Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e20333938373739.roa
File:                     3231362e3132322e3136352e302f32342d3234203d3e20333938373739.roa (raw, json)
Hash identifier:          AGlkOUhR/jZ6ZCAHQ+cAhONa8NX6B9an2/7kXFSeTq0=
Subject key identifier:   5C:89:68:A2:5F:8C:41:F8:54:A9:FE:E7:BD:F5:6E:EF:1B:FF:FB:72
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       5F124912B5113ABE7899EC8ABF3CD9F9EEDF2DCC
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e20333938373739.roa
Signing time:             Tue 17 May 2022 17:32:25 +0000
ROA not before:           Tue 17 May 2022 17:27:25 +0000
ROA not after:            Tue 16 May 2023 17:32:25 +0000
asID:                     398779
IP address blocks:        216.122.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:12:49:12:b5:11:3a:be:78:99:ec:8a:bf:3c:d9:f9:ee:df:2d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May 17 17:27:25 2022 GMT
            Not After : May 16 17:32:25 2023 GMT
        Subject: CN=3082010A0282010100D323EFA4AAB634E8AA734AB48BA505C0C49EB3B4FBAAF75B5643BEC0C1FA09BC2EB6346578669D034978DC34F8C9CEA58CB1B1F11E4BA0B3DB34008DB8D8CEBBAC2B2F68A00A238012C82572DBD3DD557C48ED462E1F53071037B5DB03DE981F34B9FD60D59FCE4F203456F56FB5A26B28DD1A574F91AAA191DE13319F361230A2EBCCA9F089E53D1531260D7CB34C6D7AAD32DE7D2359A9D1BDC6EA76525CA62B5D735C87BD2FEF0BFF8CF017B075440479687E3E7C6FEE3C4649C10B2E90487EC2625C869FC8C28C873996CD7D1549DBA050CC7CD7ED5848623847271FDA713BCFA094623A77069E49415D1D949865BFAC7B7C12D8A7292F44DB4F8943DA170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:ef:a4:aa:b6:34:e8:aa:73:4a:b4:8b:a5:
                    05:c0:c4:9e:b3:b4:fb:aa:f7:5b:56:43:be:c0:c1:
                    fa:09:bc:2e:b6:34:65:78:66:9d:03:49:78:dc:34:
                    f8:c9:ce:a5:8c:b1:b1:f1:1e:4b:a0:b3:db:34:00:
                    8d:b8:d8:ce:bb:ac:2b:2f:68:a0:0a:23:80:12:c8:
                    25:72:db:d3:dd:55:7c:48:ed:46:2e:1f:53:07:10:
                    37:b5:db:03:de:98:1f:34:b9:fd:60:d5:9f:ce:4f:
                    20:34:56:f5:6f:b5:a2:6b:28:dd:1a:57:4f:91:aa:
                    a1:91:de:13:31:9f:36:12:30:a2:eb:cc:a9:f0:89:
                    e5:3d:15:31:26:0d:7c:b3:4c:6d:7a:ad:32:de:7d:
                    23:59:a9:d1:bd:c6:ea:76:52:5c:a6:2b:5d:73:5c:
                    87:bd:2f:ef:0b:ff:8c:f0:17:b0:75:44:04:79:68:
                    7e:3e:7c:6f:ee:3c:46:49:c1:0b:2e:90:48:7e:c2:
                    62:5c:86:9f:c8:c2:8c:87:39:96:cd:7d:15:49:db:
                    a0:50:cc:7c:d7:ed:58:48:62:38:47:27:1f:da:71:
                    3b:cf:a0:94:62:3a:77:06:9e:49:41:5d:1d:94:98:
                    65:bf:ac:7b:7c:12:d8:a7:29:2f:44:db:4f:89:43:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:68:A2:5F:8C:41:F8:54:A9:FE:E7:BD:F5:6E:EF:1B:FF:FB:72
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136352e302f32342d3234203d3e20333938373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:17:79:9f:2e:d2:cc:e2:d6:90:6c:1c:cf:bb:27:eb:f0:f9:
         3c:b6:ea:69:d3:c2:9d:72:a1:a5:1f:53:81:8d:63:71:67:9e:
         5b:72:b6:95:a4:54:dd:fb:da:40:0d:28:48:ea:8f:af:77:6c:
         cf:99:2d:aa:0f:98:5f:45:33:be:0a:00:e5:bb:81:27:20:07:
         e2:14:02:86:7a:73:d6:06:9c:e3:19:82:79:16:27:b8:69:87:
         25:f2:74:08:0c:de:09:4c:af:39:19:d2:58:18:9c:02:01:1f:
         d7:bd:77:83:ac:8e:84:73:dd:00:d5:21:6c:48:47:4c:b8:0c:
         cc:c4:c9:02:67:52:de:d6:df:0f:13:e1:b0:fd:23:7d:e3:fb:
         b4:ac:3c:39:0e:67:b1:90:06:9d:b9:e5:5e:4a:f9:23:13:6d:
         ca:d9:99:e4:02:ca:44:d0:58:32:45:90:d0:3d:ad:0b:e1:9d:
         24:45:10:cc:fa:77:c6:03:f2:ba:66:06:1e:e7:84:95:73:b8:
         f5:bc:bc:65:21:7d:20:ac:3b:14:bc:f9:ac:f9:e9:71:b4:a9:
         a5:28:23:ae:ff:28:4b:5a:17:3c:b1:06:11:b1:66:73:b5:b9:
         51:f4:b5:95:e1:bd:58:03:90:93:a8:ab:75:8a:c5:78:92:7d:
         c7:d1:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org