Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232362e302f32342d3234203d3e203631333137.roa
File:                     3231362e39372e3232362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          FzLO9F5lw6BvGCN1rv8ugAIBB009nx3CWD3km8JnM1k=
Subject key identifier:   2E:A8:AA:83:74:26:2E:0E:69:04:6D:EB:F3:2F:ED:34:77:2F:94:1E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       2FA3D18B4877FD7EA4EC348C34F578BDD199905B
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232362e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 22 Dec 2021 11:51:52 +0000
ROA not before:           Wed 22 Dec 2021 11:46:52 +0000
ROA not after:            Wed 21 Dec 2022 11:51:52 +0000
asID:                     61317
IP address blocks:        216.97.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a3:d1:8b:48:77:fd:7e:a4:ec:34:8c:34:f5:78:bd:d1:99:90:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Dec 22 11:46:52 2021 GMT
            Not After : Dec 21 11:51:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:38:2b:bc:e7:65:57:9a:da:e0:97:36:98:
                    6b:15:42:01:12:cd:e9:e7:8b:71:6b:61:db:9a:ed:
                    13:54:a8:27:d3:f1:dd:34:8c:ec:43:f0:59:20:36:
                    00:2f:20:05:b1:ed:a0:2e:11:c8:20:2c:72:2e:42:
                    59:e2:a9:da:5a:1a:de:b4:3e:62:f2:5e:91:7a:51:
                    f2:6a:fa:e0:c7:ae:f5:bd:35:7a:e8:04:65:ff:ed:
                    5c:ed:9d:a4:ed:03:04:2f:c6:75:44:11:bb:f5:a2:
                    77:fa:ea:c4:f3:e1:51:d7:8d:48:d1:24:d5:4b:68:
                    1b:b2:97:39:20:1f:7c:c5:d5:87:dc:6f:23:5a:2f:
                    64:3a:7d:7e:d5:00:74:90:2a:3b:47:1d:1c:dc:3c:
                    e8:93:29:46:a3:07:f3:db:4c:24:b3:c7:1d:27:b1:
                    4f:c4:88:3d:4b:14:ed:f2:eb:51:7a:7f:1b:f8:35:
                    60:dd:58:0c:f1:dc:8b:30:6b:33:09:27:7f:05:d3:
                    58:b6:92:00:df:fe:08:51:f9:69:a0:73:a8:f3:4d:
                    11:44:4e:0b:b3:6d:c7:74:65:04:7d:8d:38:5c:e7:
                    ab:f5:a4:67:90:be:a5:da:d2:78:71:18:26:ef:5a:
                    63:15:f1:09:97:43:30:26:46:b0:50:65:36:21:ce:
                    4f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A8:AA:83:74:26:2E:0E:69:04:6D:EB:F3:2F:ED:34:77:2F:94:1E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:03:b9:62:22:fd:82:b5:e4:01:f2:eb:e6:a0:07:96:91:70:
         71:e2:a9:66:53:d6:18:8e:06:df:09:00:a4:4d:87:dc:36:ec:
         b3:aa:4c:3c:8e:25:50:6a:ad:6b:a0:56:73:98:0a:6b:fa:a2:
         aa:4c:fd:cc:15:28:e3:32:50:09:b5:b6:65:87:89:e7:52:9a:
         53:4d:70:5f:51:24:2c:a8:5e:34:60:58:91:46:90:20:d3:c6:
         36:49:3f:1a:cd:f6:ea:70:5e:57:31:f4:a1:09:6f:76:56:1f:
         e7:c2:eb:25:05:2c:23:02:c9:d3:25:06:b3:16:2b:72:d2:7b:
         7a:af:9e:ec:ac:97:7d:32:ac:2b:06:9e:63:fc:f4:fe:75:9b:
         c0:05:53:90:18:d4:ba:c9:4c:1d:0f:60:c7:38:86:f2:35:50:
         6e:81:a3:ae:94:37:8a:05:21:50:0c:cf:08:87:77:3e:f8:a0:
         7e:c2:de:a4:35:f7:f3:da:e8:e1:ad:a6:c3:47:d4:94:1b:1d:
         20:1f:4f:f6:44:9a:80:78:7a:c8:39:95:85:e1:78:8d:90:cd:
         15:13:93:e9:d5:9b:fe:ed:92:da:d0:d9:e9:9d:b3:5d:c2:2f:
         d3:1c:18:23:1e:c6:ba:c8:28:cb:e2:07:e0:57:e8:31:4f:5a:
         14:73:c7:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org