Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232342e302f32342d3234203d3e203631333137.roa
File:                     3231362e39372e3232342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +o99AIur/vSZK+3W6V1NVgRzv1NgYX0X2HOusrmwkh8=
Subject key identifier:   6E:DD:24:D8:A7:13:D5:74:24:D4:88:CE:DB:07:86:B8:25:B0:B1:EE
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       792FFF501C8164AE2A7AB31D89983F70F4BFE4CA
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232342e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 22 Dec 2021 11:51:01 +0000
ROA not before:           Wed 22 Dec 2021 11:46:01 +0000
ROA not after:            Wed 21 Dec 2022 11:51:01 +0000
asID:                     61317
IP address blocks:        216.97.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2f:ff:50:1c:81:64:ae:2a:7a:b3:1d:89:98:3f:70:f4:bf:e4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Dec 22 11:46:01 2021 GMT
            Not After : Dec 21 11:51:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:b4:cd:5f:fa:4a:6a:a0:4d:34:07:92:54:
                    18:15:f9:63:4c:ac:39:10:16:de:ae:e4:93:28:a5:
                    80:9a:ec:17:56:aa:69:68:52:38:61:e0:57:7b:bc:
                    b8:43:eb:3a:d9:c0:56:36:22:d9:c2:29:2b:af:a7:
                    09:23:c4:8f:5d:53:91:f0:a8:36:fc:6c:3f:cc:ea:
                    f5:e2:8f:41:1e:e1:94:c7:3a:19:1e:22:08:b0:0e:
                    6d:d3:e0:2c:87:22:3d:ab:f9:f8:1b:d8:c0:e3:ae:
                    b4:e7:d7:6a:9f:e9:9d:b6:22:0d:e3:0a:87:28:fa:
                    87:4d:a4:a2:88:0b:fc:5c:79:da:76:f5:8f:6b:4b:
                    b5:3f:b0:92:70:e6:c1:e4:a0:7b:3c:2f:93:cc:49:
                    8f:d4:e9:11:69:80:32:be:24:6d:3f:27:33:c2:a9:
                    b4:7d:c0:86:41:72:c3:d2:04:95:55:a9:8b:ec:a8:
                    25:4f:db:44:7d:5e:57:10:b4:cb:2c:50:98:e9:fd:
                    18:51:2b:34:f6:5f:4b:1f:ab:a5:4e:ca:81:e3:17:
                    7a:28:3f:ec:86:95:a1:06:40:af:8b:1a:26:36:e7:
                    92:cf:2b:24:36:75:25:c3:3f:14:1f:f7:ed:23:cc:
                    2d:70:e5:c8:df:ac:3a:63:b5:92:00:a0:cd:c8:fc:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DD:24:D8:A7:13:D5:74:24:D4:88:CE:DB:07:86:B8:25:B0:B1:EE
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:5b:78:e0:ef:45:10:b6:c5:63:69:c8:70:2f:65:0c:04:e7:
         f0:5d:93:a7:aa:a5:8d:b0:ca:39:e4:18:f4:6b:86:f1:4a:02:
         c1:d7:e8:10:29:d5:8f:24:c4:6a:50:97:ea:50:1a:ee:2d:be:
         e2:d7:94:02:26:b8:09:c0:e9:6e:dc:70:90:25:ee:f6:98:4d:
         43:48:83:a9:f0:9f:11:29:3b:49:46:65:ca:15:cb:87:d9:15:
         22:73:20:47:54:30:3a:90:46:e5:e0:8a:54:a1:da:8c:f4:25:
         6b:90:cd:27:13:a0:25:a4:33:fd:ad:3a:ae:a8:97:41:11:69:
         d1:75:c8:e2:51:5b:e4:81:8d:ff:e6:47:4f:ba:3d:fe:31:82:
         fd:17:33:64:9d:74:97:30:2b:83:9e:6d:bf:c5:83:b5:25:5d:
         9b:de:63:b8:f1:e5:b5:6d:c6:5a:ae:b6:ca:4d:65:a0:d5:3b:
         c4:76:aa:9c:90:96:b4:62:ad:fd:73:3c:05:ba:f1:20:ee:e6:
         5b:0a:e2:3a:17:4a:ac:6e:17:17:5b:ff:60:72:9d:07:62:95:
         d5:54:3b:c8:de:84:e5:6a:1a:4f:ee:5c:99:d2:5c:58:dd:cd:
         12:6b:13:9f:f1:d0:81:39:6d:3b:4f:5c:f8:3b:5a:2f:21:75:
         cc:7c:b5:dc
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUeS//UByBZK4qerMdiZg/cPS/5MowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMTEyMjIxMTQ2MDFaFw0yMjEyMjExMTUxMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzhDQ0I0Q0Q1RkZBNEE2QUEw
NEQzNDA3OTI1NDE4MTVGOTYzNENBQzM5MTAxNkRFQUVFNDkzMjhBNTgwOUFFQzE3
NTZBQTY5Njg1MjM4NjFFMDU3N0JCQ0I4NDNFQjNBRDlDMDU2MzYyMkQ5QzIyOTJC
QUZBNzA5MjNDNDhGNUQ1MzkxRjBBODM2RkM2QzNGQ0NFQUY1RTI4RjQxMUVFMTk0
QzczQTE5MUUyMjA4QjAwRTZERDNFMDJDODcyMjNEQUJGOUY4MUJEOEMwRTNBRUI0
RTdENzZBOUZFOTlEQjYyMjBERTMwQTg3MjhGQTg3NERBNEEyODgwQkZDNUM3OURB
NzZGNThGNkI0QkI1M0ZCMDkyNzBFNkMxRTRBMDdCM0MyRjkzQ0M0OThGRDRFOTEx
Njk4MDMyQkUyNDZEM0YyNzMzQzJBOUI0N0RDMDg2NDE3MkMzRDIwNDk1NTVBOThC
RUNBODI1NEZEQjQ0N0Q1RTU3MTBCNENCMkM1MDk4RTlGRDE4NTEyQjM0RjY1RjRC
MUZBQkE1NEVDQTgxRTMxNzdBMjgzRkVDODY5NUExMDY0MEFGOEIxQTI2MzZFNzky
Q0YyQjI0MzY3NTI1QzMzRjE0MUZGN0VEMjNDQzJENzBFNUM4REZBQzNBNjNCNTky
MDBBMENEQzhGQzM0MzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyMy0zV/6SmqgTTQHklQYFfljTKw5EBberuSTKKWAmuwXVqppaFI4
YeBXe7y4Q+s62cBWNiLZwikrr6cJI8SPXVOR8Kg2/Gw/zOr14o9BHuGUxzoZHiII
sA5t0+AshyI9q/n4G9jA466059dqn+mdtiIN4wqHKPqHTaSiiAv8XHnadvWPa0u1
P7CScObB5KB7PC+TzEmP1OkRaYAyviRtPyczwqm0fcCGQXLD0gSVVamL7KglT9tE
fV5XELTLLFCY6f0YUSs09l9LH6ulTsqB4xd6KD/shpWhBkCvixomNueSzyskNnUl
wz8UH/ftI8wtcOXI36w6Y7WSAKDNyPw0OQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FG7dJNinE9V0JNSIztsHhrglsLHuMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMxMzYyZTM5
MzcyZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADYYeAwDQYJKoZIhvcNAQELBQADggEBADlbeODvRRC2xWNpyHAvZQwE
5/Bdk6eqpY2wyjnkGPRrhvFKAsHX6BAp1Y8kxGpQl+pQGu4tvuLXlAImuAnA6W7c
cJAl7vaYTUNIg6nwnxEpO0lGZcoVy4fZFSJzIEdUMDqQRuXgilSh2oz0JWuQzScT
oCWkM/2tOq6ol0ERadF1yOJRW+SBjf/mR0+6Pf4xgv0XM2SddJcwK4Oebb/Fg7Ul
XZveY7jx5bVtxlqutspNZaDVO8R2qpyQlrRirf1zPAW68SDu5lsK4joXSqxuFxdb
/2BynQdildVUO8jehOVqGk/uXJnSXFjdzRJrE5/x0IE5bTtPXPg7Wi8hdcx8tdw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org