Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3130392e302f32342d3234203d3e203535313534.roa
File:                     3230362e3230362e3130392e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          v++OGDpUWtdLRT8G83lsiZTBbmGYBcYx7dp6DT7bLus=
Subject key identifier:   E4:87:9F:0A:36:E8:A9:FC:2C:36:BD:75:CF:00:7A:26:B6:DD:41:AA
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       5D3E79429E2D8B33240A6EA28714D14243F199BF
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3130392e302f32342d3234203d3e203535313534.roa
Signing time:             Fri 01 Jul 2022 18:39:05 +0000
ROA not before:           Fri 01 Jul 2022 18:34:05 +0000
ROA not after:            Fri 30 Jun 2023 18:39:05 +0000
asID:                     55154
IP address blocks:        206.206.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3e:79:42:9e:2d:8b:33:24:0a:6e:a2:87:14:d1:42:43:f1:99:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jul  1 18:34:05 2022 GMT
            Not After : Jun 30 18:39:05 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:83:b1:ff:8c:fe:4c:f2:f0:1a:1c:f5:a4:50:
                    23:b4:82:fa:8a:12:1c:ee:25:bb:36:6f:9a:78:f2:
                    33:2b:a9:c3:f0:8d:ca:a9:90:21:64:7c:ce:91:8a:
                    df:46:5d:ba:00:6f:0a:e4:ee:9f:3f:49:18:58:2a:
                    7b:94:05:9c:05:d1:7f:92:cf:b5:5f:1c:7d:47:67:
                    b9:3c:f1:17:cc:0e:ae:e6:1a:03:e7:ee:10:3d:c2:
                    f4:f2:80:3e:ba:5b:ce:71:a5:94:e0:57:be:6e:15:
                    7e:7e:e4:38:1c:e4:d3:b2:2a:11:1c:ef:1b:17:8e:
                    a9:6a:fe:b4:7b:78:ca:52:61:9e:e7:fa:c6:5d:ff:
                    7f:83:0c:a7:be:43:2e:d8:8a:b0:30:50:84:ab:45:
                    f5:d8:a3:fc:5d:a3:e9:05:4e:54:fe:4b:e4:08:38:
                    75:cd:1d:40:0f:f1:e8:75:ad:c6:27:3f:d8:30:68:
                    98:c1:41:48:5a:71:5a:77:04:c7:10:e3:24:fe:d1:
                    d5:b3:79:de:28:c0:32:a2:56:9a:73:ce:d3:c2:5d:
                    4e:a0:b6:27:bf:23:a9:dc:90:b2:06:0d:0a:d0:35:
                    97:d0:88:22:36:c4:53:08:87:0a:74:be:0d:e1:8f:
                    fa:27:3c:10:f0:a1:49:a2:9d:b0:58:17:6c:ea:70:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:87:9F:0A:36:E8:A9:FC:2C:36:BD:75:CF:00:7A:26:B6:DD:41:AA
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3230362e3230362e3130392e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:49:7d:61:72:eb:a0:13:aa:fb:3a:c3:8a:46:46:51:5c:29:
         82:d7:f4:f5:9c:b4:3e:e2:56:2c:17:6d:06:64:24:b8:24:83:
         61:13:6a:32:97:4b:ad:fd:60:58:04:37:fc:a3:cf:ab:ba:d6:
         ca:84:59:8e:90:a2:86:28:16:06:a4:e5:ba:34:a3:06:28:b6:
         68:3c:86:af:eb:92:e0:a0:9e:1d:e3:37:a8:f5:c1:81:96:d7:
         13:07:93:7a:60:32:4c:1d:9d:be:cc:7d:a7:d2:36:0c:a8:7d:
         10:9f:b1:f5:c2:58:d7:61:70:b4:3b:7f:52:d3:4b:cc:27:ad:
         7f:12:36:92:67:54:66:bd:5d:cc:54:9c:56:81:5e:25:e3:ef:
         73:bf:d9:8b:94:df:93:69:d7:75:f7:4e:ae:6f:2d:33:29:bd:
         bf:b1:31:5a:aa:13:dd:ad:69:33:4f:a6:33:62:d0:47:7c:28:
         eb:f3:35:9e:ef:c3:da:dc:27:bc:f2:1c:54:db:c8:ee:27:66:
         4f:45:aa:46:2e:f4:71:19:b5:db:66:1d:cf:2a:0e:c5:11:e6:
         dd:e6:cf:a3:a9:96:c6:d2:a5:db:d4:41:db:1f:c1:e0:b7:4a:
         b7:59:a5:63:2f:80:b9:66:4d:89:61:aa:70:4e:79:f5:5f:70:
         81:7d:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org