Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137332e302f32342d3234203d3e203430363736.roa
File:                     3231362e3132322e3137332e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          6WnY5j5iDUI6aV+xPWUBqRoxzdxH2T/UduHjZh5WZmA=
Subject key identifier:   E3:6A:EB:EA:9F:52:35:73:87:1D:27:31:29:93:04:96:07:F9:24:4C
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       5AE371650F8CC27DF06E467E5FB56C3B5EE828D4
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137332e302f32342d3234203d3e203430363736.roa
Signing time:             Wed 08 Jun 2022 13:47:58 +0000
ROA not before:           Wed 08 Jun 2022 13:42:58 +0000
ROA not after:            Wed 07 Jun 2023 13:47:58 +0000
asID:                     40676
IP address blocks:        216.122.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e3:71:65:0f:8c:c2:7d:f0:6e:46:7e:5f:b5:6c:3b:5e:e8:28:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jun  8 13:42:58 2022 GMT
            Not After : Jun  7 13:47:58 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:4e:6c:9b:ba:b4:fc:0c:88:0d:dc:07:dc:
                    e9:e3:29:3b:93:e1:a6:b8:ca:ad:75:f4:0c:d9:60:
                    48:98:6e:c6:c8:11:93:20:3c:61:8c:01:15:43:3c:
                    94:90:27:21:59:f3:40:92:89:a4:da:ff:9c:d7:76:
                    e9:4e:a0:a2:a7:74:5b:8d:9e:7a:e3:ab:f4:0c:ea:
                    bc:ce:a5:2b:14:3e:56:8f:f8:e4:f5:0c:29:77:e1:
                    ab:db:97:88:e6:68:55:aa:82:51:de:08:92:56:0f:
                    50:32:58:7d:ad:d8:d1:2d:b7:60:08:1f:b1:09:0b:
                    14:98:05:fc:9f:18:97:b5:e1:e0:dc:ba:8b:45:fb:
                    35:4e:48:54:11:82:e3:66:4e:2b:2f:20:d3:40:b6:
                    f0:36:28:34:e7:4b:40:03:e3:30:0f:0d:d4:f2:f6:
                    40:d1:b3:64:1f:a7:8c:d6:20:c0:ad:d0:26:88:a5:
                    0a:ae:e2:bb:ea:75:44:cd:22:e6:ea:2d:bd:22:7f:
                    9b:5f:f3:68:38:e5:da:4a:b7:91:33:a0:9f:d1:a0:
                    00:17:0f:ce:ed:28:4f:1d:92:8a:da:e0:b3:a9:52:
                    b4:76:3e:86:a9:da:47:ac:07:5a:7c:3d:30:08:3d:
                    70:ce:b5:63:2f:c7:37:ce:4c:7f:66:08:98:a6:c8:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6A:EB:EA:9F:52:35:73:87:1D:27:31:29:93:04:96:07:F9:24:4C
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137332e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:24:84:c3:42:92:bd:b7:f8:ef:34:bd:11:5e:25:19:ca:8b:
         e4:85:a5:6a:d2:3e:64:a7:cb:d6:be:4c:c8:51:06:69:c0:45:
         f2:e0:d1:c6:1d:dc:b6:a5:09:25:48:9c:4a:f9:69:09:bc:6b:
         6e:ba:70:80:06:ac:0b:c9:36:db:d2:e7:3b:2a:ab:ca:4b:25:
         39:aa:4d:01:7b:be:93:ea:10:98:b9:d4:e9:9e:0d:46:13:70:
