Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232372e302f32342d3234203d3e20323130363534.roa
File:                     3231362e39372e3232372e302f32342d3234203d3e20323130363534.roa (raw, json)
Hash identifier:          eu0jsigBDSVgujC6manJ2yk5zefS06hC6z2JSzgP+rA=
Subject key identifier:   ED:23:D9:3B:4C:D2:58:A2:04:24:16:29:DE:37:6D:E7:B8:C1:C8:18
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       56F34AF461CCBC4E9D679C9FE489E860353F30D2
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232372e302f32342d3234203d3e20323130363534.roa
Signing time:             Tue 15 Mar 2022 08:43:49 +0000
ROA not before:           Tue 15 Mar 2022 08:38:49 +0000
ROA not after:            Tue 14 Mar 2023 08:43:49 +0000
asID:                     210654
IP address blocks:        216.97.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f3:4a:f4:61:cc:bc:4e:9d:67:9c:9f:e4:89:e8:60:35:3f:30:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar 15 08:38:49 2022 GMT
            Not After : Mar 14 08:43:49 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:65:f9:fd:d0:e6:10:b6:6d:c6:b6:98:64:67:
                    69:33:68:fd:7a:bb:7f:e0:98:5b:e1:02:dd:ab:63:
                    3e:03:b1:ea:01:ad:a3:98:85:31:a3:5f:17:85:5c:
                    ff:38:21:fb:bf:fa:58:48:61:80:51:b4:47:52:8f:
                    94:9f:53:fe:ad:0f:5f:6f:8c:72:9c:8c:2b:6f:7b:
                    9c:24:f3:56:4f:1b:aa:70:20:01:5a:62:f1:14:25:
                    51:f2:2a:21:d8:6f:0c:f0:24:d5:25:65:19:fb:ac:
                    1c:45:2e:1d:0b:a5:ac:0c:2d:fe:2b:ab:ed:59:b1:
                    8f:f3:68:00:35:99:7a:4f:45:35:16:bd:c7:5e:aa:
                    50:e7:8c:fc:05:bf:99:20:b0:c0:d8:60:5c:17:95:
                    d4:48:1a:64:8b:29:06:65:b6:73:94:e2:15:04:e9:
                    04:82:3b:11:b7:ad:64:b8:ca:a1:e8:4c:5c:dc:66:
                    3d:cd:0c:5c:f0:12:83:62:96:7b:ce:6e:f8:92:73:
                    32:e7:ef:f3:c4:e8:ab:53:b5:09:97:a8:6f:bd:a4:
                    18:5e:b4:85:f0:13:d1:39:50:b1:46:e0:e6:bb:2f:
                    b8:94:d2:77:3a:02:1a:7d:fc:52:c1:c2:62:40:55:
                    70:38:1d:51:55:83:fd:be:6e:74:fc:c3:88:74:e0:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:23:D9:3B:4C:D2:58:A2:04:24:16:29:DE:37:6D:E7:B8:C1:C8:18
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232372e302f32342d3234203d3e20323130363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:bc:c5:5a:af:52:0d:41:52:38:ab:27:ae:6f:88:9a:07:
         a4:e4:10:65:f3:17:f4:f7:f1:dc:5d:fd:ac:8d:ce:92:b6:4b:
         58:9a:96:60:25:e4:20:dc:97:f9:73:b8:da:37:65:e6:8f:86:
         3b:06:a1:d8:7f:8a:18:e7:bb:5e:a4:48:1a:2c:7e:73:1d:7a:
         51:23:bb:ca:56:34:7d:54:18:b9:44:28:f3:51:c6:3c:a1:5a:
         cb:7f:45:9e:bf:27:b7:50:00:bf:0c:bd:ef:7a:59:82:79:14:
         3a:0a:49:f3:68:94:1a:bc:43:10:6b:15:89:12:8b:bd:a7:b3:
         09:11:41:f0:71:58:cc:d5:f9:d9:f3:7a:d7:92:c7:fb:af:72:
         f5:c6:dc:84:ec:a6:44:7c:70:93:b6:3c:90:4c:30:6a:f8:3a:
         84:a6:64:bd:25:8c:d1:aa:c0:8e:8f:46:aa:89:9a:c5:ff:9b:
         0d:3e:c8:1a:45:88:26:76:b6:f3:43:c8:94:1c:5d:bd:4b:9b:
         bb:90:0b:1b:48:b6:54:01:89:57:70:35:85:02:bb:38:dd:d5:
         ba:42:70:bc:3a:a8:87:aa:75:dc:d6:5d:b5:a5:bf:26:90:b0:
         b0:f6:36:75:ef:09:8a:dd:5f:af:eb:8b:5e:a1:34:3f:03:2b:
         d9:10:c7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org