Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3234203d3e20323132323338.roa
File:                     3231362e3132322e3138322e302f32332d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          S/X4IajD0+j+0MuoFxQybMqxJNEKXK3FbiES99Ipa/Y=
Subject key identifier:   12:5F:E0:E5:E8:A7:74:0B:BD:9E:C3:22:BC:DE:1C:86:70:75:8E:B0
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       06659EB7AAE13973E6125A5B70E79EF581C28697
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3234203d3e20323132323338.roa
Signing time:             Mon 25 Apr 2022 04:32:32 +0000
ROA not before:           Mon 25 Apr 2022 04:27:32 +0000
ROA not after:            Mon 24 Apr 2023 04:32:32 +0000
asID:                     212238
IP address blocks:        216.122.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:65:9e:b7:aa:e1:39:73:e6:12:5a:5b:70:e7:9e:f5:81:c2:86:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 25 04:27:32 2022 GMT
            Not After : Apr 24 04:32:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:e1:9e:76:c7:1c:5e:3c:4a:c5:b1:ab:e1:
                    54:f9:c2:d5:22:7e:e2:34:57:ef:dc:9d:d3:3d:a3:
                    f9:2c:d0:9f:9d:e4:9b:cd:31:4e:13:00:87:e5:b4:
                    12:94:eb:15:7e:81:c8:0d:80:7f:48:26:69:5b:0b:
                    1c:29:fd:43:21:51:c7:af:c8:e9:be:f3:2b:ac:4a:
                    e2:ef:28:48:6b:f8:2c:bf:3e:59:37:34:c5:8c:b9:
                    16:41:70:66:13:b6:91:eb:4f:b7:50:ff:49:9e:7d:
                    ca:7e:6c:9b:12:ea:d3:1d:f0:30:9c:52:ec:fc:6f:
                    17:f8:4c:93:1d:06:d8:8f:20:b4:91:ad:89:d9:d2:
                    98:ff:37:f2:5d:cb:1d:9a:0a:83:50:ab:f6:51:23:
                    8b:f2:9e:6b:0c:5d:78:8b:93:f4:56:ae:02:4b:21:
                    f2:5b:b6:12:a7:e3:c9:82:62:4a:a3:79:a1:62:a5:
                    1d:c0:cd:b1:26:e9:06:4b:fd:ca:52:53:c4:a1:d5:
                    c8:a3:e0:af:5c:9c:b9:13:eb:fd:12:ae:f1:03:5b:
                    16:ae:ec:e2:5e:55:88:8f:d1:ff:4f:92:20:67:ae:
                    45:93:d4:a6:c4:9f:a6:82:4f:13:21:a2:39:5e:d4:
                    08:67:36:14:1a:1c:93:4f:48:86:78:80:4b:a7:0a:
                    24:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5F:E0:E5:E8:A7:74:0B:BD:9E:C3:22:BC:DE:1C:86:70:75:8E:B0
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138322e302f32332d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:6a:e1:5b:56:bf:55:06:fd:ad:b6:86:67:ad:cf:68:9d:09:
         91:56:a4:4c:d8:11:7a:53:cc:93:4b:dd:08:ba:06:3b:9a:e3:
         82:e3:cc:24:c7:62:f5:f6:d5:72:d6:61:e3:70:17:4e:58:6d:
         6c:83:d4:d3:2a:c8:3e:85:03:3e:e8:a2:39:22:4e:f7:a4:91:
         59:bc:60:90:e3:29:35:55:d7:75:15:9f:0c:07:23:b9:de:23:
         26:25:69:b7:52:7a:7d:3c:4b:ab:f5:21:73:41:88:5b:c3:d7:
         c7:2e:4c:54:67:e0:1e:5f:b4:d2:db:90:27:cf:91:c9:46:6f:
         e2:bf:e9:ae:74:06:05:4d:43:63:60:05:6f:b9:9d:3c:8e:41:
         41:f3:63:06:63:f0:a6:71:0a:9b:2d:a1:5d:37:4e:c8:c6:69:
         bd:46:76:33:63:b2:c5:3f:9c:a0:db:6c:78:0e:a1:c6:cc:58:
         3a:e6:b1:71:97:56:13:5c:d0:b8:48:e1:24:b5:21:99:93:73:
         00:2d:5c:b6:13:35:da:16:89:11:ac:68:e7:21:fc:12:9c:ad:
         fd:35:83:c8:e4:78:14:ff:a0:ac:fc:a7:62:4a:4b:95:54:99:
         60:dc:49:90:c5:aa:1c:3b:96:1e:a0:cc:c7:95:f7:08:68:bd:
         22:c3:48:ff
-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIUBmWet6rhOXPmElpbcOee9YHChpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUExQjAxMkFD
MkYwN0YwQjAeFw0yMjA0MjUwNDI3MzJaFw0yMzA0MjQwNDMyMzJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhFRUUxOUU3NkM3MUM1RTND
NEFDNUIxQUJFMTU0RjlDMkQ1MjI3RUUyMzQ1N0VGREM5REQzM0RBM0Y5MkNEMDlG
OURFNDlCQ0QzMTRFMTMwMDg3RTVCNDEyOTRFQjE1N0U4MUM4MEQ4MDdGNDgyNjY5
NUIwQjFDMjlGRDQzMjE1MUM3QUZDOEU5QkVGMzJCQUM0QUUyRUYyODQ4NkJGODJD
QkYzRTU5MzczNEM1OENCOTE2NDE3MDY2MTNCNjkxRUI0RkI3NTBGRjQ5OUU3RENB
N0U2QzlCMTJFQUQzMURGMDMwOUM1MkVDRkM2RjE3Rjg0QzkzMUQwNkQ4OEYyMEI0
OTFBRDg5RDlEMjk4RkYzN0YyNURDQjFEOUEwQTgzNTBBQkY2NTEyMzhCRjI5RTZC
MEM1RDc4OEI5M0Y0NTZBRTAyNEIyMUYyNUJCNjEyQTdFM0M5ODI2MjRBQTM3OUEx
NjJBNTFEQzBDREIxMjZFOTA2NEJGRENBNTI1M0M0QTFENUM4QTNFMEFGNUM5Q0I5
MTNFQkZEMTJBRUYxMDM1QjE2QUVFQ0UyNUU1NTg4OEZEMUZGNEY5MjIwNjdBRTQ1
OTNENEE2QzQ5RkE2ODI0RjEzMjFBMjM5NUVENDA4NjczNjE0MUExQzkzNEY0ODg2
Nzg4MDRCQTcwQTI0MjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuO7hnnbHHF48SsWxq+FU+cLVIn7iNFfv3J3TPaP5LNCfneSbzTFO
EwCH5bQSlOsVfoHIDYB/SCZpWwscKf1DIVHHr8jpvvMrrEri7yhIa/gsvz5ZNzTF
jLkWQXBmE7aR60+3UP9Jnn3KfmybEurTHfAwnFLs/G8X+EyTHQbYjyC0ka2J2dKY
/zfyXcsdmgqDUKv2USOL8p5rDF14i5P0Vq4CSyHyW7YSp+PJgmJKo3mhYqUdwM2x
JukGS/3KUlPEodXIo+CvXJy5E+v9Eq7xA1sWruziXlWIj9H/T5IgZ65Fk9SmxJ+m
gk8TIaI5XtQIZzYUGhyTT0iGeIBLpwokJwIDAQABo4ICXjCCAlowHQYDVR0OBBYE
FBJf4OXop3QLvZ7DIrzeHIZwdY6wMB8GA1UdIwQYMBaAFD8Vm+9kUuA+aEv1Zxob
ASrC8H8LMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4ZjMzZTlkLTA0NWMtNDQxYS04
ZTcyLWUwM2UzYmI3YjU1My04LzAvM0YxNTlCRUY2NDUyRTAzRTY4NEJGNTY3MUEx
QjAxMkFDMkYwN0YwQi5jcmwwgZYGCCsGAQUFBwEBBIGJMIGGMIGDBggrBgEFBQcw
AoZ3cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vNThmMzNlOWQtMDQ1
Yy00NDFhLThlNzItZTAzZTNiYjdiNTUzLTEwLzAvM0YxNTlCRUY2NDUyRTAzRTY4
NEJGNTY3MUExQjAxMkFDMkYwN0YwQi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGV
BggrBgEFBQcwC4aBiHJzeW5jOi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzU4
ZjMzZTlkLTA0NWMtNDQxYS04ZTcyLWUwM2UzYmI3YjU1My04LzAvMzIzMTM2MmUz
MTMyMzIyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMz
OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAdh6tjANBgkqhkiG9w0BAQsFAAOCAQEAgWrhW1a/VQb9rbaG
Z63PaJ0JkVakTNgRelPMk0vdCLoGO5rjguPMJMdi9fbVctZh43AXTlhtbIPU0yrI
PoUDPuiiOSJO96SRWbxgkOMpNVXXdRWfDAcjud4jJiVpt1J6fTxLq/Uhc0GIW8PX
xy5MVGfgHl+00tuQJ8+RyUZv4r/prnQGBU1DY2AFb7mdPI5BQfNjBmPwpnEKmy2h
XTdOyMZpvUZ2M2OyxT+coNtseA6hxsxYOuaxcZdWE1zQuEjhJLUhmZNzAC1cthM1
2haJEaxo5yH8Epyt/TWDyOR4FP+grPynYkpLlVSZYNxJkMWqHDuWHqDMx5X3CGi9
IsNI/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org