Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36362e3130322e3132382e302f32302d3234203d3e2033323537.roa
File:                     36362e3130322e3132382e302f32302d3234203d3e2033323537.roa (raw, json)
Hash identifier:          e5oH/LLhebYTIPYJLRSupHREzpOapm48dp3Ad0HO2MA=
Subject key identifier:   12:71:9F:B5:ED:C8:E1:89:A4:5E:01:36:87:33:3F:56:47:F0:30:8E
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       7FD5F76E6BB3E0B43171EC56E9C5D3E866900E8A
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36362e3130322e3132382e302f32302d3234203d3e2033323537.roa
Signing time:             Mon 25 Oct 2021 15:06:45 +0000
ROA not before:           Mon 25 Oct 2021 15:01:45 +0000
ROA not after:            Mon 24 Oct 2022 15:06:45 +0000
asID:                     3257
IP address blocks:        66.102.128.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d5:f7:6e:6b:b3:e0:b4:31:71:ec:56:e9:c5:d3:e8:66:90:0e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 15:01:45 2021 GMT
            Not After : Oct 24 15:06:45 2022 GMT
        Subject: CN=3082010A0282010100CF475B399F6AEF7B087B1F53BDFE9E99DA96B414A6A11CE524B7BF2768271F3938924DE0AFECA4FFC1E2CD72B1E5E33147DECACDFEEEE11DA0EBD3B8E3E71D3369B8A3F4F0E6EE818F4C8C0E67EDC9E730F5B6E5E3F04EE3582DEE36FA7D5265428A9A48B64C382E77E945B00F77C5F777EAC72C7FF97CAA1A5C54DC94626424244AA219F66F58286CEAB5316463C8A381B9B41BBF24250C29BC4BC5153F01450373442CA6CEA654C8693B3D64FF42BBD29C1D66FEC58B194FD8F44E1192FAAD2D75E1100F1E76B729E95CF3802AC9D6BAC50C3D7A182875EBD630243E737BF9406B09D9C82572231A8B568D9DB0EBDE315C86E773D2D0F308A2C1A7F9EDD3F30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:5b:39:9f:6a:ef:7b:08:7b:1f:53:bd:fe:
                    9e:99:da:96:b4:14:a6:a1:1c:e5:24:b7:bf:27:68:
                    27:1f:39:38:92:4d:e0:af:ec:a4:ff:c1:e2:cd:72:
                    b1:e5:e3:31:47:de:ca:cd:fe:ee:e1:1d:a0:eb:d3:
                    b8:e3:e7:1d:33:69:b8:a3:f4:f0:e6:ee:81:8f:4c:
                    8c:0e:67:ed:c9:e7:30:f5:b6:e5:e3:f0:4e:e3:58:
                    2d:ee:36:fa:7d:52:65:42:8a:9a:48:b6:4c:38:2e:
                    77:e9:45:b0:0f:77:c5:f7:77:ea:c7:2c:7f:f9:7c:
                    aa:1a:5c:54:dc:94:62:64:24:24:4a:a2:19:f6:6f:
                    58:28:6c:ea:b5:31:64:63:c8:a3:81:b9:b4:1b:bf:
                    24:25:0c:29:bc:4b:c5:15:3f:01:45:03:73:44:2c:
                    a6:ce:a6:54:c8:69:3b:3d:64:ff:42:bb:d2:9c:1d:
                    66:fe:c5:8b:19:4f:d8:f4:4e:11:92:fa:ad:2d:75:
                    e1:10:0f:1e:76:b7:29:e9:5c:f3:80:2a:c9:d6:ba:
                    c5:0c:3d:7a:18:28:75:eb:d6:30:24:3e:73:7b:f9:
                    40:6b:09:d9:c8:25:72:23:1a:8b:56:8d:9d:b0:eb:
                    de:31:5c:86:e7:73:d2:d0:f3:08:a2:c1:a7:f9:ed:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:9F:B5:ED:C8:E1:89:A4:5E:01:36:87:33:3F:56:47:F0:30:8E
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36362e3130322e3132382e302f32302d3234203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:07:f6:4f:7d:05:7c:3a:d7:bc:69:1a:2a:e4:b2:2f:44:8b:
         8a:65:85:10:d5:d6:9b:d8:8d:cc:c9:a8:27:94:02:44:4d:c5:
         50:8e:ba:03:bb:68:c3:d5:45:23:0a:ea:58:03:d9:2f:42:69:
         0e:a5:48:90:5a:8c:ec:1b:25:f8:a5:93:96:a6:15:bb:18:92:
         7d:24:d8:dd:9c:2c:04:1b:46:37:54:f8:e9:08:d5:a6:a4:81:
         ae:48:62:af:94:38:9b:72:8e:21:cb:72:59:50:32:2e:f4:02:
         81:d7:ed:e1:c7:bb:72:ac:04:06:fb:70:e8:76:f5:91:c3:b0:
         c0:29:8f:72:ff:9a:72:a3:70:4a:a0:2c:44:62:7a:40:9e:a0:
         37:46:9b:bd:6c:4d:cc:b4:15:22:03:ea:9b:06:43:03:c7:bc:
         d3:08:45:e4:29:28:ca:e2:3a:64:2e:f5:7c:19:a0:0a:b3:ac:
         09:05:10:49:31:5b:3d:36:f3:9f:90:4b:99:d5:30:f7:c1:2f:
         c2:c8:dd:7f:88:a8:22:b2:4a:92:1a:38:50:a3:40:45:3d:8b:
         d8:78:bd:6b:41:9f:e9:9b:5d:b5:27:e9:43:b0:fe:3a:3e:0d:
         3d:0d:9d:06:67:4f:54:4a:c3:0f:a1:45:22:c4:18:5d:ef:2d:
         db:98:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org