Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36342e35302e3136302e302f31392d3234203d3e2031323339.roa
File:                     36342e35302e3136302e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          3fyyCXakMnxXg1TUSQexpf73QA7NqjJIaVGv87LNz0E=
Subject key identifier:   BF:55:93:8F:BE:67:5C:FB:AE:39:37:42:CE:64:89:7D:C7:D3:BB:AB
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       22A7BF9202881AD61CC4A17156C4FAEE7D89CFE0
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36342e35302e3136302e302f31392d3234203d3e2031323339.roa
Signing time:             Mon 25 Oct 2021 12:56:48 +0000
ROA not before:           Mon 25 Oct 2021 12:51:48 +0000
ROA not after:            Mon 24 Oct 2022 12:56:48 +0000
asID:                     1239
IP address blocks:        64.50.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a7:bf:92:02:88:1a:d6:1c:c4:a1:71:56:c4:fa:ee:7d:89:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:51:48 2021 GMT
            Not After : Oct 24 12:56:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e0:1a:e4:6e:5d:23:4a:98:be:a4:2f:f6:6f:
                    d2:16:53:5c:88:47:5b:97:a6:5e:ad:6f:c5:dd:25:
                    91:4e:5f:a6:18:28:59:01:0a:68:30:61:5c:e8:03:
                    1a:42:0d:1d:77:fe:7b:1f:b5:31:3c:f6:51:1d:f9:
                    ae:b5:ee:6c:fc:ec:67:77:f1:89:da:29:61:2a:ed:
                    ce:a3:a4:51:a2:f9:68:4b:de:8c:f3:9b:32:7d:ee:
                    b7:f1:16:79:c0:19:0a:ba:59:d7:c2:f8:6f:48:cf:
                    4e:8c:bb:53:bc:29:08:82:ed:82:4c:49:3e:b7:84:
                    26:95:17:ce:20:a5:a0:34:f3:b6:ab:43:8d:e5:56:
                    64:27:b7:f4:08:cb:0a:8f:f5:07:18:a5:61:88:22:
                    6b:ff:be:7c:a6:b5:89:c8:55:ba:06:8d:4b:0f:73:
                    62:8e:dc:36:29:34:9c:99:27:66:7d:1f:23:54:7d:
                    a5:fa:65:92:61:32:0c:eb:04:03:0a:c8:3c:38:4b:
                    6a:63:cf:93:e9:91:72:f4:70:92:c3:d3:e8:cf:67:
                    f7:1a:69:61:e7:cd:94:25:63:c4:f2:77:b4:17:f2:
                    e0:45:8d:a0:d6:58:ac:86:41:ff:ee:8d:d1:d2:ec:
                    55:8b:77:7a:f9:5f:d8:00:38:ff:b2:81:c5:61:93:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:55:93:8F:BE:67:5C:FB:AE:39:37:42:CE:64:89:7D:C7:D3:BB:AB
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36342e35302e3136302e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:57:40:d1:5d:9e:e4:2f:af:9f:12:12:3a:9a:ed:d3:db:70:
         4b:d9:2d:bf:0e:12:6d:2a:16:1c:30:06:46:d8:b9:9f:6d:62:
         07:5d:11:61:1c:15:a6:ab:be:45:4d:ea:95:70:05:50:c1:4d:
         e2:b2:84:4f:54:fb:16:50:55:ab:2e:b5:ba:70:6c:02:7c:48:
         f7:89:61:67:47:34:e3:cc:70:44:f3:09:a3:bc:f1:dc:47:61:
         ee:0e:67:5d:3d:7a:b6:0e:69:57:ae:b0:a9:33:6a:dd:c3:a6:
         a4:dc:b3:19:24:59:0e:e6:3a:e3:e1:d6:60:ed:76:3b:83:f5:
         61:e8:92:7c:34:0c:33:21:3d:81:92:90:04:80:30:d5:19:4e:
         9e:d8:5b:11:57:fb:2a:57:a7:d4:a5:a3:9d:4f:cf:1b:19:f9:
         a6:88:c7:c8:d0:e3:74:f7:c1:6c:e1:10:ce:dc:e2:09:b5:9c:
         6b:35:95:84:c7:33:e1:ee:5d:a8:7a:11:c7:e1:cf:e0:a8:89:
         71:2e:b0:5f:1f:1d:9a:8b:e6:53:c2:35:58:32:f4:49:72:be:
         98:e7:c7:40:d3:93:91:7a:19:7e:d4:73:4f:63:8c:27:aa:ee:
         2e:63:07:24:3c:3e:4a:ea:25:6d:e8:2e:23:09:5f:a6:85:a7:
         90:93:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org