Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138312e302f32342d3234203d3e20323732303131.roa
File:                     3231362e3132322e3138312e302f32342d3234203d3e20323732303131.roa (raw, json)
Hash identifier:          dA+sEsh5oO9VBkJFWVRqyRdSCCthHpDu4fyrge4vOJg=
Subject key identifier:   2E:79:AF:02:A9:51:5A:81:36:D1:63:71:F1:EC:7E:CE:88:1D:84:A8
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       6FCBA0AC154A7AB432F60A01B98056E84603CCD1
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138312e302f32342d3234203d3e20323732303131.roa
Signing time:             Wed 25 May 2022 16:52:02 +0000
ROA not before:           Wed 25 May 2022 16:47:02 +0000
ROA not after:            Wed 24 May 2023 16:52:02 +0000
asID:                     272011
IP address blocks:        216.122.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cb:a0:ac:15:4a:7a:b4:32:f6:0a:01:b9:80:56:e8:46:03:cc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May 25 16:47:02 2022 GMT
            Not After : May 24 16:52:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:54:49:75:09:4c:9b:48:6c:27:f1:5b:72:
                    53:4e:76:f8:6e:c9:18:eb:01:c5:fc:f2:24:a2:f3:
                    d8:72:b7:93:e9:10:c2:71:57:77:43:16:ef:e9:89:
                    de:58:df:c6:b8:3a:a3:64:7a:89:a9:36:75:16:bf:
                    67:3c:14:ae:e7:8a:ef:34:f1:a5:b8:4c:bb:f3:15:
                    4e:92:cc:ae:71:00:6f:9a:5e:d6:82:62:6b:26:f3:
                    55:aa:04:11:5b:08:ed:7a:3a:57:f2:11:21:a9:e2:
                    76:94:1d:5d:c8:08:b7:e4:0b:e0:30:e4:18:44:7f:
                    67:ad:33:98:e6:5f:ec:93:dc:ff:97:29:e4:6f:d6:
                    5f:df:10:aa:28:d4:6d:12:00:3a:a3:7a:44:65:d1:
                    1e:3b:d3:8a:8e:28:ac:08:59:3c:7e:99:ab:35:7c:
                    b2:17:a1:4f:39:2a:2b:65:ff:05:a4:cb:a1:f9:d7:
                    a3:bd:50:2f:f2:f4:0f:60:3f:ad:85:c1:93:65:7b:
                    77:d1:2e:90:0c:03:e3:72:0e:de:f3:54:22:c9:7d:
                    ab:28:92:af:85:ba:04:f4:31:1b:3d:44:c0:ce:80:
                    32:07:cc:47:9c:99:89:d9:c4:77:e2:37:45:5b:4a:
                    2b:ab:31:eb:6c:2f:72:e9:67:0b:c6:9e:90:43:bf:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:79:AF:02:A9:51:5A:81:36:D1:63:71:F1:EC:7E:CE:88:1D:84:A8
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138312e302f32342d3234203d3e20323732303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:30:aa:3d:7a:53:9d:75:ca:56:3b:c6:ae:c3:7b:65:be:5c:
         4e:b9:bd:6d:89:b0:d7:ea:c4:a2:e2:bf:76:99:2c:61:6a:97:
         4f:cb:0e:d0:6e:80:cf:af:8c:4a:50:7e:69:c5:6d:d7:da:49:
         ad:66:06:9f:c2:58:97:d6:e0:93:ab:54:a3:a7:0d:e4:ab:d4:
