Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231362e302f32322d3234203d3e2031323339.roa
File:                     3231362e3232372e3231362e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier:          3FlijiPHk5vy5MOI8xfInHaxpNM3ztIG6km4plnaY5Y=
Subject key identifier:   E2:C9:3D:E1:D0:60:43:0A:ED:AF:61:73:07:FC:BA:FA:B9:7A:B8:B1
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       1800CF851E114F2364A9D2A199AADDA80498FF88
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231362e302f32322d3234203d3e2031323339.roa
Signing time:             Tue 22 Feb 2022 22:02:55 +0000
ROA not before:           Tue 22 Feb 2022 21:57:55 +0000
ROA not after:            Tue 21 Feb 2023 22:02:55 +0000
asID:                     1239
IP address blocks:        216.227.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:00:cf:85:1e:11:4f:23:64:a9:d2:a1:99:aa:dd:a8:04:98:ff:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 22 21:57:55 2022 GMT
            Not After : Feb 21 22:02:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:e4:bb:3b:17:36:94:e2:4d:d5:a6:86:df:
                    22:c4:88:1b:8e:02:3c:ee:73:49:97:d6:bf:e8:fe:
                    53:38:d9:71:ac:4d:06:0e:54:36:42:ec:45:cd:2d:
                    02:ae:b3:00:18:9a:a2:c2:4d:db:6d:05:99:9c:b1:
                    a5:de:13:ad:f9:bd:44:13:ca:40:81:75:19:d7:02:
                    e9:95:23:a3:ae:77:3d:b8:96:d3:d7:c9:43:ae:f4:
                    30:c8:63:8f:1e:d9:d3:bb:a2:d3:c0:d1:f4:e5:4f:
                    d6:d1:1b:99:12:e0:a3:f3:80:79:ed:04:14:93:16:
                    eb:66:1c:c2:1e:cc:92:a1:94:7d:57:f9:5d:54:e2:
                    98:81:7b:ba:e9:33:38:72:59:7f:28:2b:e2:a0:e8:
                    43:88:40:cb:f1:33:0e:3f:16:76:86:6b:13:53:20:
                    fc:fa:93:8e:2d:45:9d:7e:c0:f5:93:79:f1:79:7d:
                    3f:10:17:f8:af:74:cd:ee:6e:ce:be:ba:f0:d4:5a:
                    de:42:de:ae:e8:7f:25:bd:1b:31:fa:f2:3a:a5:c5:
                    ee:a0:09:b2:e8:b5:85:94:d1:6f:1c:8b:63:34:88:
                    30:7b:0e:3c:86:d0:82:81:2b:6d:7d:3d:15:62:7f:
                    d6:ac:ed:39:38:9c:9c:ef:dd:83:83:c1:bd:db:d8:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C9:3D:E1:D0:60:43:0A:ED:AF:61:73:07:FC:BA:FA:B9:7A:B8:B1
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e3232372e3231362e302f32322d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:08:30:14:70:df:54:4a:9d:d4:09:f4:ea:a7:3d:62:e3:82:
         cc:6d:d3:78:14:81:81:b1:c8:47:89:b9:b7:b0:f6:f8:c8:d9:
         83:3d:ae:90:47:b4:16:6d:c0:b6:c6:a7:49:58:4d:74:89:d5:
         fc:aa:b4:f9:8b:cb:5e:e7:0f:43:2c:f1:cb:d2:7d:bd:0b:79:
         c5:29:7c:25:98:12:ab:d2:45:6b:06:16:52:21:02:09:53:2c:
         c9:8d:4c:be:dd:43:66:03:c0:74:6b:ba:d8:8f:5c:79:3e:89:
         e3:1e:2b:76:74:6c:bd:1c:55:35:3d:3a:9c:3a:e7:a7:3b:2e:
         e2:1f:07:83:01:61:79:e4:7b:05:f8:54:1b:3a:50:5d:f4:9a:
         3d:33:4e:a6:75:c3:21:0c:e9:7a:ec:8e:33:89:54:fb:0f:82:
         0c:2b:8d:8d:32:2b:7a:dd:d7:64:3f:7b:83:bb:c6:3f:50:c4:
         39:39:b8:4b:89:0c:28:f4:06:79:64:5e:c4:3d:78:9a:7a:28:
         c5:2e:dd:fa:7e:8e:87:e7:01:f7:74:4c:34:58:6b:be:0b:08:
         89:85:a4:21:09:da:fd:8c:af:4c:9f:1e:6e:bd:01:dc:fb:1a:
         fb:91:a1:d1:08:c6:ec:2b:f3:23:ec:04:1e:da:1d:ab:96:c6:
         cb:d4:97:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org