Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232392e302f32342d3234203d3e20323130363534.roa
File:                     3231362e39372e3232392e302f32342d3234203d3e20323130363534.roa (raw, json)
Hash identifier:          91ggTbt37ecNvAxCyLcx4A7ODBBB5WnquFSHoFMB43s=
Subject key identifier:   12:1A:61:E8:41:5B:79:FA:7F:25:7B:AD:C7:64:CB:54:86:AB:E0:A2
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       6528764684C5EBA9A8763BFA6B79793CECCF4E0F
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232392e302f32342d3234203d3e20323130363534.roa
Signing time:             Tue 15 Mar 2022 12:22:02 +0000
ROA not before:           Tue 15 Mar 2022 12:17:02 +0000
ROA not after:            Tue 14 Mar 2023 12:22:02 +0000
asID:                     210654
IP address blocks:        216.97.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:28:76:46:84:c5:eb:a9:a8:76:3b:fa:6b:79:79:3c:ec:cf:4e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Mar 15 12:17:02 2022 GMT
            Not After : Mar 14 12:22:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:7d:66:3a:8e:45:ac:2f:91:d3:ac:81:a8:
                    d3:81:4e:56:87:5a:a2:7e:bf:b9:a9:f5:f1:e7:9d:
                    97:03:a6:3a:cf:ea:3c:6f:df:73:6f:af:3e:c1:7c:
                    95:a0:2d:56:b2:64:34:0e:01:1c:61:7b:4b:c9:dd:
                    38:85:29:f9:72:47:f7:c4:ce:df:c6:f7:58:58:b5:
                    ad:72:81:bd:19:ce:13:09:8e:c8:89:00:ef:66:92:
                    15:f6:aa:a9:7d:c3:89:38:bd:a4:88:52:eb:c0:72:
                    02:a3:aa:80:77:72:61:43:13:97:5e:d2:3a:92:8f:
                    48:89:32:eb:7d:3a:66:4b:71:85:32:97:0e:e3:de:
                    9e:cf:b1:f2:b5:58:c7:54:7a:67:d6:80:43:6e:5e:
                    df:54:00:02:0e:34:2c:59:e8:62:12:6e:ad:3f:ea:
                    4d:2c:56:f9:63:29:43:ea:9d:3e:1d:89:38:c3:90:
                    5f:b6:5d:bb:76:12:78:a5:db:11:aa:d7:ea:91:66:
                    30:53:17:4f:21:a5:41:bf:c4:d0:24:ba:10:51:16:
                    3b:aa:18:3c:31:93:97:aa:e8:58:77:e3:a2:af:ff:
                    9b:fe:c6:1d:51:80:d2:9c:a3:de:5d:59:7a:b1:34:
                    bf:7a:0b:fe:3d:05:d0:75:2b:04:71:bc:e3:56:de:
                    95:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1A:61:E8:41:5B:79:FA:7F:25:7B:AD:C7:64:CB:54:86:AB:E0:A2
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3232392e302f32342d3234203d3e20323130363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:19:1a:15:e9:8a:28:d6:97:81:c3:e3:08:40:ce:04:4c:19:
         c4:5d:73:41:ef:fc:91:51:94:ba:3e:34:2b:28:31:14:9d:7a:
         ae:58:e4:db:f4:7d:8d:ef:33:59:90:ab:47:0a:d7:e8:04:14:
         55:f0:c6:ea:e5:48:e8:5d:85:e4:fb:4d:17:b3:ee:ab:39:f5:
         6c:0f:74:b4:bf:b8:9e:43:2f:de:af:22:1e:d3:3e:f4:7c:d4:
         0b:d2:c6:8e:ad:52:06:cc:6d:ec:90:83:21:16:4f:80:6d:45:
         5d:4a:f2:5f:95:5f:07:5d:21:be:e8:cf:c6:61:de:3e:ff:d5:
         49:63:a1:f0:e5:b7:f0:e4:bc:00:ba:19:a1:80:eb:91:15:37:
         1f:19:20:1e:7e:26:30:6a:3b:97:07:00:cc:d4:5a:b3:6c:5e:
         42:23:80:21:25:89:fd:b9:39:c7:29:0c:93:f7:70:05:20:8c:
         db:fc:2d:6a:d8:05:4a:cb:61:02:a7:52:67:20:12:2d:6c:bf:
         3b:09:05:31:d9:55:86:a8:2c:bc:31:b1:f4:fe:18:25:ac:89:
         7c:8c:de:59:d0:ec:3e:06:29:d7:1a:ba:79:c0:29:b6:f9:4d:
         2e:ee:83:ea:07:b8:f6:a2:00:06:2c:a7:6b:50:a1:50:10:37:
         50:c7:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org