0f:27:7b:77:9a:47:
                    b6:53:0c:b2:4f:b3:fb:d7:66:6e:65:53:ef:e0:f8:
                    62:8d:fe:f4:f0:b0:85:fb:66:bc:75:9b:da:7d:a2:
                    94:53:63:f6:a9:41:3b:6d:53:80:63:d1:7a:41:fc:
                    2f:88:6c:30:d5:c4:84:ac:d8:c6:9e:3c:ba:ab:b2:
                    aa:5b:17:19:2f:d6:20:61:bd:41:e4:dd:7a:87:4c:
                    ec:c6:75:50:ba:7e:40:b5:7f:00:40:dd:43:df:f2:
                    da:8f:59:65:28:ef:25:eb:c4:81:0a:c9:8c:c8:ef:
                    cb:c9:91:e1:49:4f:ce:6c:23:1d:bc:d8:69:2c:81:
                    25:ab:7d:34:95:ad:59:70:b2:21:56:8e:94:a5:78:
                    58:85:7b:3d:be:4e:89:f6:5d:01:e1:95:2e:2f:d4:
                    4c:78:23:5a:a9:0c:50:3c:ca:f2:c7:b4:6b:45:6c:
                    08:cf:f0:21:2e:19:11:42:2b:65:70:9b:6d:c1:0b:
                    ee:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:9E:DE:DF:AE:8A:0C:95:3C:C7:87:F5:A9:7A:9F:74:E1:E5:AC
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:a8:de:44:05:1d:5b:be:9c:b1:fb:a6:4f:8b:97:84:b1:0e:
         e5:20:27:b6:30:80:9a:36:25:a9:8a:6f:0d:e0:5f:7c:59:e6:
         0c:01:e5:4c:57:96:0c:e7:dc:cf:21:d7:a2:eb:ae:5a:2f:af:
         00:3a:9b:b9:d0:e1:d1:e9:21:be:7f:f5:26:a4:f8:d6:7e:49:
         c4:33:73:14:9d:b5:74:6d:f2:a2:26:c9:91:13:4f:f5:31:ff:
         83:27:bc:db:d3:fc:e9:62:b1:23:d4:7e:5f:9d:95:6d:26:2a:
         c8:15:47:db:b0:e8:c4:75:1c:e1:a8:b0:96:be:fc:4a:86:de:
         f8:23:a3:90:bf:87:09:48:de:ad:3a:43:f6:97:ed:4b:32:d1:
         cb:f5:86:68:30:4b:8e:53:a5:51:36:88:fd:aa:cd:80:d1:83:
         1e:e1:18:56:0f:ee:bb:c6:9c:80:86:bd:36:3e:fd:c3:ce:3e:
         fe:ae:b5:6f:4e:18:b1:c4:49:af:9b:d2:4e:5c:b3:9b:05:e8:
         2a:d6:48:11:d9:3c:5f:27:25:d9:15:4e:84:f5:38:99:6a:97:
         91:8a:c1:e4:4a:22:55:33:1d:94:33:83:f8:5b:3a:fc:00:59:
         de:60:3d:28:6c:fa:e2:1d:df:8d:46:0d:9a:ce:b3:b6:d0:6a:
         16:36:57:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org