Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136362e302f32342d3234203d3e203133323133.roa
File:                     3231362e3132322e3136362e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          QLq5kpx0XTm8MEhh+pgYr/8E6+zRB5KCkhAQutbsgyo=
Subject key identifier:   E4:E7:50:7B:F5:4F:87:CF:F3:87:C6:93:A7:CB:22:D2:51:BC:59:3A
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1AEDA0B38232A9C65D89E83AA62C966A98F20ACC
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136362e302f32342d3234203d3e203133323133.roa
Signing time:             Wed 23 Feb 2022 07:17:54 +0000
ROA not before:           Wed 23 Feb 2022 07:12:54 +0000
ROA not after:            Wed 22 Feb 2023 07:17:54 +0000
asID:                     13213
IP address blocks:        216.122.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ed:a0:b3:82:32:a9:c6:5d:89:e8:3a:a6:2c:96:6a:98:f2:0a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 23 07:12:54 2022 GMT
            Not After : Feb 22 07:17:54 2023 GMT
        Subject: CN=3082010A0282010100DCC9FE915BF469FB7D55B797C440B4556A574EDE66E99896DDC7168CC5FBFEC0AFABB1DE353991C9B52DFC324D27F8D1B99E8CBBD367C0C271363100E680FD46508EE7D77E2FC810FFD178DB0CD9A76DD38051D21149EE110A5B61670C064079D70F00067FC390DA21E14F49DEED6D0CEF01F1441CEF7B8B95D0FCB6BF8E7BA51D05303028C9F86E9265BC9535F18DEB4A4FE3901012564D6E397D1A41E1C69232A2607FE9A28272EF2EA545EFA02D75DA6D01B6A87A7F28A209E73F7E73297CB804A01D86E6315ADA8EBB067AC7C497779FDF1159DF6C531A50E3FDCABEA8FF3DD870646768DED951AAB76F796E22D5B7B3BA082E7DF5FF11AC2DF6FA12EE2F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c9:fe:91:5b:f4:69:fb:7d:55:b7:97:c4:40:
                    b4:55:6a:57:4e:de:66:e9:98:96:dd:c7:16:8c:c5:
                    fb:fe:c0:af:ab:b1:de:35:39:91:c9:b5:2d:fc:32:
                    4d:27:f8:d1:b9:9e:8c:bb:d3:67:c0:c2:71:36:31:
                    00:e6:80:fd:46:50:8e:e7:d7:7e:2f:c8:10:ff:d1:
                    78:db:0c:d9:a7:6d:d3:80:51:d2:11:49:ee:11:0a:
                    5b:61:67:0c:06:40:79:d7:0f:00:06:7f:c3:90:da:
                    21:e1:4f:49:de:ed:6d:0c:ef:01:f1:44:1c:ef:7b:
                    8b:95:d0:fc:b6:bf:8e:7b:a5:1d:05:30:30:28:c9:
                    f8:6e:92:65:bc:95:35:f1:8d:eb:4a:4f:e3:90:10:
                    12:56:4d:6e:39:7d:1a:41:e1:c6:92:32:a2:60:7f:
                    e9:a2:82:72:ef:2e:a5:45:ef:a0:2d:75:da:6d:01:
                    b6:a8:7a:7f:28:a2:09:e7:3f:7e:73:29:7c:b8:04:
                    a0:1d:86:e6:31:5a:da:8e:bb:06:7a:c7:c4:97:77:
                    9f:df:11:59:df:6c:53:1a:50:e3:fd:ca:be:a8:ff:
                    3d:d8:70:64:67:68:de:d9:51:aa:b7:6f:79:6e:22:
                    d5:b7:b3:ba:08:2e:7d:f5:ff:11:ac:2d:f6:fa:12:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E7:50:7B:F5:4F:87:CF:F3:87:C6:93:A7:CB:22:D2:51:BC:59:3A
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136362e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:00:00:ac:43:4b:60:1e:9e:f7:c2:af:c0:fb:33:95:60:c5:
         b6:65:8c:19:b8:98:63:eb:81:7d:65:7f:28:0e:cc:b9:70:af:
         10:33:43:16:41:da:52:e1:69:7d:00:58:65:5c:96:91:29:76:
         71:06:d7:56:47:1e:41:cd:04:3d:39:2b:c5:89:34:33:e1:65:
         72:23:61:13:63:ee:56:da:a2:54:00:9a:92:ec:41:fb:1b:00:
         dd:49:df:4e:54:4e:e6:ce:84:11:0e:10:ae:9f:cb:26:c2:d2:
         2b:96:b1:e2:8d:6b:13:74:62:34:5f:15:89:6e:3f:00:be:65:
         16:4e:f8:f5:04:cb:cd:36:7a:a7:9e:4a:7b:a7:57:2a:63:02:
         2c:71:4b:52:81:d2:90:75:c5:0b:23:6e:a0:f6:1c:3c:7c:32:
         3e:88:a5:8d:75:b2:59:01:49:c2:9f:92:cd:0e:dd:8e:54:fa:
         24:a8:42:58:8c:e6:c8:08:82:18:9d:4d:9b:b9:f6:b4:5b:8a:
         df:99:50:25:c7:47:05:a6:d9:66:8a:75:b3:5a:bc:a4:af:14:
         ed:ec:54:fc:b3:c3:68:34:d2:79:f9:87:a5:58:c0:a5:16:ce:
         ad:35:60:bf:5c:cd:2a:4a:3b:03:57:51:8c:63:f8:28:c8:35:
         f9:35:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org