Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137302e302f32342d3234203d3e20333935313131.roa
File:                     3231362e3132322e3137302e302f32342d3234203d3e20333935313131.roa (raw, json)
Hash identifier:          6QKbj/BGEHJ2D7mIDhz3kRa6F/bpcD5Ly3r9PjQcDZ8=
Subject key identifier:   DE:09:29:28:7C:01:26:52:C4:A5:B4:B0:EF:63:67:47:77:07:1E:D8
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       52612E0457C2C29755DAD36F347B48792974A4EE
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137302e302f32342d3234203d3e20333935313131.roa
Signing time:             Fri 25 Feb 2022 17:56:01 +0000
ROA not before:           Fri 25 Feb 2022 17:51:01 +0000
ROA not after:            Fri 24 Feb 2023 17:56:01 +0000
asID:                     395111
IP address blocks:        216.122.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:61:2e:04:57:c2:c2:97:55:da:d3:6f:34:7b:48:79:29:74:a4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 25 17:51:01 2022 GMT
            Not After : Feb 24 17:56:01 2023 GMT
        Subject: CN=3082010A0282010100CF8F0BD5E673C855AAD04E5B2F4FE958E10F467CDD0EA4835FE8F077C0B5ABAE5C3EF08F15E5D768A22CF5404AA2790F82EA9C0D812A28370B0CC04D8106CFD8AC8F95E26E3779B1BF9BCAC915B3845811B7CF72A725E9B7D26C03A94D83B851731D0B6BECD953C81C758F573F8D3839374EEAE1D9F39746AE6823A9AE21449DE0D13A9D1041B4D34A46F3770F8D030AF3FE0AA4BBFB569C33DC2D5BD869093BF20BF1E566F84783020A5609C177F47F116018933A883CB6BB4B0026CF11DC32974F284DC15AE139D0BE09E9C0102190B031D6B6FCE46E18E9D74DE0658F050A07ACD8F12E9BD1FA5FC1DF53D6BCCF7B927A636805F68D9A98F2EF889E138F1D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8f:0b:d5:e6:73:c8:55:aa:d0:4e:5b:2f:4f:
                    e9:58:e1:0f:46:7c:dd:0e:a4:83:5f:e8:f0:77:c0:
                    b5:ab:ae:5c:3e:f0:8f:15:e5:d7:68:a2:2c:f5:40:
                    4a:a2:79:0f:82:ea:9c:0d:81:2a:28:37:0b:0c:c0:
                    4d:81:06:cf:d8:ac:8f:95:e2:6e:37:79:b1:bf:9b:
                    ca:c9:15:b3:84:58:11:b7:cf:72:a7:25:e9:b7:d2:
                    6c:03:a9:4d:83:b8:51:73:1d:0b:6b:ec:d9:53:c8:
                    1c:75:8f:57:3f:8d:38:39:37:4e:ea:e1:d9:f3:97:
                    46:ae:68:23:a9:ae:21:44:9d:e0:d1:3a:9d:10:41:
                    b4:d3:4a:46:f3:77:0f:8d:03:0a:f3:fe:0a:a4:bb:
                    fb:56:9c:33:dc:2d:5b:d8:69:09:3b:f2:0b:f1:e5:
                    66:f8:47:83:02:0a:56:09:c1:77:f4:7f:11:60:18:
                    93:3a:88:3c:b6:bb:4b:00:26:cf:11:dc:32:97:4f:
                    28:4d:c1:5a:e1:39:d0:be:09:e9:c0:10:21:90:b0:
                    31:d6:b6:fc:e4:6e:18:e9:d7:4d:e0:65:8f:05:0a:
                    07:ac:d8:f1:2e:9b:d1:fa:5f:c1:df:53:d6:bc:cf:
                    7b:92:7a:63:68:05:f6:8d:9a:98:f2:ef:88:9e:13:
                    8f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:29:28:7C:01:26:52:C4:A5:B4:B0:EF:63:67:47:77:07:1E:D8
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137302e302f32342d3234203d3e20333935313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:a2:89:3a:a4:c0:81:00:31:36:fc:b1:c7:20:89:c8:07:
         c2:ba:ca:92:c8:40:c8:6c:c9:e8:e8:6a:d9:75:e2:7e:ba:8f:
         67:9e:bf:c6:65:81:1d:92:19:3e:61:c2:17:db:2b:b7:b3:5f:
         29:ed:7e:dd:03:c3:b7:3e:5c:ac:b1:cf:c7:7c:16:9f:9e:e4:
         a8:4d:f4:37:db:3e:a9:b0:45:1b:e7:b7:8c:5f:8e:06:8c:fa:
         d6:fb:c8:d7:d5:13:41:8e:ea:88:0d:48:99:f6:27:68:4b:38:
         5f:5d:04:95:1b:f4:c3:95:41:70:72:cc:3b:c3:b1:d4:86:f6:
         3f:a3:b3:3c:23:79:74:e2:95:36:6a:86:e1:5e:e1:84:17:dc:
         0f:6b:f7:2c:7a:26:3e:20:e2:30:23:04:e8:3d:04:d1:4f:32:
         00:8d:53:40:5a:c0:a6:8c:fa:9d:31:15:a0:14:e4:b4:eb:bf:
         61:61:81:69:5b:9e:63:b7:2b:e9:61:a7:53:ac:53:d6:ab:6d:
         98:37:a4:9f:11:22:49:6f:40:bf:82:3c:2a:6c:81:ce:a0:bd:
         96:a5:a6:3f:2d:12:23:3d:99:3e:a6:69:60:3e:16:b4:1e:a2:
         c6:68:e1:d8:d6:2b:06:ba:33:3c:63:69:9f:59:88:40:9b:f4:
         90:6b:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org