Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136302e302f32342d3234203d3e203132323731.roa
File:                     3231362e3132322e3136302e302f32342d3234203d3e203132323731.roa (raw, json)
Hash identifier:          OtGWVWvF5Af3TtGTiFLZwrmiFVLlfFzYbUCUKc8UGnM=
Subject key identifier:   95:5E:31:3E:1B:2F:DA:E1:D1:46:8A:FE:E4:F8:82:F7:0B:4F:97:4D
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       4CFFAB1E9A5A44AA693B0B4FF46E2CDFC6726712
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136302e302f32342d3234203d3e203132323731.roa
Signing time:             Fri 07 Jan 2022 04:33:13 +0000
ROA not before:           Fri 07 Jan 2022 04:28:13 +0000
ROA not after:            Fri 06 Jan 2023 04:33:13 +0000
asID:                     12271
IP address blocks:        216.122.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ff:ab:1e:9a:5a:44:aa:69:3b:0b:4f:f4:6e:2c:df:c6:72:67:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jan  7 04:28:13 2022 GMT
            Not After : Jan  6 04:33:13 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:d3:ba:cc:32:ff:57:77:cc:99:e5:a4:c4:
                    76:4f:21:ad:b1:0f:7e:1f:f7:d7:7f:86:0c:fc:21:
                    8d:8f:13:1e:b2:35:af:9c:7f:f4:70:14:fb:05:d0:
                    4c:00:c4:dc:f4:28:2b:ea:73:a9:1c:32:8c:7d:45:
                    1f:e3:1b:06:8a:ba:79:4b:ff:22:cb:e5:b9:d8:28:
                    d3:b7:09:62:75:d0:b6:8d:89:1f:a6:a5:44:83:20:
                    8d:47:fc:9b:5a:da:88:16:15:a6:f6:5f:f0:02:f3:
                    a7:bd:64:8c:62:bd:27:7e:44:22:cf:64:4b:ad:73:
                    bf:f9:3c:bf:87:c1:90:f8:08:92:83:bd:69:fb:b8:
                    38:b0:ee:88:96:de:00:81:c7:11:c5:56:4c:47:d6:
                    36:6c:42:25:43:8a:01:90:64:38:4b:e1:5d:eb:f1:
                    e2:55:47:ad:f7:a9:9a:54:8c:22:bb:c9:18:08:dd:
                    3d:5b:78:53:0c:09:dc:ff:04:ec:ab:4d:c2:dc:24:
                    72:a1:01:54:f6:b8:73:9d:74:5d:6e:13:43:bf:90:
                    da:07:06:e8:9a:a0:ed:61:6a:f4:ad:be:b2:35:7c:
                    1c:0f:38:8b:c8:ad:3a:0a:11:23:ed:52:83:ed:96:
                    65:9f:76:6c:2a:38:9f:74:6a:a6:50:d9:92:25:66:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5E:31:3E:1B:2F:DA:E1:D1:46:8A:FE:E4:F8:82:F7:0B:4F:97:4D
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136302e302f32342d3234203d3e203132323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:15:24:bc:6f:be:75:c8:f2:e7:9b:dc:a9:9a:e8:61:39:f9:
         bf:db:16:31:9e:1f:c3:42:7a:1f:18:20:bf:fd:9f:ba:aa:e2:
         a7:aa:de:f0:cb:b2:eb:89:0d:22:47:2d:a2:cf:99:6c:12:10:
         e2:3b:17:eb:bb:f3:70:7d:77:86:4c:87:71:3d:0f:5a:1c:6d:
         80:28:b6:69:20:ce:9a:f4:48:e2:fd:37:00:56:46:d5:e5:53:
         66:40:60:fa:bc:22:48:a9:15:9f:94:d4:61:a6:9b:33:54:7f:
         22:87:10:20:63:4e:2b:43:9d:1a:cb:2a:5c:04:d3:86:b9:20:
         bf:84:5c:f9:d7:a2:14:0f:7b:b7:f3:a7:db:7a:ae:4c:64:d2:
         ec:b5:56:7c:e8:31:cf:15:e4:88:d9:8d:45:3d:ba:9e:b6:9e:
         f1:81:8b:78:da:fb:2a:8e:a1:df:b6:95:9c:05:ff:c8:f6:ad:
         7b:60:87:73:11:ef:d3:62:2e:0a:bd:57:a3:0b:ea:83:62:80:
         d4:59:93:06:ff:b6:62:40:ed:d1:04:eb:03:b9:71:25:b7:76:
         6f:af:8d:5a:6f:7b:9f:d4:c1:72:e6:eb:e4:98:9c:b2:b2:56:
         7e:4a:ed:0a:6d:6c:b3:f3:e2:37:3d:84:21:36:c0:da:e0:71:
         93:c3:e0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org