Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137322e302f32342d3234203d3e203430363736.roa
File:                     3231362e3132322e3137322e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          lLwADdsN1MGY9ibFB96e8mfQwCZib8yNjKnVDUMw62A=
Subject key identifier:   78:28:88:A4:DF:B0:1F:DB:86:FB:A2:1F:F8:82:35:A9:E8:61:6E:9D
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1D9BF9955B3AF0C58E68B94469223D3D028E9BEC
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137322e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 11 Apr 2022 13:01:42 +0000
ROA not before:           Mon 11 Apr 2022 12:56:42 +0000
ROA not after:            Mon 10 Apr 2023 13:01:42 +0000
asID:                     40676
IP address blocks:        216.122.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9b:f9:95:5b:3a:f0:c5:8e:68:b9:44:69:22:3d:3d:02:8e:9b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 11 12:56:42 2022 GMT
            Not After : Apr 10 13:01:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:8c:d9:10:3f:30:0e:ea:62:29:6f:0e:47:
                    e0:74:2d:e7:8a:1a:42:d4:11:bd:13:f8:f7:cd:98:
                    06:90:52:6e:9a:9c:d2:84:2d:df:48:d2:86:8f:67:
                    92:96:dd:87:20:b3:b8:7f:4d:cd:68:d4:5f:9e:9b:
                    cd:6e:c5:ee:90:d6:21:6c:6c:92:7d:61:52:e6:95:
                    89:39:1c:c9:86:ea:ef:b5:98:45:46:dc:d1:75:d5:
                    6d:fd:1c:8f:46:39:00:89:b2:a1:4f:45:84:ae:14:
                    da:cd:a1:32:f2:68:0e:8f:58:0e:23:17:e0:39:25:
                    97:21:be:58:82:83:3e:af:ce:14:65:a1:3a:d0:fe:
                    af:c5:a5:4f:76:78:75:32:d9:9f:de:0b:4a:15:ea:
                    33:b6:56:cd:cc:20:1c:1a:f6:f9:84:29:76:fc:02:
                    f8:94:5b:fd:5a:0d:b7:b5:e9:b6:eb:45:80:8c:19:
                    a0:59:c1:75:e3:01:a6:62:8e:f1:5b:9f:5b:cf:da:
                    30:5c:9f:fe:e1:08:a7:fb:6d:9c:db:88:1a:65:ef:
                    48:96:c9:fe:1f:d5:55:1a:73:de:b8:5a:25:38:13:
                    5c:54:e6:1d:04:fa:aa:53:ff:36:6b:bc:98:ec:da:
                    11:8c:bf:57:71:d1:26:f9:11:f4:b6:02:48:98:0f:
                    3f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:28:88:A4:DF:B0:1F:DB:86:FB:A2:1F:F8:82:35:A9:E8:61:6E:9D
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137322e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:17:a7:af:0f:d8:15:a8:6b:df:ce:28:10:7d:bd:58:18:df:
         8a:96:3c:93:9c:dc:46:54:21:56:ce:a8:39:f3:65:c4:3c:1a:
         28:84:2f:a2:a0:6d:05:90:6d:42:6c:e5:77:bf:7e:78:1d:d8:
         cc:5f:6f:d7:38:15:93:e2:83:c4:90:6b:80:2d:67:22:f9:e8:
         a5:5f:c0:bd:1d:9d:98:0d:46:41:8b:e2:01:f5:ee:18:3b:f3:
         8d:aa:15:74:43:9e:b5:ec:ee:e1:32:3d:d6:e9:bb:22:8d:76:
         1a:51:34:57:f8:8c:40:e8:ef:95:f2:cf:78:ce:b9:cc:0e:f1:
         10:4b:30:09:48:ea:40:5b:2e:3d:82:e8:02:f4:ab:11:03:1f:
         95:f0:49:12:33:59:ce:d4:5e:38:88:f5:25:12:6f:bf:c1:4b:
         b6:df:df:a0:55:41:6e:4d:65:ae:60:ae:3a:f9:df:ef:62:a1:
         d1:6e:5a:84:63:f5:d1:30:95:dd:fe:33:98:5e:96:51:ad:80:
         c6:4d:25:3d:44:5c:fe:ab:61:0c:e5:4c:d5:f8:f3:f7:43:a8:
         c8:18:2d:4b:2b:12:76:3e:dc:3f:3d:73:0e:de:aa:d8:24:92:
         4a:25:f0:40:9a:30:99:b3:46:6a:c6:8b:53:c3:34:5b:e9:a3:
         c0:3c:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org