Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233322e302f32332d3234203d3e2031323339.roa
File:                     3231362e39372e3233322e302f32332d3234203d3e2031323339.roa (raw, json)
Hash identifier:          s48nzcWEEHKOEmrGUG68X3Wh7lywxGq4K3NEXrp77A4=
Subject key identifier:   13:06:97:92:AD:A1:A0:B2:CF:BD:B1:7E:D5:30:C4:5C:75:49:7A:CC
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       3E36910B3F207270261F3338D8CA0D6C08615335
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233322e302f32332d3234203d3e2031323339.roa
Signing time:             Mon 25 Oct 2021 12:57:06 +0000
ROA not before:           Mon 25 Oct 2021 12:52:06 +0000
ROA not after:            Mon 24 Oct 2022 12:57:06 +0000
asID:                     1239
IP address blocks:        216.97.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:36:91:0b:3f:20:72:70:26:1f:33:38:d8:ca:0d:6c:08:61:53:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:06 2021 GMT
            Not After : Oct 24 12:57:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:99:45:b6:cb:0f:33:1a:68:0f:34:43:da:
                    7d:b5:da:b6:56:e7:81:ec:00:92:4c:ce:1c:14:59:
                    da:d2:8d:9a:41:82:a5:95:c1:39:9e:fd:a0:07:61:
                    ec:07:28:bb:0e:61:3f:17:42:f6:49:a3:93:e5:6f:
                    a7:00:71:a2:fd:56:cf:be:35:0c:13:15:65:1c:cd:
                    f8:ca:f8:d0:83:ba:95:39:ec:bd:c8:f3:32:25:40:
                    d4:14:c7:b3:8a:3c:0b:41:85:4c:ba:e7:31:87:8a:
                    89:ff:71:3f:76:2e:cb:fc:66:53:93:b6:f7:77:92:
                    b1:f6:cb:b8:2b:17:f6:3f:5e:93:11:92:c5:90:c3:
                    8a:16:7c:3f:9f:71:97:30:f2:17:21:14:30:2b:4b:
                    24:24:9e:a2:4c:b2:a0:b8:b8:48:7e:49:d6:b6:89:
                    d5:63:03:56:59:b7:3a:43:aa:ae:48:59:94:8e:4f:
                    30:e5:8e:53:f9:ac:b9:3a:75:d0:e1:23:35:af:8d:
                    3a:68:fb:4d:fc:bf:f3:00:e1:dc:17:19:46:62:fd:
                    0b:83:65:e7:1c:16:e7:c9:73:b3:5f:3e:ea:ae:20:
                    35:25:ec:c4:4b:5a:bd:6a:c2:8b:e8:de:c4:be:54:
                    71:24:71:f9:c6:6c:79:95:4d:d7:91:d6:fc:8b:38:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:06:97:92:AD:A1:A0:B2:CF:BD:B1:7E:D5:30:C4:5C:75:49:7A:CC
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3231362e39372e3233322e302f32332d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.97.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:48:ec:e6:c4:12:1f:f7:2f:ff:46:e3:4a:b4:70:a5:68:
         ee:b0:0b:e1:7f:4a:77:74:3d:17:d9:5b:44:03:72:31:55:6f:
         d6:7d:90:45:97:92:3f:18:43:7f:fa:9b:21:26:e5:63:e5:bc:
         ba:07:2f:d0:e7:4f:83:08:74:2d:2a:f7:42:b2:db:32:16:79:
         d0:2a:02:e6:20:a6:63:e0:53:30:26:66:d8:1e:cc:f3:fd:5f:
         4c:91:db:21:5b:d2:80:43:28:fe:da:4c:19:2b:97:fb:86:c0:
         da:29:8d:97:fb:05:b8:59:65:8a:a0:89:49:2d:fb:f1:da:49:
         dd:dc:f7:da:fe:3e:ef:9d:d7:c7:3d:1d:5d:b5:f2:50:0f:30:
         02:f3:42:d2:a8:2c:3e:1d:f8:58:8c:f3:f8:fa:d2:e6:9a:31:
         3a:54:0b:26:4d:25:31:1b:fd:36:6a:90:3c:50:d8:33:3f:17:
         c4:ca:64:21:64:75:c2:fa:f8:f2:92:04:21:55:0c:3f:ae:31:
         5e:63:68:9a:0a:77:a1:4f:64:29:dc:e2:29:8c:b1:c7:b4:37:
         cc:ba:e4:10:e5:49:c3:48:38:58:59:8c:83:21:24:29:83:d0:
         78:5c:5f:02:e4:ef:e3:fb:6d:9f:8a:7b:4d:45:0d:e2:54:b9:
         e5:3a:7a:e0
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUPjaRCz8gcnAmHzM42MoNbAhhUzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMTEwMjUxMjUyMDZaFw0yMjEwMjQxMjU3MDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzAxNjk5NDVCNkNCMEYzMzFB
NjgwRjM0NDNEQTdEQjVEQUI2NTZFNzgxRUMwMDkyNENDRTFDMTQ1OURBRDI4RDlB
NDE4MkE1OTVDMTM5OUVGREEwMDc2MUVDMDcyOEJCMEU2MTNGMTc0MkY2NDlBMzkz
RTU2RkE3MDA3MUEyRkQ1NkNGQkUzNTBDMTMxNTY1MUNDREY4Q0FGOEQwODNCQTk1
MzlFQ0JEQzhGMzMyMjU0MEQ0MTRDN0IzOEEzQzBCNDE4NTRDQkFFNzMxODc4QTg5
RkY3MTNGNzYyRUNCRkM2NjUzOTNCNkY3Nzc5MkIxRjZDQkI4MkIxN0Y2M0Y1RTkz
MTE5MkM1OTBDMzhBMTY3QzNGOUY3MTk3MzBGMjE3MjExNDMwMkI0QjI0MjQ5RUEy
NENCMkEwQjhCODQ4N0U0OUQ2QjY4OUQ1NjMwMzU2NTlCNzNBNDNBQUFFNDg1OTk0
OEU0RjMwRTU4RTUzRjlBQ0I5M0E3NUQwRTEyMzM1QUY4RDNBNjhGQjRERkNCRkYz
MDBFMURDMTcxOTQ2NjJGRDBCODM2NUU3MUMxNkU3Qzk3M0IzNUYzRUVBQUUyMDM1
MjVFQ0M0NEI1QUJENkFDMjhCRThERUM0QkU1NDcxMjQ3MUY5QzY2Qzc5OTU0REQ3
OTFENkZDOEIzODc1NDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwBaZRbbLDzMaaA80Q9p9tdq2VueB7ACSTM4cFFna0o2aQYKllcE5
nv2gB2HsByi7DmE/F0L2SaOT5W+nAHGi/VbPvjUMExVlHM34yvjQg7qVOey9yPMy
JUDUFMezijwLQYVMuucxh4qJ/3E/di7L/GZTk7b3d5Kx9su4Kxf2P16TEZLFkMOK
Fnw/n3GXMPIXIRQwK0skJJ6iTLKguLhIfknWtonVYwNWWbc6Q6quSFmUjk8w5Y5T
+ay5OnXQ4SM1r406aPtN/L/zAOHcFxlGYv0Lg2XnHBbnyXOzXz7qriA1JezES1q9
asKL6N7EvlRxJHH5xmx5lU3Xkdb8izh1RwIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FBMGl5KtoaCyz72xftUwxFx1SXrMMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMxMzYyZTM5
MzcyZTMyMzMzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzIzMzM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQB2GHoMA0GCSqGSIb3DQEBCwUAA4IBAQC/aEjs5sQSH/cv/0bjSrRwpWju
sAvhf0p3dD0X2VtEA3IxVW/WfZBFl5I/GEN/+pshJuVj5by6By/Q50+DCHQtKvdC
stsyFnnQKgLmIKZj4FMwJmbYHszz/V9MkdshW9KAQyj+2kwZK5f7hsDaKY2X+wW4
WWWKoIlJLfvx2knd3Pfa/j7vndfHPR1dtfJQDzAC80LSqCw+HfhYjPP4+tLmmjE6
VAsmTSUxG/02apA8UNgzPxfEymQhZHXC+vjykgQhVQw/rjFeY2iaCnehT2Qp3OIp
jLHHtDfMuuQQ5UnDSDhYWYyDISQpg9B4XF8C5O/j+22fintNRQ3iVLnlOnrg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org