Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136342e302f32342d3234203d3e20333937343233.roa
File:                     3231362e3132322e3136342e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          vbr67Mmuaw/Ck2ZOn4IHyqYaBppfrDU+paR/CyxJh3U=
Subject key identifier:   0F:43:91:27:2E:9D:F7:DB:01:FD:9E:83:2A:EE:B0:A8:3E:45:80:AF
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       77CFF4BA35E71923F110816F73DC3A4DFB4659AF
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136342e302f32342d3234203d3e20333937343233.roa
Signing time:             Wed 09 Feb 2022 15:23:39 +0000
ROA not before:           Wed 09 Feb 2022 15:18:39 +0000
ROA not after:            Wed 08 Feb 2023 15:23:39 +0000
asID:                     397423
IP address blocks:        216.122.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cf:f4:ba:35:e7:19:23:f1:10:81:6f:73:dc:3a:4d:fb:46:59:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb  9 15:18:39 2022 GMT
            Not After : Feb  8 15:23:39 2023 GMT
        Subject: CN=3082010A0282010100D2BDAD104A576A63E879303DB42F35C462A273F778B0C194086B73BAD261151C508C92583751812CD6D3E0EBEA42E023B23559738D7949CF673387681D08E70ACA8A68AE70A2D9B29C4DEA75D3D19FB0F4D4721D9A9C250FE29643E1A62EF86D6E444B42559B24557ADB461FAE19745697D3D6A636FF9E147D16ACBEF4E739AB645C915DD63A1E51F85FD428F7764A1B67B835F70CA2E2CFBED44E59FCCACEF5D2E326E74F10CE0F12684F43D3FC61EC8840566885F8371AFC2B0CD948DC7D32514723C24F782C2514E5ABECF22EC60C14903C6406C7E2B13FA368881B0BB0D35CCBBA58FBC2E851EF7ACA7CA1DC9A1F71D472880964BDD09EF65F5A0CF3B74B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:ad:10:4a:57:6a:63:e8:79:30:3d:b4:2f:
                    35:c4:62:a2:73:f7:78:b0:c1:94:08:6b:73:ba:d2:
                    61:15:1c:50:8c:92:58:37:51:81:2c:d6:d3:e0:eb:
                    ea:42:e0:23:b2:35:59:73:8d:79:49:cf:67:33:87:
                    68:1d:08:e7:0a:ca:8a:68:ae:70:a2:d9:b2:9c:4d:
                    ea:75:d3:d1:9f:b0:f4:d4:72:1d:9a:9c:25:0f:e2:
                    96:43:e1:a6:2e:f8:6d:6e:44:4b:42:55:9b:24:55:
                    7a:db:46:1f:ae:19:74:56:97:d3:d6:a6:36:ff:9e:
                    14:7d:16:ac:be:f4:e7:39:ab:64:5c:91:5d:d6:3a:
                    1e:51:f8:5f:d4:28:f7:76:4a:1b:67:b8:35:f7:0c:
                    a2:e2:cf:be:d4:4e:59:fc:ca:ce:f5:d2:e3:26:e7:
                    4f:10:ce:0f:12:68:4f:43:d3:fc:61:ec:88:40:56:
                    68:85:f8:37:1a:fc:2b:0c:d9:48:dc:7d:32:51:47:
                    23:c2:4f:78:2c:25:14:e5:ab:ec:f2:2e:c6:0c:14:
                    90:3c:64:06:c7:e2:b1:3f:a3:68:88:1b:0b:b0:d3:
                    5c:cb:ba:58:fb:c2:e8:51:ef:7a:ca:7c:a1:dc:9a:
                    1f:71:d4:72:88:09:64:bd:d0:9e:f6:5f:5a:0c:f3:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:43:91:27:2E:9D:F7:DB:01:FD:9E:83:2A:EE:B0:A8:3E:45:80:AF
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136342e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:76:b0:7f:80:07:24:f9:94:21:c7:6d:4f:b2:da:5c:04:
