Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137362e302f32322d3234203d3e203136353039.roa
File:                     3231362e3132322e3137362e302f32322d3234203d3e203136353039.roa (raw, json)
Hash identifier:          eKNHiIjfTghhe9gM7uvj65ck+OKSZyLcxCfHKHvm+50=
Subject key identifier:   53:D9:98:45:27:B4:52:DD:50:95:72:0C:E5:8A:18:0F:04:C7:B4:0B
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1D524FB4811B817BFA42998D9ACCE4D2E7D246C9
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137362e302f32322d3234203d3e203136353039.roa
Signing time:             Fri 18 Feb 2022 16:09:08 +0000
ROA not before:           Fri 18 Feb 2022 16:04:08 +0000
ROA not after:            Fri 17 Feb 2023 16:09:08 +0000
asID:                     16509
IP address blocks:        216.122.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:52:4f:b4:81:1b:81:7b:fa:42:99:8d:9a:cc:e4:d2:e7:d2:46:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 18 16:04:08 2022 GMT
            Not After : Feb 17 16:09:08 2023 GMT
        Subject: CN=3082010A0282010100B4F2821E781D3D37AAA79CD369C01BCA935361F04267F662B3ECB394F75361B2DF2D21DD4F2BC61A849EABCE1F6B6ABC1F3D6AEACAFE1D0969FA2BC199528AF0CE4435F01727D096D112F99CBF37B66078A3A6B1B3F0D71CDEFD9A7897ABA6F9DAC55E4F0B9A7F1EF3AF1A9F4A04823E9D482864F6CF64600AACD4EE523F7A23DAE97E5C28CEBD06C219CAB64640643D871AE2A9D5C479C9C67C2DA1806CD406CE85E8C8A47BE29DFFE15B3AB2935D490B77ACD254A74C0511AE261C5BB7E0A1672B1D136483AC5BEBF80D559AEE335BAC7780F43DC45395D3DD630A30C6396D66E3E8E97488321C02D553850A511DE20AE5255FB6CA6532A3C55350FFB07B450203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:82:1e:78:1d:3d:37:aa:a7:9c:d3:69:c0:
                    1b:ca:93:53:61:f0:42:67:f6:62:b3:ec:b3:94:f7:
                    53:61:b2:df:2d:21:dd:4f:2b:c6:1a:84:9e:ab:ce:
                    1f:6b:6a:bc:1f:3d:6a:ea:ca:fe:1d:09:69:fa:2b:
                    c1:99:52:8a:f0:ce:44:35:f0:17:27:d0:96:d1:12:
                    f9:9c:bf:37:b6:60:78:a3:a6:b1:b3:f0:d7:1c:de:
                    fd:9a:78:97:ab:a6:f9:da:c5:5e:4f:0b:9a:7f:1e:
                    f3:af:1a:9f:4a:04:82:3e:9d:48:28:64:f6:cf:64:
                    60:0a:ac:d4:ee:52:3f:7a:23:da:e9:7e:5c:28:ce:
                    bd:06:c2:19:ca:b6:46:40:64:3d:87:1a:e2:a9:d5:
                    c4:79:c9:c6:7c:2d:a1:80:6c:d4:06:ce:85:e8:c8:
                    a4:7b:e2:9d:ff:e1:5b:3a:b2:93:5d:49:0b:77:ac:
                    d2:54:a7:4c:05:11:ae:26:1c:5b:b7:e0:a1:67:2b:
                    1d:13:64:83:ac:5b:eb:f8:0d:55:9a:ee:33:5b:ac:
                    77:80:f4:3d:c4:53:95:d3:dd:63:0a:30:c6:39:6d:
                    66:e3:e8:e9:74:88:32:1c:02:d5:53:85:0a:51:1d:
                    e2:0a:e5:25:5f:b6:ca:65:32:a3:c5:53:50:ff:b0:
                    7b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D9:98:45:27:B4:52:DD:50:95:72:0C:E5:8A:18:0F:04:C7:B4:0B
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3137362e302f32322d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:75:a3:89:bf:da:c6:6c:27:28:32:73:b5:9a:0d:3f:f4:a4:
