Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137332e302f32342d3234203d3e20323731393335.roa
File:                     3231362e3132322e3137332e302f32342d3234203d3e20323731393335.roa (raw, json)
Hash identifier:          bxvnd+OfMpP4xgCf56S6AZG0Rc2gWsK2+X/Zcgnphhk=
Subject key identifier:   72:A4:A4:BF:42:47:59:71:D7:DE:B1:AE:B2:97:C6:0F:7C:05:88:35
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       73162B077FC361D07631BB323C7E8A4E9C0CB3B9
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137332e302f32342d3234203d3e20323731393335.roa
Signing time:             Fri 15 Apr 2022 01:10:46 +0000
ROA not before:           Fri 15 Apr 2022 01:05:46 +0000
ROA not after:            Fri 14 Apr 2023 01:10:46 +0000
asID:                     271935
IP address blocks:        216.122.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:16:2b:07:7f:c3:61:d0:76:31:bb:32:3c:7e:8a:4e:9c:0c:b3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 15 01:05:46 2022 GMT
            Not After : Apr 14 01:10:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:06:57:9c:b2:da:7f:34:41:3f:43:b5:0b:
                    db:8d:e1:9d:1e:ed:58:58:8e:83:b0:3c:5c:bd:fa:
                    62:b4:85:26:4d:1b:0c:46:fc:a4:3a:b2:37:f4:2d:
                    84:5b:d6:2b:a0:2a:33:f8:8f:19:a4:18:f4:b1:98:
                    fd:d5:c1:08:c4:5f:b6:b5:0a:7d:23:47:d5:48:2a:
                    63:93:22:7a:15:02:9b:02:4f:32:7f:16:4e:b3:57:
                    49:9f:c7:0d:de:d3:4e:7b:40:06:f2:e9:a4:c1:35:
                    9e:6c:09:2c:95:ad:4f:e0:71:bb:d6:14:39:60:63:
                    2b:2f:a6:97:24:ad:15:f4:c2:74:f8:5d:c7:0b:46:
                    a2:f6:ff:f4:0c:8a:c8:8a:21:ea:37:80:91:a1:6a:
                    b1:c2:c5:fe:10:ec:19:69:82:e0:86:58:11:64:a9:
                    0b:37:4f:e1:76:dc:0e:00:23:6f:5b:a0:be:ce:d7:
                    98:20:3f:7b:2f:87:36:27:b0:b4:43:1b:fc:47:c1:
                    d0:07:c0:e2:06:82:7b:24:1e:fb:11:92:e7:79:14:
                    64:2f:ec:b3:73:98:1c:a4:64:6a:21:1f:6f:02:13:
                    27:65:76:e2:cd:03:34:82:05:4a:48:96:04:77:8a:
                    9e:72:1c:c5:42:6d:42:c1:73:2d:c2:71:b0:4b:00:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A4:A4:BF:42:47:59:71:D7:DE:B1:AE:B2:97:C6:0F:7C:05:88:35
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137332e302f32342d3234203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:6b:1d:88:8a:61:c5:65:e5:1c:e9:9d:86:56:7c:0b:e5:14:
         35:55:2c:15:24:34:f8:0c:7f:39:3f:89:41:ed:d0:3d:7e:ef:
         c4:26:e4:78:a3:0b:4d:ce:c9:cb:bc:d9:23:e8:59:d6:ff:fe:
         99:29:56:c8:14:e2:e1:89:b2:b9:45:21:96:ce:87:91:79:1a:
         51:d2:e7:6b:f7:a3:5b:47:be:53:71:f1:b7:5e:48:50:b8:bc:
         3a:da:26:a6:21:94:b0:9a:01:44:69:2c:7a:1c:b4:09:3f:3d:
         ee:45:a0:22:bc:48:b2:07:ff:65:20:da:62:41:d0:43:3e:47:
         47:bc:20:aa:85:00:10:14:1d:0a:6f:da:25:bf:34:2e:c3:60:
         23:40:e9:44:0a:73:8e:71:f0:6b:91:e2:3b:c1:18:f8:b4:54:
         a2:04:dc:1b:b8:b5:80:50:9a:1c:46:dc:ab:32:fe:66:a2:4e:
         4d:a1:76:44:e2:23:06:1c:bf:da:ec:dd:d4:fe:c1:ba:0c:c3:
         58:1c:e6:46:9b:a8:3e:ab:01:06:47:0f:3e:eb:2e:9a:57:21:
         77:43:b6:62:e2:ea:fd:97:3b:34:a4:e8:e8:64:49:3d:95:cf:
         46:18:b5:48:c8:c0:37:16:00:67:13:48:ed:61:08:22:93:da:
         13:eb:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org