         04:39:8f:53:b5:c4:b5:31:e3:35:ac:2c:17:fa:27:ac:53:55:
         c4:6c:46:78:58:3d:da:22:4e:4b:06:3d:39:7c:22:6b:00:8d:
         b7:3c:95:e2:ae:80:b6:7e:21:3f:6d:6a:a5:fa:a1:44:f5:73:
         4f:ae:a1:83:87:3f:a1:2e:b6:19:51:93:d2:c6:19:94:f4:06:
         52:8c:59:40:a5:1a:8c:f6:98:40:3f:bd:cd:b4:3c:36:50:ff:
         71:77:a9:89:28:75:e9:ee:68:c0:cb:fe:d0:97:51:d3:6f:c8:
         d1:c3:79:ef:46:0a:3a:03:a6:13:27:9c:bc:f5:b2:d5:26:ef:
         b6:6b:67:b0:16:be:a7:02:c6:50:5e:d5:17:18:88:f3:b7:2e:
         50:0a:87:1c:2c:7a:21:6f:d2:74:9f:0e:aa:c1:02:12:b0:87:
         2d:fc:a1:c4
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUWuNxZQ+Mwn3wbkZ+X7VsO17oKNQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA2MDgxMzQyNThaFw0yMzA2MDcxMzQ3NThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc5ODRFNkM5QkJBQjRGQzBD
ODgwRERDMDdEQ0U5RTMyOTNCOTNFMUE2QjhDQUFENzVGNDBDRDk2MDQ4OTg2RUM2
QzgxMTkzMjAzQzYxOEMwMTE1NDMzQzk0OTAyNzIxNTlGMzQwOTI4OUE0REFGRjlD
RDc3NkU5NEVBMEEyQTc3NDVCOEQ5RTdBRTNBQkY0MENFQUJDQ0VBNTJCMTQzRTU2
OEZGOEU0RjUwQzI5NzdFMUFCREI5Nzg4RTY2ODU1QUE4MjUxREUwODkyNTYwRjUw
MzI1ODdEQUREOEQxMkRCNzYwMDgxRkIxMDkwQjE0OTgwNUZDOUYxODk3QjVFMUUw
RENCQThCNDVGQjM1NEU0ODU0MTE4MkUzNjY0RTJCMkYyMEQzNDBCNkYwMzYyODM0
RTc0QjQwMDNFMzMwMEYwREQ0RjJGNjQwRDFCMzY0MUZBNzhDRDYyMEMwQUREMDI2
ODhBNTBBQUVFMkJCRUE3NTQ0Q0QyMkU2RUEyREJEMjI3RjlCNUZGMzY4MzhFNURB
NEFCNzkxMzNBMDlGRDFBMDAwMTcwRkNFRUQyODRGMUQ5MjhBREFFMEIzQTk1MkI0
NzYzRTg2QTlEQTQ3QUMwNzVBN0MzRDMwMDgzRDcwQ0VCNTYzMkZDNzM3Q0U0QzdG
NjYwODk4QTZDODFFQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp5hObJu6tPwMiA3cB9zp4yk7k+GmuMqtdfQM2WBImG7GyBGTIDxh
jAEVQzyUkCchWfNAkomk2v+c13bpTqCip3RbjZ5646v0DOq8zqUrFD5Wj/jk9Qwp
d+Gr25eI5mhVqoJR3giSVg9QMlh9rdjRLbdgCB+xCQsUmAX8nxiXteHg3LqLRfs1
TkhUEYLjZk4rLyDTQLbwNig050tAA+MwDw3U8vZA0bNkH6eM1iDArdAmiKUKruK7
6nVEzSLm6i29In+bX/NoOOXaSreRM6Cf0aAAFw/O7ShPHZKK2uCzqVK0dj6GqdpH
rAdafD0wCD1wzrVjL8c3zkx/ZgiYpsgeuQIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FONq6+qfUjVzhx0nMSmTBJYH+SRMMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGT
BggrBgEFBQcwC4aBhnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzNjM3MzYu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBADYeq0wDQYJKoZIhvcNAQELBQADggEBABskhMNCkr23+O80vRFe
JRnKi+SFpWrSPmSny9a+TMhRBmnARfLg0cYd3LalCSVInEr5aQm8a266cIAGrAvJ
NtvS5zsqq8pLJTmqTQF7vpPqEJi51OmeDUYTcAQ5j1O1xLUx4zWsLBf6J6xTVcRs
RnhYPdoiTksGPTl8ImsAjbc8leKugLZ+IT9taqX6oUT1c0+uoYOHP6EuthlRk9LG
GZT0BlKMWUClGoz2mEA/vc20PDZQ/3F3qYkodenuaMDL/tCXUdNvyNHDee9GCjoD
phMnnLz1stUm77ZrZ7AWvqcCxlBe1RcYiPO3LlAKhxwseiFv0nSfDqrBAhKwhy38
ocQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org