Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130382e302f32322d3232203d3e203439393939.roa
File:                     36372e3231302e3130382e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          XJ9mhmWmQ2gV4Q17e7OMs7K0xgp3SyzLAVliVHqGjCk=
Subject key identifier:   8B:B2:F5:36:AD:FB:89:91:91:E8:3D:BD:E9:0A:63:87:B3:5D:AD:1F
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       567994A2D4D1D6468313DA5EE224BABCE7F969A1
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130382e302f32322d3232203d3e203439393939.roa
Signing time:             Tue 12 Apr 2022 17:45:57 +0000
ROA not before:           Tue 12 Apr 2022 17:40:57 +0000
ROA not after:            Tue 11 Apr 2023 17:45:57 +0000
asID:                     49999
IP address blocks:        67.210.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:79:94:a2:d4:d1:d6:46:83:13:da:5e:e2:24:ba:bc:e7:f9:69:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Apr 12 17:40:57 2022 GMT
            Not After : Apr 11 17:45:57 2023 GMT
        Subject: CN=3082010A0282010100C96CEEB26AF1D27D9297A78A4A36D9767D0FB0ECB118B8F6DD734A3737D5DFF991AFC67FE37D4109057C4B90F3B3266F42E59BB51210BA9E19E1B902F095A709D7338571C4B4E7233502009860392188CC74B784D463225B53ADE75BA65FA918A9E3D4562BAC8CAFBB95318A117A8F8DBFC9548CE5F06F5AD2397C13488D68325539BA10149369639AC6B6AB9F5085FE6626FA9ED7CF5F4F6DD6FAD7E05FEFFDEBB36FB79C6FA8C90F04AFE305229B5AE504A03D7E30DDE4F3BBBF3839629052C6AB3136C64958BDB3625F7DE42E697A3940D3F5F0E0CA237FD60300171C4017E57BFC80D84903C81BDB6E70D66B7C96C345C28C14D1F0E5AEF96CC4B95A738F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:ee:b2:6a:f1:d2:7d:92:97:a7:8a:4a:36:
                    d9:76:7d:0f:b0:ec:b1:18:b8:f6:dd:73:4a:37:37:
                    d5:df:f9:91:af:c6:7f:e3:7d:41:09:05:7c:4b:90:
                    f3:b3:26:6f:42:e5:9b:b5:12:10:ba:9e:19:e1:b9:
                    02:f0:95:a7:09:d7:33:85:71:c4:b4:e7:23:35:02:
                    00:98:60:39:21:88:cc:74:b7:84:d4:63:22:5b:53:
                    ad:e7:5b:a6:5f:a9:18:a9:e3:d4:56:2b:ac:8c:af:
                    bb:95:31:8a:11:7a:8f:8d:bf:c9:54:8c:e5:f0:6f:
                    5a:d2:39:7c:13:48:8d:68:32:55:39:ba:10:14:93:
                    69:63:9a:c6:b6:ab:9f:50:85:fe:66:26:fa:9e:d7:
                    cf:5f:4f:6d:d6:fa:d7:e0:5f:ef:fd:eb:b3:6f:b7:
                    9c:6f:a8:c9:0f:04:af:e3:05:22:9b:5a:e5:04:a0:
                    3d:7e:30:dd:e4:f3:bb:bf:38:39:62:90:52:c6:ab:
                    31:36:c6:49:58:bd:b3:62:5f:7d:e4:2e:69:7a:39:
                    40:d3:f5:f0:e0:ca:23:7f:d6:03:00:17:1c:40:17:
                    e5:7b:fc:80:d8:49:03:c8:1b:db:6e:70:d6:6b:7c:
                    96:c3:45:c2:8c:14:d1:f0:e5:ae:f9:6c:c4:b9:5a:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B2:F5:36:AD:FB:89:91:91:E8:3D:BD:E9:0A:63:87:B3:5D:AD:1F
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130382e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:a4:87:83:16:3a:76:a6:35:68:51:b4:2f:b3:5e:cc:a5:e8:
