Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136312e302f32342d3234203d3e203631333137.roa
File:                     3231362e3132322e3136312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          OPeLwDdhYLIli/ekwEr6CH16+rIwgOpoqIE21nZHtgQ=
Subject key identifier:   36:27:24:FC:B5:F8:A1:BC:87:A1:34:7B:59:F4:D3:E8:3A:D2:66:0E
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       4F51AF47E830C46DE376457750DFCFE9C26C0DFA
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136312e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 05 Jan 2022 17:48:05 +0000
ROA not before:           Wed 05 Jan 2022 17:43:05 +0000
ROA not after:            Wed 04 Jan 2023 17:48:05 +0000
asID:                     61317
IP address blocks:        216.122.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:51:af:47:e8:30:c4:6d:e3:76:45:77:50:df:cf:e9:c2:6c:0d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jan  5 17:43:05 2022 GMT
            Not After : Jan  4 17:48:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:84:97:b6:b0:5c:09:9b:d3:5e:a2:ab:ca:
                    f1:0b:07:22:77:b5:ce:de:49:18:7a:58:37:08:e6:
                    84:2c:6b:51:b7:b5:57:a6:12:1e:ae:90:54:c7:6a:
                    ff:a9:20:99:36:d3:d7:94:5f:d7:f3:24:21:8a:e4:
                    27:7a:72:e5:18:46:a8:d7:30:00:ce:a1:9d:fc:e4:
                    a0:a6:7e:ac:c4:ce:13:c4:e4:1a:9f:3e:e1:69:d6:
                    67:95:db:41:4e:93:e6:70:92:7f:b5:01:df:1b:22:
                    76:92:d5:32:e5:a8:ab:aa:a1:64:bf:b4:b1:7e:07:
                    0c:8d:37:87:4a:b6:9f:c2:44:8f:2c:4e:bf:10:bc:
                    75:0c:67:20:09:ad:df:a8:fe:58:4f:13:42:7f:44:
                    50:75:40:e6:53:4d:a1:44:a7:f8:14:e8:11:6a:14:
                    96:fc:00:34:56:d8:39:3d:1c:d0:83:60:7a:4c:8f:
                    f5:cb:0e:8c:26:7c:4f:46:a2:ea:ef:4f:94:8c:d2:
                    b9:0b:a2:5d:0f:68:a2:35:11:e4:d2:00:1b:05:60:
                    ca:5a:23:e2:f3:08:77:78:9e:b2:52:0d:cd:c9:bc:
                    74:7e:cf:1f:8c:83:cf:27:48:46:66:fc:40:56:f5:
                    21:46:1b:e2:bc:cc:75:3c:8f:a0:7d:c5:2f:84:8a:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:27:24:FC:B5:F8:A1:BC:87:A1:34:7B:59:F4:D3:E8:3A:D2:66:0E
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136312e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:81:0b:d2:38:e6:5b:95:8b:7b:0a:71:ea:ce:0d:c1:a9:
         07:ee:20:37:d0:08:07:e1:a8:52:f5:f3:c7:16:d6:2e:9a:21:
         2b:62:d1:17:4c:94:09:0c:11:2c:e1:c1:67:f7:d8:f7:e3:e6:
         6e:46:83:c1:ce:4f:15:ae:92:02:97:d8:39:90:22:db:e8:d7:
         66:28:82:de:6c:64:a4:6c:75:39:19:d0:3a:f6:37:b1:0d:ac:
         9b:c8:9a:0a:aa:be:aa:38:b5:67:6c:37:40:61:7a:55:e0:e7:
         54:cb:74:60:0f:ff:20:49:b9:a1:93:82:1c:11:0f:52:04:6b:
         17:4a:fd:cf:3c:c7:a0:1a:7a:a8:92:01:da:50:90:04:57:f1:
         85:b3:35:56:66:f5:2d:cc:91:e2:c7:ab:ca:5d:2d:ad:51:c6:
         75:11:42:f5:fd:b3:fa:c1:cb:10:7c:e9:11:3d:4e:d8:bf:60:
         24:4f:f9:f6:51:3f:a6:90:ed:64:39:a0:ea:ee:1d:67:d3:a5:
         a1:06:64:67:57:b4:a0:ce:e4:60:30:ab:40:e0:1f:de:9e:2b:
         c2:b1:f7:7a:e2:30:de:55:8c:6f:99:1a:a6:93:15:23:53:aa:
         01:7d:f0:53:27:03:1f:32:30:0b:65:0e:18:10:b2:b4:7a:8f:
         19:61:b9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org