         cb:94:b0:08:c6:0f:c9:b1:5e:c0:95:cc:bb:65:19:d3:e5:f0:
         e1:d4:13:ef:05:d6:1f:1f:e3:8c:e9:0a:e5:f9:30:84:48:67:
         fc:79:f4:03:04:ae:d5:a5:9f:1d:a2:3c:4b:cf:4e:f3:9f:a0:
         bb:e8:4a:4e:0f:61:24:e1:23:29:c0:a4:de:13:4d:1b:d0:e3:
         c0:8f:60:95:de:ab:8b:13:9b:4f:33:d2:7e:54:26:45:47:57:
         0d:a9:da:84:6f:31:3d:20:c4:d8:17:22:26:d1:2e:20:41:94:
         b4:4c:e2:ff:58:76:78:6e:d4:0f:9a:4b:c4:ed:40:f9:06:2f:
         c9:63:16:10:85:c0:61:04:6b:b9:3f:35:95:af:05:03:ec:39:
         eb:09:a3:d8:cc:df:f1:97:f1:94:32:5d:85:4e:37:22:19:8b:
         8b:b2:38:be:ac:31:40:ee:dd:9b:26:54:b4:98:e7:9c:70:fa:
         60:78:2e:5d:29:64:17:7c:31:b0:52:46:d3:03:1f:d7:c6:1e:
         6b:e1:f4:52:8e:55:c2:be:c4:21:43:65:12:e6:fc:85:d6:1c:
         c3:ef:e9:b7:57:bb:45:7f:2f:35:56:90:a8:f9:34:cc:3a:23:
         a9:d0:09:46
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIUd8/0ujXnGSPxEIFvc9w6TftGWa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjAyMDkxNTE4MzlaFw0yMzAyMDgxNTIzMzlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJCREFEMTA0QTU3NkE2M0U4
NzkzMDNEQjQyRjM1QzQ2MkEyNzNGNzc4QjBDMTk0MDg2QjczQkFEMjYxMTUxQzUw
OEM5MjU4Mzc1MTgxMkNENkQzRTBFQkVBNDJFMDIzQjIzNTU5NzM4RDc5NDlDRjY3
MzM4NzY4MUQwOEU3MEFDQThBNjhBRTcwQTJEOUIyOUM0REVBNzVEM0QxOUZCMEY0
RDQ3MjFEOUE5QzI1MEZFMjk2NDNFMUE2MkVGODZENkU0NDRCNDI1NTlCMjQ1NTdB
REI0NjFGQUUxOTc0NTY5N0QzRDZBNjM2RkY5RTE0N0QxNkFDQkVGNEU3MzlBQjY0
NUM5MTVERDYzQTFFNTFGODVGRDQyOEY3NzY0QTFCNjdCODM1RjcwQ0EyRTJDRkJF
RDQ0RTU5RkNDQUNFRjVEMkUzMjZFNzRGMTBDRTBGMTI2ODRGNDNEM0ZDNjFFQzg4
NDA1NjY4ODVGODM3MUFGQzJCMENEOTQ4REM3RDMyNTE0NzIzQzI0Rjc4MkMyNTE0
RTVBQkVDRjIyRUM2MEMxNDkwM0M2NDA2QzdFMkIxM0ZBMzY4ODgxQjBCQjBEMzVD
Q0JCQTU4RkJDMkU4NTFFRjdBQ0E3Q0ExREM5QTFGNzFENDcyODgwOTY0QkREMDlF
RjY1RjVBMENGM0I3NEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0r2tEEpXamPoeTA9tC81xGKic/d4sMGUCGtzutJhFRxQjJJYN1GB
LNbT4OvqQuAjsjVZc415Sc9nM4doHQjnCsqKaK5wotmynE3qddPRn7D01HIdmpwl
D+KWQ+GmLvhtbkRLQlWbJFV620Yfrhl0VpfT1qY2/54UfRasvvTnOatkXJFd1joe
Ufhf1Cj3dkobZ7g19wyi4s++1E5Z/MrO9dLjJudPEM4PEmhPQ9P8YeyIQFZohfg3
GvwrDNlI3H0yUUcjwk94LCUU5avs8i7GDBSQPGQGx+KxP6NoiBsLsNNcy7pY+8Lo
Ue96ynyh3JofcdRyiAlkvdCe9l9aDPO3SwIDAQABo4ICXjCCAlowHQYDVR0OBBYE
FA9DkScunffbAf2egyrusKg+RYCvMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGV
BggrBgEFBQcwC4aBiHJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzM0MzIz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANh6pDANBgkqhkiG9w0BAQsFAAOCAQEAS6p2sH+AByT5lCHH
bU+y2lwEy5SwCMYPybFewJXMu2UZ0+Xw4dQT7wXWHx/jjOkK5fkwhEhn/Hn0AwSu
1aWfHaI8S89O85+gu+hKTg9hJOEjKcCk3hNNG9DjwI9gld6rixObTzPSflQmRUdX
DanahG8xPSDE2BciJtEuIEGUtEzi/1h2eG7UD5pLxO1A+QYvyWMWEIXAYQRruT81
la8FA+w56wmj2Mzf8ZfxlDJdhU43IhmLi7I4vqwxQO7dmyZUtJjnnHD6YHguXSlk
F3wxsFJG0wMf18Yea+H0Uo5Vwr7EIUNlEub8hdYcw+/pt1e7RX8vNVaQqPk0zDoj
qdAJRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org