Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39372e302f32342d3234203d3e203535313534.roa
File:                     36372e3231302e39372e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          HUSGo1dGLTenjmMa2c3WdIozUq94l7HQJlw+3YWL9b4=
Subject key identifier:   C6:C2:36:35:F9:F2:41:3F:E5:D5:DB:A9:A0:B2:D5:11:BF:E2:E9:27
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       7A41FBE08EFC005711203421CB008F17794810A1
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39372e302f32342d3234203d3e203535313534.roa
Signing time:             Fri 01 Jul 2022 18:37:54 +0000
ROA not before:           Fri 01 Jul 2022 18:32:54 +0000
ROA not after:            Fri 30 Jun 2023 18:37:54 +0000
asID:                     55154
IP address blocks:        67.210.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:41:fb:e0:8e:fc:00:57:11:20:34:21:cb:00:8f:17:79:48:10:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jul  1 18:32:54 2022 GMT
            Not After : Jun 30 18:37:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:9c:77:f9:9a:ce:69:44:ef:3d:17:74:40:
                    1e:63:f4:89:09:56:7f:91:de:12:a2:17:3e:81:14:
                    d2:13:63:61:2c:7c:c9:6f:61:5f:8f:a0:70:85:59:
                    4c:3b:0b:7d:51:00:1f:8e:57:69:4e:89:d2:67:c8:
                    d0:e8:66:dd:30:ae:ff:84:97:bb:64:43:df:05:84:
                    fa:29:82:ee:c0:ce:19:65:bb:17:85:3e:30:06:f7:
                    08:f9:df:64:7a:5d:55:ab:43:57:7d:71:26:81:50:
                    96:25:30:86:9b:ed:b4:3d:af:d0:a0:fa:4f:47:4f:
                    51:52:05:3d:01:47:17:1d:9b:ac:9f:cf:23:7d:4e:
                    fb:de:80:c4:03:07:d6:5a:b7:3b:30:31:97:0f:d3:
                    40:cc:56:82:0c:cc:0d:ec:ae:0e:e0:8f:1f:b7:a5:
                    a5:66:c6:8b:4f:83:8a:ed:0e:a3:1d:75:62:35:7a:
                    4f:2e:e9:e9:13:3b:7f:9d:4b:ff:a5:e3:65:9e:90:
                    cb:44:a2:29:cb:dc:27:ce:68:50:64:b0:0e:cc:72:
                    10:c2:a0:63:c5:2a:db:af:78:1a:c9:6e:22:46:bd:
                    18:5b:52:e6:af:e0:bf:e0:81:a7:dd:62:e2:63:0d:
                    37:51:cf:78:bf:74:de:c8:36:97:78:62:d5:7d:ba:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C2:36:35:F9:F2:41:3F:E5:D5:DB:A9:A0:B2:D5:11:BF:E2:E9:27
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e39372e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ca:5e:8a:e8:85:3a:c6:79:b3:70:86:50:be:d7:54:ee:63:
         ab:7f:38:f6:61:16:74:22:c7:45:7b:bb:20:be:be:cc:3f:07:
         b4:82:41:d8:23:8a:d4:ad:99:24:81:50:ea:6d:86:36:18:6d:
         db:ae:8b:33:4f:a4:6f:35:88:ad:7e:c3:b3:c0:5c:2e:6c:49:
         2b:54:21:43:80:15:eb:20:fd:e8:e4:40:53:08:23:14:97:d1:
