Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136382e302f32342d3234203d3e20333935313131.roa
File:                     3231362e3132322e3136382e302f32342d3234203d3e20333935313131.roa (raw, json)
Hash identifier:          gjV0LzF39A6rJs8pkaX1C2OG2DkKlBMmQxojztPQZQU=
Subject key identifier:   54:ED:75:2D:3A:03:D5:DA:FA:55:41:17:70:99:F3:1F:F0:7D:9F:DC
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       564F326CE6EB7BD50FEA0EF39F4B200642DF5B0A
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136382e302f32342d3234203d3e20333935313131.roa
Signing time:             Fri 25 Feb 2022 17:56:21 +0000
ROA not before:           Fri 25 Feb 2022 17:51:21 +0000
ROA not after:            Fri 24 Feb 2023 17:56:21 +0000
asID:                     395111
IP address blocks:        216.122.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:32:6c:e6:eb:7b:d5:0f:ea:0e:f3:9f:4b:20:06:42:df:5b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 25 17:51:21 2022 GMT
            Not After : Feb 24 17:56:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:8f:5d:18:54:70:d8:9c:8f:d0:02:35:6c:
                    2d:4f:cd:d2:b9:d0:fd:b8:5d:9e:10:2b:87:5a:d5:
                    48:52:2b:af:30:c5:81:e7:76:9e:27:33:c5:12:96:
                    4c:87:ce:99:5f:18:01:2c:e6:45:09:13:76:14:54:
                    e5:09:d6:27:93:94:c1:7d:28:4e:26:f2:53:df:c3:
                    57:c3:ed:11:88:d2:81:a6:49:7d:0d:48:45:7c:37:
                    96:95:51:c4:b2:d0:cb:db:03:69:f6:da:4e:ae:63:
                    7a:09:fd:ca:a8:1e:52:ec:31:60:f6:5a:fd:da:e0:
                    17:df:10:97:53:5c:5b:32:fb:37:16:c4:7b:02:44:
                    2c:84:87:bb:fa:67:54:64:f6:df:f1:54:61:29:d8:
                    cf:07:2e:d4:1e:4d:85:34:b7:28:4f:8c:0f:ed:b0:
                    ce:a4:36:22:73:18:2e:60:e7:70:c9:2c:fe:2a:54:
                    fe:df:fd:18:e6:4d:79:1c:e0:b2:0e:42:b0:40:52:
                    b1:b2:f7:40:ae:a8:20:d7:cb:fc:61:b7:c8:f1:10:
                    5b:3b:c9:a1:64:22:5c:65:73:cb:dc:67:ec:75:6f:
                    89:a4:d9:61:9c:54:97:17:e2:f4:f3:64:63:d8:bb:
                    11:a6:c1:17:b5:36:35:e4:3f:7c:8b:12:74:84:5b:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:75:2D:3A:03:D5:DA:FA:55:41:17:70:99:F3:1F:F0:7D:9F:DC
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3136382e302f32342d3234203d3e20333935313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:78:ed:31:47:ac:58:bf:f9:b0:07:6d:97:57:61:d6:bd:6e:
         ef:e4:5c:66:07:cd:d1:6e:e1:dd:b2:71:09:d6:94:6e:58:11:
         62:b0:1c:85:ea:de:77:96:0f:97:18:2d:79:e0:20:21:2d:92:
         ff:c0:f0:57:d3:8d:de:1e:43:f5:18:ad:fc:84:75:9e:53:a3:
         e8:17:bb:74:4d:12:2e:37:67:6d:30:23:2b:7e:bf:32:15:11:
         67:91:ff:48:12:97:f8:4f:40:97:bd:7f:3a:d3:1d:cc:7d:f2:
         f3:df:05:76:ba:6a:bb:c5:c8:f5:7b:29:7f:f4:f5:bb:ae:4e:
         a3:c4:9a:1d:23:2f:fd:ae:43:ce:09:cc:74:6a:f6:3e:e5:d3:
         10:74:79:20:26:57:53:70:de:ef:7d:7c:62:e5:45:ae:60:19:
         14:c4:fa:9f:8c:19:30:49:49:fe:0b:98:5f:63:8e:f0:ed:15:
         9c:02:83:11:ba:c1:3d:5a:51:e4:c4:01:74:fb:1f:4e:94:4a:
         f2:6c:db:eb:b6:35:b2:ed:7d:14:8d:69:69:35:50:61:73:d8:
         ce:9e:38:e3:17:c9:9e:da:20:ac:b5:59:7a:dc:1b:8e:7f:54:
         16:65:a3:00:78:67:51:1c:b3:8e:e0:1a:e2:c9:0e:71:73:ed:
         b1:34:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org