Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e20313432343330.roa
File:                     3231362e3132322e3136352e302f32342d3234203d3e20313432343330.roa (raw, json)
Hash identifier:          9i7iVRUKeVu6T6Ekbd6/Ju+ybUn41bd3LJH3kolNap0=
Subject key identifier:   0A:9B:18:93:11:00:D5:DA:3C:5B:D0:E3:6A:D3:C0:B4:F8:5B:67:4E
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       3CFA8956AD42BBE8C7372D1782C492894C4CE1FA
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e20313432343330.roa
Signing time:             Thu 17 Feb 2022 15:13:37 +0000
ROA not before:           Thu 17 Feb 2022 15:08:37 +0000
ROA not after:            Thu 16 Feb 2023 15:13:37 +0000
asID:                     142430
IP address blocks:        216.122.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fa:89:56:ad:42:bb:e8:c7:37:2d:17:82:c4:92:89:4c:4c:e1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 17 15:08:37 2022 GMT
            Not After : Feb 16 15:13:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:ca:7e:19:c0:f0:b5:98:49:f0:7e:d9:e0:
                    a8:ee:92:6f:96:56:09:82:45:18:e9:32:b4:45:6a:
                    60:b4:50:12:20:3c:fc:02:2f:58:f1:6c:53:6f:6d:
                    d9:2c:4f:42:f1:27:26:9d:37:1e:7e:cb:25:d0:29:
                    f0:7c:57:3c:d0:55:ac:9d:65:9f:40:6a:95:4d:45:
                    2b:46:f1:49:5a:ed:5d:08:e0:b1:b9:c8:36:a3:24:
                    a2:94:bb:c6:59:8e:41:d8:71:78:17:8f:a0:9d:f4:
                    23:03:65:d9:a7:b6:02:be:f1:67:ac:4b:5a:94:37:
                    3e:a5:73:58:f0:48:c8:cf:14:c0:13:99:77:41:06:
                    73:73:03:75:8f:32:ec:ea:8e:84:47:a9:87:d5:c1:
                    00:ac:4f:60:67:8e:36:ad:00:b6:f1:19:44:35:b6:
                    0d:19:4d:0c:c8:1d:32:79:4e:91:7a:47:2d:bd:0c:
                    1c:85:3c:bf:ec:b8:4a:0a:e1:12:0d:b8:7c:40:7f:
                    8a:4b:f3:f6:26:76:98:3b:3e:0a:57:54:5b:2a:bb:
                    8d:91:32:87:54:4c:a7:97:14:c8:59:52:c2:1f:49:
                    76:52:24:dd:6b:e1:65:06:c5:fb:58:87:c4:34:11:
                    b5:95:61:2c:49:32:1c:d1:9e:73:6a:bd:8a:90:53:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9B:18:93:11:00:D5:DA:3C:5B:D0:E3:6A:D3:C0:B4:F8:5B:67:4E
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e20313432343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:46:da:4c:d7:6a:65:58:ef:87:ab:93:c1:3e:2c:0c:5b:04:
         b9:4b:16:71:f3:de:24:fd:33:18:11:91:76:22:21:a6:31:0c:
         68:98:9a:27:27:79:27:7e:fa:a9:c9:94:85:32:49:cc:54:e7:
         29:c8:e0:1f:c4:ec:bb:22:6c:b8:9b:6a:c5:63:33:d7:a9:1b:
         7e:79:62:fe:49:9e:79:7f:8e:cd:05:e8:96:d8:8f:f7:6a:27:
         84:b7:17:ef:1c:5b:81:4f:99:cd:24:57:02:48:df:01:ea:78:
         b4:e6:c7:a0:1b:6e:1e:1b:f2:46:e7:3e:d3:57:79:ce:ce:f5:
         15:e1:41:7b:d7:44:c8:2e:98:3d:b0:07:28:5a:cb:c1:c4:63:
         1d:4e:12:c0:9d:49:38:0a:6f:7e:96:d4:98:c2:78:10:88:45:
         55:c9:9c:92:c0:78:ad:81:a1:60:7a:07:bd:eb:11:6a:c2:ed:
         f1:78:e7:5c:2f:0f:ae:58:65:ad:54:5f:e0:ac:0b:51:e2:50:
         02:21:28:be:1c:6a:88:44:6f:3e:03:ae:1d:67:41:74:80:60:
         91:27:50:96:23:ed:b8:60:74:63:23:5b:87:b9:2a:51:f3:6e:
         88:d3:4d:f6:6a:9e:bb:22:f2:3e:d7:68:e3:2c:71:db:5d:1e:
         a1:f8:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org