         68:36:da:09:c0:7c:93:07:99:ed:2a:a7:0d:b8:a6:cf:55:f3:
         21:af:d9:6e:9a:f7:3e:30:01:c1:0d:e2:a2:3e:eb:68:da:a3:
         0c:a8:6d:86:89:d9:ea:d0:dc:9b:eb:9f:5b:3c:0e:31:0f:51:
         dc:0c:35:3f:2b:34:0a:a6:ae:a1:81:56:96:a2:6e:c4:e9:60:
         f5:8b:84:e1:b0:2e:6a:fc:ef:ea:e5:4a:9c:c2:ec:d3:45:7c:
         ae:5a:b4:f9:3d:77:ab:a0:d7:b9:fe:22:b9:96:c3:7d:fd:57:
         9b:43:3e:88:ee:cd:10:27:1a:4d:ad:b3:ea:7e:e8:83:f3:c1:
         f0:de:47:ae:db:75:ec:42:d0:9c:30:2e:72:e2:0f:55:02:3e:
         59:21:7c:12:dd:11:d4:87:de:a8:35:90:00:ec:79:38:7c:42:
         31:14:b8:1d:97:f8:fd:eb:0a:35:23:2b:3b:1d:a4:f6:4a:9c:
         1c:ea:17:39:b2:bc:2c:3c:f6:94:4c:28:76:a9:07:35:ec:ac:
         73:60:95:3d:5d:c5:28:9e:8f:6b:9c:e1:80:50:78:72:c3:f4:
         93:fd:aa:47:39:44:88:6a:b0:83:17:91:48:ef:62:d0:5e:48:
         d4:3c:d8:f5
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUHVJPtIEbgXv6QpmNmszk0ufSRskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjAyMTgxNjA0MDhaFw0yMzAyMTcxNjA5MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjRGMjgyMUU3ODFEM0QzN0FB
QTc5Q0QzNjlDMDFCQ0E5MzUzNjFGMDQyNjdGNjYyQjNFQ0IzOTRGNzUzNjFCMkRG
MkQyMURENEYyQkM2MUE4NDlFQUJDRTFGNkI2QUJDMUYzRDZBRUFDQUZFMUQwOTY5
RkEyQkMxOTk1MjhBRjBDRTQ0MzVGMDE3MjdEMDk2RDExMkY5OUNCRjM3QjY2MDc4
QTNBNkIxQjNGMEQ3MUNERUZEOUE3ODk3QUJBNkY5REFDNTVFNEYwQjlBN0YxRUYz
QUYxQTlGNEEwNDgyM0U5RDQ4Mjg2NEY2Q0Y2NDYwMEFBQ0Q0RUU1MjNGN0EyM0RB
RTk3RTVDMjhDRUJEMDZDMjE5Q0FCNjQ2NDA2NDNEODcxQUUyQTlENUM0NzlDOUM2
N0MyREExODA2Q0Q0MDZDRTg1RThDOEE0N0JFMjlERkZFMTVCM0FCMjkzNUQ0OTBC
NzdBQ0QyNTRBNzRDMDUxMUFFMjYxQzVCQjdFMEExNjcyQjFEMTM2NDgzQUM1QkVC
RjgwRDU1OUFFRTMzNUJBQzc3ODBGNDNEQzQ1Mzk1RDNERDYzMEEzMEM2Mzk2RDY2
RTNFOEU5NzQ4ODMyMUMwMkQ1NTM4NTBBNTExREUyMEFFNTI1NUZCNkNBNjUzMkEz
QzU1MzUwRkZCMDdCNDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtPKCHngdPTeqp5zTacAbypNTYfBCZ/Zis+yzlPdTYbLfLSHdTyvG
GoSeq84fa2q8Hz1q6sr+HQlp+ivBmVKK8M5ENfAXJ9CW0RL5nL83tmB4o6axs/DX
HN79mniXq6b52sVeTwuafx7zrxqfSgSCPp1IKGT2z2RgCqzU7lI/eiPa6X5cKM69
BsIZyrZGQGQ9hxriqdXEecnGfC2hgGzUBs6F6Mike+Kd/+FbOrKTXUkLd6zSVKdM
BRGuJhxbt+ChZysdE2SDrFvr+A1Vmu4zW6x3gPQ9xFOV091jCjDGOW1m4+jpdIgy
HALVU4UKUR3iCuUlX7bKZTKjxVNQ/7B7RQIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FFPZmEUntFLdUJVyDOWKGA8Ex7QLMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGT
BggrBgEFBQcwC4aBhnJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzczNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzYzNTMwMzku
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBALYerAwDQYJKoZIhvcNAQELBQADggEBAMN1o4m/2sZsJygyc7Wa
DT/0pGg22gnAfJMHme0qpw24ps9V8yGv2W6a9z4wAcEN4qI+62jaowyobYaJ2erQ
3Jvrn1s8DjEPUdwMNT8rNAqmrqGBVpaibsTpYPWLhOGwLmr87+rlSpzC7NNFfK5a
tPk9d6ug17n+IrmWw339V5tDPojuzRAnGk2ts+p+6IPzwfDeR67bdexC0JwwLnLi
D1UCPlkhfBLdEdSH3qg1kADseTh8QjEUuB2X+P3rCjUjKzsdpPZKnBzqFzmyvCw8
9pRMKHapBzXsrHNglT1dxSiej2uc4YBQeHLD9JP9qkc5RIhqsIMXkUjvYtBeSNQ8
2PU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org