         5f:b4:cc:74:c7:5d:f7:f5:ca:d6:17:67:32:ef:b6:29:28:7d:
         2a:a1:01:38:c6:51:42:04:a6:71:92:c5:7c:75:69:d8:ec:39:
         01:60:94:de:4e:d3:03:1f:6c:45:bb:f6:f4:27:09:3a:a9:33:
         92:a1:06:40:dd:25:5e:06:14:d9:23:40:07:63:f8:03:15:6b:
         a1:a3:0b:d5:8d:c6:09:32:e0:d3:eb:1b:9c:d6:dc:6e:18:76:
         34:c9:c4:ee:b3:25:81:12:24:a1:61:00:eb:34:b1:bf:58:6c:
         8c:80:71:d1:3c:69:65:70:ea:9f:08:2c:d7:51:65:62:63:e4:
         31:0a:d2:c8:2e:25:ae:a7:c0:a9:75:69:6b:62:61:fc:3b:8c:
         08:b8:39:19:5d:06:66:2a:8a:c6:dd:fb:11:3e:45:75:ec:c9:
         ef:f2:bd:61:ae:dd:e6:2b:24:c8:79:f7:c2:f6:9c:42:61:23:
         e4:3e:4a:e9
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIUb8ugrBVKerQy9goBuYBW6EYDzNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA1MjUxNjQ3MDJaFw0yMzA1MjQxNjUyMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTg4OTU0NDk3NTA5NEM5QjQ4
NkMyN0YxNUI3MjUzNEU3NkY4NkVDOTE4RUIwMUM1RkNGMjI0QTJGM0Q4NzJCNzkz
RTkxMEMyNzE1Nzc3NDMxNkVGRTk4OURFNThERkM2QjgzQUEzNjQ3QTg5QTkzNjc1
MTZCRjY3M0MxNEFFRTc4QUVGMzRGMUE1Qjg0Q0JCRjMxNTRFOTJDQ0FFNzEwMDZG
OUE1RUQ2ODI2MjZCMjZGMzU1QUEwNDExNUIwOEVEN0EzQTU3RjIxMTIxQTlFMjc2
OTQxRDVEQzgwOEI3RTQwQkUwMzBFNDE4NDQ3RjY3QUQzMzk4RTY1RkVDOTNEQ0ZG
OTcyOUU0NkZENjVGREYxMEFBMjhENDZEMTIwMDNBQTM3QTQ0NjVEMTFFM0JEMzhB
OEUyOEFDMDg1OTNDN0U5OUFCMzU3Q0IyMTdBMTRGMzkyQTJCNjVGRjA1QTRDQkEx
RjlEN0EzQkQ1MDJGRjJGNDBGNjAzRkFEODVDMTkzNjU3Qjc3RDEyRTkwMEMwM0Uz
NzIwRURFRjM1NDIyQzk3REFCMjg5MkFGODVCQTA0RjQzMTFCM0Q0NEMwQ0U4MDMy
MDdDQzQ3OUM5OTg5RDlDNDc3RTIzNzQ1NUI0QTJCQUIzMUVCNkMyRjcyRTk2NzBC
QzY5RTkwNDNCRjYyMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmIlUSXUJTJtIbCfxW3JTTnb4bskY6wHF/PIkovPYcreT6RDCcVd3
Qxbv6YneWN/GuDqjZHqJqTZ1Fr9nPBSu54rvNPGluEy78xVOksyucQBvml7WgmJr
JvNVqgQRWwjtejpX8hEhqeJ2lB1dyAi35AvgMOQYRH9nrTOY5l/sk9z/lynkb9Zf
3xCqKNRtEgA6o3pEZdEeO9OKjiisCFk8fpmrNXyyF6FPOSorZf8FpMuh+dejvVAv
8vQPYD+thcGTZXt30S6QDAPjcg7e81QiyX2rKJKvhboE9DEbPUTAzoAyB8xHnJmJ
2cR34jdFW0orqzHrbC9y6WcLxp6QQ79iHwIDAQABo4ICXjCCAlowHQYDVR0OBBYE
FC55rwKpUVqBNtFjcfHsfs6IHYSoMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGV
BggrBgEFBQcwC4aBiHJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjMwMzEz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANh6tTANBgkqhkiG9w0BAQsFAAOCAQEAEzCqPXpTnXXKVjvG
rsN7Zb5cTrm9bYmw1+rEouK/dpksYWqXT8sO0G6Az6+MSlB+acVt19pJrWYGn8JY
l9bgk6tUo6cN5KvUX7TMdMdd9/XK1hdnMu+2KSh9KqEBOMZRQgSmcZLFfHVp2Ow5
AWCU3k7TAx9sRbv29CcJOqkzkqEGQN0lXgYU2SNAB2P4AxVroaML1Y3GCTLg0+sb
nNbcbhh2NMnE7rMlgRIkoWEA6zSxv1hsjIBx0TxpZXDqnwgs11FlYmPkMQrSyC4l
rqfAqXVpa2Jh/DuMCLg5GV0GZiqKxt37ET5FdezJ7/K9Ya7d5iskyHn3wvacQmEj
5D5K6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org