Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138312e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3132322e3138312e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          5N1DIA8uEGQrAfgjM81weL8F2WFyBvAqO/9Rhwcnv7E=
Subject key identifier:   5A:64:4E:2B:E0:D0:85:85:8E:0C:8E:66:F5:6E:DB:25:7D:62:FF:F7
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       4386CC178BDC82A55CF31769E7AA23FDEB446442
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138312e302f32342d3234203d3e20323131353835.roa
Signing time:             Wed 27 Apr 2022 05:26:29 +0000
ROA not before:           Wed 27 Apr 2022 05:21:29 +0000
ROA not after:            Wed 26 Apr 2023 05:26:29 +0000
asID:                     211585
IP address blocks:        216.122.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:86:cc:17:8b:dc:82:a5:5c:f3:17:69:e7:aa:23:fd:eb:44:64:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 27 05:21:29 2022 GMT
            Not After : Apr 26 05:26:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:38:7a:ca:82:e5:77:09:19:0c:5d:d4:b8:
                    c3:24:6f:e4:aa:50:67:1d:e0:f9:ba:a9:15:4d:3b:
                    b8:74:71:65:56:0a:90:f6:71:b5:0d:42:75:af:5a:
                    3d:98:ad:d3:a8:1e:a0:cd:0c:20:bb:e3:9c:99:2b:
                    ac:fc:19:ad:a3:e5:9d:5f:b9:be:50:f9:d1:b9:36:
                    04:9d:74:34:db:58:27:d8:a9:a4:31:45:a9:68:76:
                    ef:6e:1c:5b:24:25:ac:19:da:9d:d7:7b:5c:16:2b:
                    8a:1e:2b:83:6a:4b:3e:c8:b1:fa:29:dc:f9:a3:f7:
                    20:cf:55:db:8a:a9:42:e5:1d:c1:ed:11:e6:67:83:
                    97:db:a1:37:01:2e:6b:d4:98:a1:c2:b7:cc:46:1b:
                    90:5d:3d:ed:b8:f4:cb:fd:12:9c:3e:cc:a4:df:cb:
                    06:20:33:b1:bf:ad:24:5a:6a:ff:22:45:c6:55:90:
                    49:e9:1e:55:d1:73:2f:a7:be:61:b5:0e:9c:38:79:
                    a1:99:9a:02:37:e1:b9:3d:6e:e1:65:cc:1c:60:0f:
                    33:7d:07:94:ff:94:7e:b7:f6:f1:2d:bf:30:b7:75:
                    64:4e:b1:39:ad:86:c9:82:95:e9:3c:83:93:84:28:
                    46:3a:6f:66:b7:8f:f3:29:01:81:e9:bc:f6:ac:71:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:64:4E:2B:E0:D0:85:85:8E:0C:8E:66:F5:6E:DB:25:7D:62:FF:F7
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138312e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:eb:c2:70:db:fd:14:f8:96:55:a9:8d:30:9d:e6:25:f8:
         3c:71:a0:b6:9d:23:c4:95:b4:8c:28:84:a5:07:1b:61:a6:94:
         7e:42:bf:5d:f7:7a:58:81:35:bd:fa:fa:29:17:18:5b:6a:e0:
         3c:fc:6d:2b:d7:ab:41:7a:2d:58:51:3a:2d:5b:1e:95:33:a7:
         64:ff:00:86:c9:d1:0b:2b:9f:f4:45:36:59:f1:62:3b:87:27:
         55:4e:92:8d:fd:e6:c5:6f:0e:bb:8c:18:02:65:57:81:39:8f:
         7c:5a:aa:fc:68:82:cb:1a:ee:44:52:8f:e0:19:c6:85:47:8b:
         0e:7e:c8:b1:26:1d:02:0f:6d:42:d7:2b:b8:b6:a1:a4:9d:1f:
         51:c3:09:23:98:39:b9:99:ac:15:39:65:c9:a4:48:99:3d:89:
         43:2e:b2:1b:65:6f:32:ab:7b:d5:8a:71:32:7b:c7:fc:36:ef:
         23:58:ca:f4:1d:f4:12:47:7d:0e:2d:94:b1:62:f2:86:7b:ba:
         a7:f2:c4:b2:49:e3:d2:62:58:29:7f:a4:3d:29:3b:ce:26:70:
         c2:aa:82:bc:dc:75:9a:5a:93:06:66:09:aa:bb:aa:f2:76:a6:
         bb:73:d3:e9:fd:f4:30:65:c3:03:4e:0c:8c:52:1c:0c:0d:5e:
         7b:9e:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org