Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232372e302f32342d3234203d3e203631333137.roa
File:                     3231362e39372e3232372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          dXVY+OiNWZYbVJRjofV9uWXWlOEKk4UdUmjk1BFCHeM=
Subject key identifier:   05:C0:BE:6D:5B:D1:53:5A:FC:08:79:82:DE:B4:47:E3:60:1D:EA:6D
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       084828B00B0B4887F85F2D7402729C16CB4B6A9C
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232372e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 22 Dec 2021 11:52:06 +0000
ROA not before:           Wed 22 Dec 2021 11:47:06 +0000
ROA not after:            Wed 21 Dec 2022 11:52:06 +0000
asID:                     61317
IP address blocks:        216.97.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:48:28:b0:0b:0b:48:87:f8:5f:2d:74:02:72:9c:16:cb:4b:6a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Dec 22 11:47:06 2021 GMT
            Not After : Dec 21 11:52:06 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:87:6f:40:79:4a:76:b5:34:e5:6f:1e:3a:
                    38:db:95:b5:8e:41:4e:47:2c:a7:56:c5:b1:23:7a:
                    eb:17:d2:b8:21:1e:74:ed:2a:b3:25:db:8c:9a:0b:
                    03:3e:64:05:37:f8:7a:88:7b:5b:58:a3:f0:0c:73:
                    24:ca:5c:3b:25:a1:e3:0d:16:d6:a1:ec:8c:d1:0c:
                    34:99:ed:11:ff:60:02:9d:f6:f4:35:20:e2:80:68:
                    01:94:9e:61:4e:47:ce:40:9d:86:21:a4:c1:7c:22:
                    3a:36:02:71:ae:8a:35:0f:62:3e:5d:53:dd:81:b5:
                    e5:e3:b2:57:0f:cd:ee:26:45:c8:f1:13:42:07:23:
                    c1:21:f2:25:fe:c5:ea:2e:a4:c5:67:8f:59:d1:a5:
                    24:cc:18:20:6b:d4:65:74:6c:67:1d:81:a2:8d:ae:
                    ad:ab:1b:7f:f2:34:35:b8:7d:88:67:be:c3:0c:fe:
                    2d:b7:f5:86:cc:00:0a:6b:e8:b2:84:24:35:82:45:
                    2b:0c:8f:42:06:07:28:21:ea:42:66:a1:2e:43:5d:
                    d6:8a:a3:22:91:4d:29:7b:97:8b:73:10:9e:7c:a1:
                    5d:72:42:d1:08:ca:c6:07:7f:62:d8:d8:23:c5:82:
                    d7:d2:64:72:9a:90:e0:b8:24:df:40:f7:67:9c:29:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:BE:6D:5B:D1:53:5A:FC:08:79:82:DE:B4:47:E3:60:1D:EA:6D
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:99:6c:cc:ba:17:10:42:70:8e:ff:1d:55:28:96:da:33:9b:
         91:e6:fc:2d:8e:d6:b3:6b:8f:82:21:66:3a:a9:6a:3e:b4:b3:
         ce:0d:31:b5:6e:ad:ca:cd:ff:15:14:ca:b1:7f:de:41:81:2a:
         9b:71:2b:43:56:84:db:2a:2c:22:28:fe:74:39:21:66:62:23:
         98:6c:47:87:6e:49:0b:67:b8:b7:f0:56:7b:58:d4:b9:04:3c:
         9c:c6:6a:c2:50:12:db:1a:6c:c5:25:61:14:d4:85:71:c6:37:
         ab:34:c1:86:2f:12:e3:1e:b6:db:52:2a:0d:f8:bc:4b:92:a4:
         8e:63:26:35:f8:79:a2:d6:12:2d:e4:0d:fd:ba:17:69:44:cc:
         8e:c5:4b:e9:77:e4:0c:65:f9:78:e6:a8:bf:0e:e6:3e:d6:2a:
         46:e4:b8:3e:22:19:b5:88:c2:31:39:c0:9d:6a:42:d5:37:9f:
         cf:85:7f:af:14:ba:53:01:6f:3d:16:5d:db:9d:e2:dd:8c:95:
         be:5c:d6:e5:94:16:db:81:e2:b5:3f:cb:a0:c2:b4:d6:ae:e3:
         50:45:8a:e2:d5:2b:7a:64:60:d1:7a:04:f4:ee:2f:54:75:56:
         cb:ff:45:9e:ea:a4:2f:3c:70:fa:cc:62:df:7b:03:22:01:ec:
         ac:aa:ce:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org