Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130302e302f32342d3234203d3e2037383433.roa
File:                     36372e3231302e3130302e302f32342d3234203d3e2037383433.roa (raw, json)
Hash identifier:          GstHwi2cBSq85PLB6SHw8go1bdmCwekziawG6nzHF0Q=
Subject key identifier:   78:D4:29:42:92:79:B7:F6:FC:43:39:37:0E:44:23:E0:AC:7E:A7:39
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       741B3540944BB7FC4241F2466A41033AF71FC6DE
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130302e302f32342d3234203d3e2037383433.roa
Signing time:             Mon 02 May 2022 05:32:31 +0000
ROA not before:           Mon 02 May 2022 05:27:31 +0000
ROA not after:            Mon 01 May 2023 05:32:31 +0000
asID:                     7843
IP address blocks:        67.210.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:1b:35:40:94:4b:b7:fc:42:41:f2:46:6a:41:03:3a:f7:1f:c6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May  2 05:27:31 2022 GMT
            Not After : May  1 05:32:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:96:40:70:e4:02:74:c2:33:81:f6:47:57:
                    48:ad:51:23:aa:8a:c0:23:fc:81:64:e8:db:8c:b1:
                    b3:2b:3f:a1:d0:f2:f0:d1:42:4c:6a:1f:de:2f:5f:
                    78:65:1f:2f:63:a8:fd:48:a3:f4:ef:64:cf:ed:02:
                    5a:9b:64:ab:ce:d5:d1:4c:13:0b:be:2a:b8:de:d8:
                    9a:9e:09:d8:36:aa:ca:c6:9c:01:d8:2e:3a:d7:67:
                    b0:50:fb:86:31:66:bc:7b:1d:af:61:72:a1:55:25:
                    4f:98:f2:29:b5:66:a0:03:9f:4c:6f:66:fa:e8:c3:
                    37:2d:01:2d:58:00:61:b7:c3:9f:51:98:91:f6:2e:
                    17:d4:8d:b8:f4:2b:db:a7:6b:b4:4e:7d:74:69:93:
                    d8:66:f3:78:c6:cb:e8:ac:d7:3d:93:4b:38:a7:50:
                    b9:9f:88:9d:19:0c:5c:e5:0c:57:53:0a:2b:e2:fb:
                    4b:1a:b5:70:57:ab:62:e0:1f:a7:9a:3b:31:73:34:
                    dd:fb:33:44:25:60:bb:fd:a0:24:c2:a9:c7:a3:97:
                    e3:06:bd:e9:a4:d8:18:e2:84:85:66:c8:5f:b1:fe:
                    c8:90:cf:9b:e6:67:84:4b:70:f7:f2:5e:fb:54:0e:
                    dc:79:a5:87:78:9d:24:f1:fe:e3:03:77:bd:63:1c:
                    62:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D4:29:42:92:79:B7:F6:FC:43:39:37:0E:44:23:E0:AC:7E:A7:39
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130302e302f32342d3234203d3e2037383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:35:ff:c7:b4:96:94:a2:66:f5:53:a3:37:82:9f:41:56:8d:
         62:fa:47:fd:58:2d:42:41:56:f7:9e:5e:9f:91:03:e3:99:3f:
         3c:b4:e9:1e:a7:f0:f8:ef:da:40:8d:51:7e:17:b6:5a:df:f2:
         87:4c:aa:23:dd:dd:27:92:4d:8b:29:2d:e8:22:09:c6:94:32:
         74:00:7e:7e:ce:61:f8:ea:47:b4:05:26:cd:35:85:9d:ee:8a:
         ba:99:a8:2a:8a:77:26:ef:c8:d0:4a:ab:7d:01:b1:5d:b3:96:
         ff:b4:0f:8e:7b:a8:f3:5d:5c:f4:84:ad:9c:fa:d1:a9:2c:1c:
         5e:48:62:ef:90:02:ae:01:59:b7:cf:7d:0b:bd:1d:0a:11:12:
         f7:08:7a:9f:ae:88:d8:10:91:4b:54:d3:e7:af:17:52:ce:70:
         63:de:92:9d:2c:81:4c:0a:e6:39:44:06:c3:ed:a6:2d:ee:5f:
         2c:1f:dc:34:be:22:9e:30:ad:b6:97:4e:c1:42:24:2e:0a:19:
         e1:cc:c3:ae:99:43:88:27:81:26:ff:0b:8c:be:5a:dd:96:c6:
         d3:51:20:a1:5b:df:e3:5b:a6:69:f8:39:e4:8c:0a:cd:f0:ba:
         89:26:07:dd:0c:20:5f:b2:55:55:af:80:66:97:b4:b0:2e:cb:
         78:a7:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org