Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232352e302f32342d3234203d3e203631333137.roa
File:                     3231362e39372e3232352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          J1GlA5Gl88JCrOTEIgUciPE6dUZS+C1gqRylez5dMfI=
Subject key identifier:   71:10:66:6C:71:E9:08:4A:EE:58:E1:A7:6A:4E:88:D7:F1:22:E0:88
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       3F6DF5BBFE602F31A905247BE1056123B321EFC2
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232352e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 22 Dec 2021 11:51:33 +0000
ROA not before:           Wed 22 Dec 2021 11:46:33 +0000
ROA not after:            Wed 21 Dec 2022 11:51:33 +0000
asID:                     61317
IP address blocks:        216.97.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6d:f5:bb:fe:60:2f:31:a9:05:24:7b:e1:05:61:23:b3:21:ef:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Dec 22 11:46:33 2021 GMT
            Not After : Dec 21 11:51:33 2022 GMT
        Subject: CN=3082010A0282010100B0A12C66E6BB73E218CE81A041F9509FAB8DD04527120CAB11A6DD577286261B16CE759D87E64D920E42AF4BCC8CA751AC19D4FF7E1A68B00CEDD6546DA20BD9044935E5E6F628837106A252D1AFD2FBAE8F37CADEEA8B4E40ACC096B033B0C6A298DD24050F6876E5FEA192729659979BEB203E07C812AD8B2E78D9B6F73B8DDE6B552E047720ACF0C16520670740EB8BA3A0315D3DB808EEF9A0426AF3F50E4900140E6DD2AD7CDF62DC2714AEAEF48B2128D189FBB727A7F343DBC5B3EA66CC1E281293085D3B4287519604579C18D7211E4B1015083D56A5E7EB855FB8CC072D8EE0E5BFE9ABB833238B1EAB98554DD7B7E24091474F5FE1A70AB2E55E6B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:2c:66:e6:bb:73:e2:18:ce:81:a0:41:f9:
                    50:9f:ab:8d:d0:45:27:12:0c:ab:11:a6:dd:57:72:
                    86:26:1b:16:ce:75:9d:87:e6:4d:92:0e:42:af:4b:
                    cc:8c:a7:51:ac:19:d4:ff:7e:1a:68:b0:0c:ed:d6:
                    54:6d:a2:0b:d9:04:49:35:e5:e6:f6:28:83:71:06:
                    a2:52:d1:af:d2:fb:ae:8f:37:ca:de:ea:8b:4e:40:
                    ac:c0:96:b0:33:b0:c6:a2:98:dd:24:05:0f:68:76:
                    e5:fe:a1:92:72:96:59:97:9b:eb:20:3e:07:c8:12:
                    ad:8b:2e:78:d9:b6:f7:3b:8d:de:6b:55:2e:04:77:
                    20:ac:f0:c1:65:20:67:07:40:eb:8b:a3:a0:31:5d:
                    3d:b8:08:ee:f9:a0:42:6a:f3:f5:0e:49:00:14:0e:
                    6d:d2:ad:7c:df:62:dc:27:14:ae:ae:f4:8b:21:28:
                    d1:89:fb:b7:27:a7:f3:43:db:c5:b3:ea:66:cc:1e:
                    28:12:93:08:5d:3b:42:87:51:96:04:57:9c:18:d7:
                    21:1e:4b:10:15:08:3d:56:a5:e7:eb:85:5f:b8:cc:
                    07:2d:8e:e0:e5:bf:e9:ab:b8:33:23:8b:1e:ab:98:
                    55:4d:d7:b7:e2:40:91:47:4f:5f:e1:a7:0a:b2:e5:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:10:66:6C:71:E9:08:4A:EE:58:E1:A7:6A:4E:88:D7:F1:22:E0:88
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:6c:8a:5e:be:11:53:1d:b8:ef:45:cf:90:f0:b4:9c:c7:ac:
         c0:99:0d:85:29:b6:9f:67:3d:45:f8:ac:f2:11:1b:74:67:71:
         22:bf:3a:35:4b:32:cc:e5:ff:df:41:44:18:c9:2a:d8:c1:9a:
         e1:a2:37:e7:fc:93:63:0f:b8:ab:ee:d7:f0:ac:43:b4:97:46:
         40:42:b5:75:c4:d8:29:e9:95:2c:40:98:7f:39:7a:28:f7:2a:
         46:26:dc:0c:1e:02:86:18:01:9f:b4:73:49:a1:19:4b:90:89:
         68:dd:9b:2d:7e:d1:c2:c1:4a:35:2c:30:0b:6c:11:74:c5:2d:
         69:b6:74:e8:ce:02:8e:09:92:e3:38:3e:56:7e:11:68:5c:62:
         13:4a:eb:81:df:5a:ce:2b:ed:b5:b3:0d:b3:f0:87:cd:f6:13:
         c8:80:ee:f8:1d:aa:ff:63:29:80:e0:c2:96:5f:41:bc:c4:8f:
         01:94:85:10:f5:20:fc:f6:c9:9d:b2:81:47:e5:40:7f:1f:1f:
         74:0b:e0:de:9f:97:04:6e:90:27:01:67:a5:fb:ef:2e:a5:54:
         29:10:25:1c:6f:cb:bf:c2:60:ce:3a:af:3c:5b:bd:2c:00:67:
         99:05:bf:af:16:64:90:61:22:2e:dd:89:17:6d:73:cf:0d:4d:
         6c:6d:9a:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org