         46:3e:e1:e1:82:98:ba:de:7a:24:94:13:ca:5d:1c:35:a8:53:
         6d:51:d9:74:f6:1d:f6:14:de:a9:84:0c:e8:67:af:14:a5:8a:
         45:87:6f:5b:0b:18:3c:57:91:c9:4a:8e:a1:e5:c7:e0:09:2c:
         43:dd:dc:36:72:99:53:3b:c6:a6:4e:59:75:f5:9d:3d:5a:26:
         a5:e2:f1:bd:6c:f2:25:16:f4:c1:ed:d6:74:bd:a6:8e:0a:55:
         c5:be:91:ef:66:bf:4c:76:07:8e:9f:ee:a6:fc:63:d6:0a:21:
         05:af:7a:20:da:31:5b:4f:c3:56:e9:6b:10:11:c3:7a:fe:3e:
         ae:48:b7:52:80:f0:e6:c8:fc:7c:9c:38:b7:65:38:50:86:cf:
         20:43:6c:99:40:83:15:61:53:51:26:ae:4b:61:5f:5e:fa:5e:
         86:5a:91:cb
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUekH74I78AFcRIDQhywCPF3lIEKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA3MDExODMyNTRaFw0yMzA2MzAxODM3NTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUQ0ODlDNzdGOTlBQ0U2OTQ0
RUYzRDE3NzQ0MDFFNjNGNDg5MDk1NjdGOTFERTEyQTIxNzNFODExNEQyMTM2MzYx
MkM3Q0M5NkY2MTVGOEZBMDcwODU1OTRDM0IwQjdENTEwMDFGOEU1NzY5NEU4OUQy
NjdDOEQwRTg2NkREMzBBRUZGODQ5N0JCNjQ0M0RGMDU4NEZBMjk4MkVFQzBDRTE5
NjVCQjE3ODUzRTMwMDZGNzA4RjlERjY0N0E1RDU1QUI0MzU3N0Q3MTI2ODE1MDk2
MjUzMDg2OUJFREI0M0RBRkQwQTBGQTRGNDc0RjUxNTIwNTNEMDE0NzE3MUQ5QkFD
OUZDRjIzN0Q0RUZCREU4MEM0MDMwN0Q2NUFCNzNCMzAzMTk3MEZEMzQwQ0M1Njgy
MENDQzBERUNBRTBFRTA4RjFGQjdBNUE1NjZDNjhCNEY4MzhBRUQwRUEzMUQ3NTYy
MzU3QTRGMkVFOUU5MTMzQjdGOUQ0QkZGQTVFMzY1OUU5MENCNDRBMjI5Q0JEQzI3
Q0U2ODUwNjRCMDBFQ0M3MjEwQzJBMDYzQzUyQURCQUY3ODFBQzk2RTIyNDZCRDE4
NUI1MkU2QUZFMEJGRTA4MUE3REQ2MkUyNjMwRDM3NTFDRjc4QkY3NERFQzgzNjk3
Nzg2MkQ1N0RCQUQ2RjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAnUicd/mazmlE7z0XdEAeY/SJCVZ/kd4Sohc+gRTSE2NhLHzJb2Ff
j6BwhVlMOwt9UQAfjldpTonSZ8jQ6GbdMK7/hJe7ZEPfBYT6KYLuwM4ZZbsXhT4w
BvcI+d9kel1Vq0NXfXEmgVCWJTCGm+20Pa/QoPpPR09RUgU9AUcXHZusn88jfU77
3oDEAwfWWrc7MDGXD9NAzFaCDMwN7K4O4I8ft6WlZsaLT4OK7Q6jHXViNXpPLunp
Ezt/nUv/peNlnpDLRKIpy9wnzmhQZLAOzHIQwqBjxSrbr3gayW4iRr0YW1Lmr+C/
4IGn3WLiYw03Uc94v3TeyDaXeGLVfbrW8wIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FMbCNjX58kE/5dXbqaCy1RG/4uknMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zNjM3MmUzMjMx
MzAyZTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzEzNTM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAQ9JhMA0GCSqGSIb3DQEBCwUAA4IBAQAhyl6K6IU6xnmzcIZQvtdU7mOr
fzj2YRZ0IsdFe7sgvr7MPwe0gkHYI4rUrZkkgVDqbYY2GG3broszT6RvNYitfsOz
wFwubEkrVCFDgBXrIP3o5EBTCCMUl9FGPuHhgpi63noklBPKXRw1qFNtUdl09h32
FN6phAzoZ68UpYpFh29bCxg8V5HJSo6h5cfgCSxD3dw2cplTO8amTll19Z09Wial
4vG9bPIlFvTB7dZ0vaaOClXFvpHvZr9MdgeOn+6m/GPWCiEFr3og2jFbT8NW6WsQ
EcN6/j6uSLdSgPDmyPx8nDi3ZThQhs8gQ2yZQIMVYVNRJq5LYV9e+l6GWpHL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org