Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137342e302f32342d3234203d3e203536363535.roa
File:                     3231362e3132322e3137342e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          Jck2wT8CO6zoV57IcKBbK8sHVsFChhuKeB45eiDJKDI=
Subject key identifier:   62:13:66:25:0B:DC:C4:B4:CA:48:F3:B5:59:7A:82:B7:43:78:D8:2E
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       52D2D9D8FC239E618D4613B84208EAA66DFC22FA
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137342e302f32342d3234203d3e203536363535.roa
Signing time:             Tue 19 Apr 2022 00:30:35 +0000
ROA not before:           Tue 19 Apr 2022 00:25:35 +0000
ROA not after:            Tue 18 Apr 2023 00:30:35 +0000
asID:                     56655
IP address blocks:        216.122.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d2:d9:d8:fc:23:9e:61:8d:46:13:b8:42:08:ea:a6:6d:fc:22:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 19 00:25:35 2022 GMT
            Not After : Apr 18 00:30:35 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:7b:8a:d2:ec:1a:45:ef:d0:d4:c7:31:19:
                    51:c1:ee:9e:90:c7:e0:45:a7:a6:2e:eb:4b:52:f5:
                    04:e9:a0:58:f1:05:3b:2e:4c:95:41:82:d9:60:de:
                    fe:d4:03:89:89:db:2d:35:28:6a:4f:82:66:f2:d8:
                    85:ee:7e:b7:fb:71:58:c1:08:16:e4:5d:c7:2f:15:
                    a1:6f:8a:6b:e1:57:fc:48:05:8e:ea:04:20:2c:34:
                    e9:da:b2:1a:4d:17:43:2c:72:0d:db:4d:85:bc:b1:
                    67:b3:63:f8:2b:4d:8b:f2:7a:78:05:f1:ed:66:60:
                    57:32:08:ff:c8:27:f5:41:ea:be:da:24:86:51:bd:
                    79:ea:45:98:af:41:da:f7:c3:70:ed:0e:bb:af:e2:
                    0f:b3:aa:ba:02:80:95:72:a6:e0:8f:05:81:45:a5:
                    ef:ca:3e:d5:6f:61:58:31:a6:56:5f:43:9e:57:57:
                    6c:36:07:12:d0:58:6b:84:82:b7:6d:b9:c1:55:f4:
                    19:a8:8f:58:82:b6:4e:5d:b3:64:2c:c7:99:d6:f2:
                    77:ca:f8:07:ec:4c:d8:e3:4b:59:ca:49:0f:8f:ea:
                    a2:55:24:a7:66:eb:34:b9:89:27:6f:b5:6b:cf:f4:
                    2f:64:66:51:81:57:28:b9:d6:e3:47:5c:bd:70:4a:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:66:25:0B:DC:C4:B4:CA:48:F3:B5:59:7A:82:B7:43:78:D8:2E
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137342e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:74:d9:ff:0f:87:31:a6:69:10:ca:96:df:61:07:2f:34:
         7f:39:a2:32:c9:9c:e5:85:b4:ed:88:25:75:17:1a:a9:61:cf:
         99:d5:be:d9:6f:43:a3:ac:d8:e0:fa:c2:b2:c9:0a:de:98:0a:
         5c:98:83:e1:b3:57:ee:7e:f7:2e:8d:56:b2:49:c4:d3:dc:b9:
         88:f1:7f:fe:1e:e0:83:d8:7c:87:ba:53:cd:9b:9f:70:f0:fe:
         88:76:61:a5:9e:12:87:dc:37:70:ca:0e:56:f8:4a:e7:95:b0:
         4e:3e:8d:65:11:b6:3c:26:73:36:9e:e7:5c:fa:cb:08:0c:cd:
         29:a6:72:55:74:02:c5:cb:ab:3a:90:8d:29:d3:fc:c8:cb:9a:
         17:45:27:a3:67:94:98:06:13:cc:a1:a9:4b:1f:c7:bc:cd:89:
         09:aa:11:ba:ea:a4:60:64:bf:ce:1d:b5:db:0e:8e:0d:69:47:
         71:38:2b:b3:9d:5a:e8:5d:fa:ad:36:52:d3:d8:cb:35:a8:be:
         e4:33:1e:88:c8:1c:73:d1:9c:ea:3c:a2:cd:53:22:3a:2f:70:
         d1:03:00:e3:26:6a:d1:52:bc:3e:9e:30:d4:36:2a:21:94:6e:
         b8:46:a9:b3:70:e8:9a:7c:79:2e:9d:08:32:16:31:cd:b4:d5:
         e5:ab:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org