Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138342e302f32322d3234203d3e203439393939.roa
File:                     3231362e3132322e3138342e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          v5CcdPJbrfxgkdElwDqENqf1a4j8rRkliAf0ClnWUKE=
Subject key identifier:   B7:2F:98:D2:05:AD:CD:C6:86:76:2D:18:9A:ED:10:82:DB:1D:A6:42
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       58B9DDA48F389868A8C656BCAA702ACC1120D4F1
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138342e302f32322d3234203d3e203439393939.roa
Signing time:             Wed 23 Feb 2022 14:08:48 +0000
ROA not before:           Wed 23 Feb 2022 14:03:48 +0000
ROA not after:            Wed 22 Feb 2023 14:08:48 +0000
asID:                     49999
IP address blocks:        216.122.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b9:dd:a4:8f:38:98:68:a8:c6:56:bc:aa:70:2a:cc:11:20:d4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 23 14:03:48 2022 GMT
            Not After : Feb 22 14:08:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:d9:35:71:58:91:4e:58:7b:35:3d:b1:7c:
                    ce:2d:22:05:2c:98:de:b4:25:61:1d:63:1b:d6:86:
                    e0:e5:af:bf:63:79:34:94:05:d1:19:ac:4c:fe:fa:
                    ab:06:17:7d:8a:94:57:a8:3a:05:a5:04:ea:f2:9b:
                    ae:95:ba:1c:9e:a3:1c:eb:61:cb:28:1a:85:dd:41:
                    de:6a:0b:aa:4e:3f:4f:9a:87:59:b2:2f:49:d2:db:
                    7c:36:b5:b9:3c:17:9c:65:aa:62:4c:8c:16:52:ae:
                    3f:5c:78:a5:10:eb:65:f5:08:2f:7f:9d:e7:05:2c:
                    a2:00:65:ae:cf:89:4b:ea:31:10:02:f9:ae:c0:2b:
                    86:72:64:69:eb:57:e2:c6:75:43:29:57:34:1a:e2:
                    2a:dc:f1:e8:d2:1b:9c:1f:10:1f:35:71:fe:39:78:
                    0c:96:a3:e9:2e:5c:7e:86:d6:d6:a2:d4:b7:50:ec:
                    f3:68:ec:19:63:77:b5:25:b9:0d:1b:d7:3a:16:f6:
                    3c:ab:6b:7a:c6:ea:d6:1a:23:9e:9c:ba:3a:4c:04:
                    f6:14:4d:c7:e5:20:28:55:cf:3d:3c:0a:00:96:9c:
                    87:d6:a9:56:6e:27:4b:8f:e2:1c:cd:c0:88:90:3b:
                    e9:35:6b:49:67:e4:41:1d:8d:fd:49:95:e9:49:c8:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2F:98:D2:05:AD:CD:C6:86:76:2D:18:9A:ED:10:82:DB:1D:A6:42
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138342e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:ed:6e:a3:a1:ad:55:9e:4a:e7:10:af:1b:ce:26:ad:d3:33:
         50:67:83:a9:0e:53:1a:29:6d:4a:7e:d6:12:eb:51:38:46:c1:
         2c:08:c8:5f:c2:83:50:5b:e7:a8:51:72:2c:7f:81:26:50:c2:
         e6:8e:1b:71:5b:a5:89:25:e4:8c:cb:7b:1e:aa:b1:49:ef:13:
         2f:8e:c5:5e:36:50:4b:19:31:c9:34:0c:4b:07:7a:35:64:ad:
         84:f4:ad:fe:e7:b8:19:7c:05:08:e6:2f:9c:5a:f5:94:71:74:
         ae:fa:d8:68:9c:26:d0:85:fe:ee:6c:4d:9b:7a:67:0e:0c:d5:
         5f:56:5b:1d:df:19:bb:e9:76:f3:39:ec:1b:12:68:ac:b9:82:
         29:84:96:26:12:cc:71:a7:bc:20:1e:cd:fe:2a:95:a1:19:22:
         bc:18:3d:d4:ae:b9:4f:f1:0c:5b:f0:b2:f7:a7:9c:00:fe:7b:
         f9:28:d7:0c:50:58:67:72:0f:0d:ed:0e:57:8e:8f:dd:e8:22:
         69:70:f7:f2:93:e6:b4:56:66:f2:21:b5:aa:56:a1:63:1c:44:
         d8:4c:51:b1:5d:f0:20:4b:7b:bb:6c:46:49:8d:80:05:9f:b6:
         47:1d:5e:c7:93:6c:d6:a0:07:c5:77:32:9d:86:4a:2b:e1:61:
         80:a6:00:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org