         5d:cd:51:20:ce:a7:c9:35:2c:27:c9:dc:f9:72:bc:70:08:73:
         db:9a:d8:57:45:37:c4:27:c9:e6:f9:09:26:c6:dc:33:86:2d:
         2c:0a:12:ea:c7:d6:78:8a:0a:1b:7c:49:ec:2c:32:35:48:57:
         89:be:bc:17:c7:0e:42:93:45:a9:39:c4:9f:c7:7e:80:73:55:
         a7:20:2b:33:eb:a2:26:37:c2:cd:99:a5:99:eb:aa:79:db:2c:
         95:16:66:91:e6:eb:dc:21:f2:f1:b3:93:6f:3d:64:45:b8:8c:
         4d:6f:05:4a:cd:fa:04:2e:c4:0d:6f:d9:d1:b6:6d:03:58:e9:
         65:c4:b6:8f:17:d0:6f:83:9f:b7:5b:4c:18:cf:4c:54:84:ce:
         cc:8f:ad:3e:15:58:f7:74:d8:3e:57:5d:04:fb:0a:0b:20:df:
         77:8f:16:c4:a6:14:e4:f2:cd:5d:b1:40:8f:ec:97:b1:7a:5e:
         14:37:59:a6:dd:ab:6e:0d:d3:55:5f:47:0d:9f:28:25:a4:08:
         5c:68:f9:3c:79:af:7e:82:dc:41:ea:94:0b:25:04:22:92:dd:
         00:85:eb:8a:6b:ed:1d:42:93:ec:38:7b:cc:56:0a:e5:41:b1:
         f7:71:00:f5
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUVnmUotTR1kaDE9pe4iS6vOf5aaEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA0MTIxNzQwNTdaFw0yMzA0MTExNzQ1NTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzk2Q0VFQjI2QUYxRDI3RDky
OTdBNzhBNEEzNkQ5NzY3RDBGQjBFQ0IxMThCOEY2REQ3MzRBMzczN0Q1REZGOTkx
QUZDNjdGRTM3RDQxMDkwNTdDNEI5MEYzQjMyNjZGNDJFNTlCQjUxMjEwQkE5RTE5
RTFCOTAyRjA5NUE3MDlENzMzODU3MUM0QjRFNzIzMzUwMjAwOTg2MDM5MjE4OEND
NzRCNzg0RDQ2MzIyNUI1M0FERTc1QkE2NUZBOTE4QTlFM0Q0NTYyQkFDOENBRkJC
OTUzMThBMTE3QThGOERCRkM5NTQ4Q0U1RjA2RjVBRDIzOTdDMTM0ODhENjgzMjU1
MzlCQTEwMTQ5MzY5NjM5QUM2QjZBQjlGNTA4NUZFNjYyNkZBOUVEN0NGNUY0RjZE
RDZGQUQ3RTA1RkVGRkRFQkIzNkZCNzlDNkZBOEM5MEYwNEFGRTMwNTIyOUI1QUU1
MDRBMDNEN0UzMERERTRGM0JCQkYzODM5NjI5MDUyQzZBQjMxMzZDNjQ5NThCREIz
NjI1RjdERTQyRTY5N0EzOTQwRDNGNUYwRTBDQTIzN0ZENjAzMDAxNzFDNDAxN0U1
N0JGQzgwRDg0OTAzQzgxQkRCNkU3MEQ2NkI3Qzk2QzM0NUMyOEMxNEQxRjBFNUFF
Rjk2Q0M0Qjk1QTczOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyWzusmrx0n2Sl6eKSjbZdn0PsOyxGLj23XNKNzfV3/mRr8Z/431B
CQV8S5DzsyZvQuWbtRIQup4Z4bkC8JWnCdczhXHEtOcjNQIAmGA5IYjMdLeE1GMi
W1Ot51umX6kYqePUViusjK+7lTGKEXqPjb/JVIzl8G9a0jl8E0iNaDJVOboQFJNp
Y5rGtqufUIX+Zib6ntfPX09t1vrX4F/v/euzb7ecb6jJDwSv4wUim1rlBKA9fjDd
5PO7vzg5YpBSxqsxNsZJWL2zYl995C5pejlA0/Xw4Mojf9YDABccQBfle/yA2EkD
yBvbbnDWa3yWw0XCjBTR8OWu+WzEuVpzjwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FIuy9Tat+4mRkeg9vekKY4ezXa0fMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zNjM3MmUzMjMx
MzAyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM0MzkzOTM5Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJD0mwwDQYJKoZIhvcNAQELBQADggEBAJ+kh4MWOnamNWhRtC+zXsyl
6F3NUSDOp8k1LCfJ3PlyvHAIc9ua2FdFN8Qnyeb5CSbG3DOGLSwKEurH1niKCht8
SewsMjVIV4m+vBfHDkKTRak5xJ/HfoBzVacgKzProiY3ws2ZpZnrqnnbLJUWZpHm
69wh8vGzk289ZEW4jE1vBUrN+gQuxA1v2dG2bQNY6WXEto8X0G+Dn7dbTBjPTFSE
zsyPrT4VWPd02D5XXQT7Cgsg33ePFsSmFOTyzV2xQI/sl7F6XhQ3Wabdq24N01Vf
Rw2fKCWkCFxo+Tx5r36C3EHqlAslBCKS3QCF64pr7R1Ck+w4e8xWCuVBsfdxAPU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org