Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232362e302f32342d3234203d3e203237363330.roa
File:                     3231362e39372e3232362e302f32342d3234203d3e203237363330.roa (raw, json)
Hash identifier:          AtX/fTRr84aIlQIRomtLHLxGwMF7LE2h+rtsG6LVHpA=
Subject key identifier:   6A:B1:77:EB:74:F7:B7:93:9D:68:49:25:92:EE:E7:B1:9F:74:4F:C0
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       123387F2F3FC84377082BDF2F6057E91D6C2232A
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232362e302f32342d3234203d3e203237363330.roa
Signing time:             Wed 02 Mar 2022 15:06:49 +0000
ROA not before:           Wed 02 Mar 2022 15:01:49 +0000
ROA not after:            Wed 01 Mar 2023 15:06:49 +0000
asID:                     27630
IP address blocks:        216.97.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:33:87:f2:f3:fc:84:37:70:82:bd:f2:f6:05:7e:91:d6:c2:23:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar  2 15:01:49 2022 GMT
            Not After : Mar  1 15:06:49 2023 GMT
        Subject: CN=3082010A0282010100C50E5745F8FC9B386823EF2F2DA24F477F426D4A325F86386E38510459B7A9943CB348BDCC0A9ED8870C3E051904ACFC4BF5C7774720895AEA0BA0EA522B2FAD27E4BDC39026418983E152E2E5BC552AB6715A48E6F2CB17EBD6477D4E190E94FC3E2935AF808C09465BB37E69B8BEC1500A9E8B7D941F268ACEA82097D67DD8C7D0B137F8F61F05E8CFA9DE3EEB92041B8380C8987819DC38010647D6C82330EC1C698A5A2788E3E2E269086926EED60950B3638741FC6D128375698DD9174E75AF7FF2D5E7B5F327BB42CA5D8C030EF8B7A71B9E15D21CFD61C034157B4C15876A8B610BA6606AC61962995586533804E5198F0882DC8092A3B7BC5E1313270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:57:45:f8:fc:9b:38:68:23:ef:2f:2d:a2:
                    4f:47:7f:42:6d:4a:32:5f:86:38:6e:38:51:04:59:
                    b7:a9:94:3c:b3:48:bd:cc:0a:9e:d8:87:0c:3e:05:
                    19:04:ac:fc:4b:f5:c7:77:47:20:89:5a:ea:0b:a0:
                    ea:52:2b:2f:ad:27:e4:bd:c3:90:26:41:89:83:e1:
                    52:e2:e5:bc:55:2a:b6:71:5a:48:e6:f2:cb:17:eb:
                    d6:47:7d:4e:19:0e:94:fc:3e:29:35:af:80:8c:09:
                    46:5b:b3:7e:69:b8:be:c1:50:0a:9e:8b:7d:94:1f:
                    26:8a:ce:a8:20:97:d6:7d:d8:c7:d0:b1:37:f8:f6:
                    1f:05:e8:cf:a9:de:3e:eb:92:04:1b:83:80:c8:98:
                    78:19:dc:38:01:06:47:d6:c8:23:30:ec:1c:69:8a:
                    5a:27:88:e3:e2:e2:69:08:69:26:ee:d6:09:50:b3:
                    63:87:41:fc:6d:12:83:75:69:8d:d9:17:4e:75:af:
                    7f:f2:d5:e7:b5:f3:27:bb:42:ca:5d:8c:03:0e:f8:
                    b7:a7:1b:9e:15:d2:1c:fd:61:c0:34:15:7b:4c:15:
                    87:6a:8b:61:0b:a6:60:6a:c6:19:62:99:55:86:53:
                    38:04:e5:19:8f:08:82:dc:80:92:a3:b7:bc:5e:13:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B1:77:EB:74:F7:B7:93:9D:68:49:25:92:EE:E7:B1:9F:74:4F:C0
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232362e302f32342d3234203d3e203237363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:1d:1d:fb:11:82:48:01:90:9e:0b:ed:9d:8a:a6:7b:76:
         8a:48:e8:76:ce:28:fb:80:be:76:83:a5:69:ea:dd:aa:42:40:
         75:5e:2c:e0:be:49:eb:a1:ff:88:63:10:5d:16:ce:52:07:8e:
         a5:7d:35:1b:7c:e2:f4:47:ff:62:8f:1f:bf:f5:13:67:c3:fa:
         b7:2a:83:40:46:37:98:1e:ae:42:81:f7:4c:7d:50:5c:c7:c2:
         e9:d6:06:47:13:48:14:b5:1b:80:47:6a:bb:5b:52:a4:74:54:
         44:12:75:a9:ea:88:66:09:f3:30:83:8e:fc:67:1f:3d:e4:8f:
         3f:9d:b7:d5:97:88:9b:19:f2:07:a5:01:5d:e5:6e:41:47:13:
         78:00:5d:37:52:a3:66:11:2b:2e:7c:ed:d1:56:1c:0e:5a:36:
         f5:df:9a:dc:7e:7a:6b:f1:14:76:7e:2d:ec:30:5c:d9:4a:ac:
         39:b4:7a:4e:0b:f7:00:ce:4d:89:40:1c:2f:b7:05:c1:e3:0a:
         f8:d4:2f:b5:e3:01:e6:8a:dc:51:3d:0e:58:2b:af:36:a7:dc:
         95:16:79:a4:c5:3e:5b:2c:87:0c:bd:40:2a:6a:5d:10:dc:62:
         50:97:ff:fa:78:50:30:66:dc:ca:9f:bb:c7:dd:00:d0:65:d6:
         9a:f1:36:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org