Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138342e302f32342d3234203d3e20343030333834.roa
File:                     3231362e3132322e3138342e302f32342d3234203d3e20343030333834.roa (raw, json)
Hash identifier:          iUjSSBetm+dbgMqa5oJAKFK3PGaHiTa37D6Zp94+1QI=
Subject key identifier:   5E:B1:08:F7:5F:9D:E7:0A:2D:B4:7D:0E:4C:CA:D5:FE:AA:0D:05:B7
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       765F4DF3E6A0F265D0BE9DAAC90670F6CE5B61C2
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138342e302f32342d3234203d3e20343030333834.roa
Signing time:             Wed 27 Apr 2022 15:24:05 +0000
ROA not before:           Wed 27 Apr 2022 15:19:05 +0000
ROA not after:            Wed 26 Apr 2023 15:24:05 +0000
asID:                     400384
IP address blocks:        216.122.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5f:4d:f3:e6:a0:f2:65:d0:be:9d:aa:c9:06:70:f6:ce:5b:61:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 27 15:19:05 2022 GMT
            Not After : Apr 26 15:24:05 2023 GMT
        Subject: CN=3082010A0282010100BB1055CDF19181D7101C9437F7263F03B33E5A9AC58A999D87C659FE43E165C597091C41FDA3154DA730A6B4CBE66F0167EC7B5D19439B85C23A5B9D4E578C1EBFF59CBA9F60F752F19FB85C25236101CD89DA16BD5732BB85B95C6EA17B6956A4E07D8D96601BAEB03445B831CD0E880DA8B3174A9D5F5302C961869404FBAB3632C78A5EF86789CA21597E74A85B021D0CA28A9A391EDC233BBCCB130C1A6F0F5FE62668900FB1D9A99236362B6FCEE41CA0C10C384255A7E8A61CB20494A2AE1B8BD09405811B9630C12A364CFF2E012B8EB7151F78ED0C62D352C8F10E13069B97F369ED653A5AFA6A588F7C91A6E94D73C35975A3E13BCD1A1D65E1FFB30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:55:cd:f1:91:81:d7:10:1c:94:37:f7:26:
                    3f:03:b3:3e:5a:9a:c5:8a:99:9d:87:c6:59:fe:43:
                    e1:65:c5:97:09:1c:41:fd:a3:15:4d:a7:30:a6:b4:
                    cb:e6:6f:01:67:ec:7b:5d:19:43:9b:85:c2:3a:5b:
                    9d:4e:57:8c:1e:bf:f5:9c:ba:9f:60:f7:52:f1:9f:
                    b8:5c:25:23:61:01:cd:89:da:16:bd:57:32:bb:85:
                    b9:5c:6e:a1:7b:69:56:a4:e0:7d:8d:96:60:1b:ae:
                    b0:34:45:b8:31:cd:0e:88:0d:a8:b3:17:4a:9d:5f:
                    53:02:c9:61:86:94:04:fb:ab:36:32:c7:8a:5e:f8:
                    67:89:ca:21:59:7e:74:a8:5b:02:1d:0c:a2:8a:9a:
                    39:1e:dc:23:3b:bc:cb:13:0c:1a:6f:0f:5f:e6:26:
                    68:90:0f:b1:d9:a9:92:36:36:2b:6f:ce:e4:1c:a0:
                    c1:0c:38:42:55:a7:e8:a6:1c:b2:04:94:a2:ae:1b:
                    8b:d0:94:05:81:1b:96:30:c1:2a:36:4c:ff:2e:01:
                    2b:8e:b7:15:1f:78:ed:0c:62:d3:52:c8:f1:0e:13:
                    06:9b:97:f3:69:ed:65:3a:5a:fa:6a:58:8f:7c:91:
                    a6:e9:4d:73:c3:59:75:a3:e1:3b:cd:1a:1d:65:e1:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B1:08:F7:5F:9D:E7:0A:2D:B4:7D:0E:4C:CA:D5:FE:AA:0D:05:B7
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138342e302f32342d3234203d3e20343030333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:58:ac:0b:9f:18:f2:2a:3b:d6:b6:c2:c1:18:e8:24:28:4c:
         0a:e1:c0:37:dc:98:9e:1e:bf:0f:5d:05:44:56:b9:d4:64:e8:
         88:cd:79:ee:18:82:65:e1:5d:0d:4b:a8:22:9f:b4:4e:04:0e:
         fb:aa:1e:37:3b:96:54:d7:b4:fc:21:59:ad:eb:f1:da:90:d3:
         4a:25:a6:41:74:8f:aa:c9:4d:df:9c:d5:b1:51:f7:6b:63:a8:
         6e:8d:15:29:54:26:69:8d:41:db:af:4f:58:90:be:aa:55:c2:
         f4:ed:11:b6:6f:96:f1:89:aa:57:07:a9:b1:1b:e8:8a:58:2a:
         46:55:64:5e:4c:92:7b:1c:33:98:e8:45:67:8f:42:67:2e:8c:
         c7:ed:69:d5:69:c2:93:e3:a5:89:24:ef:76:97:4a:e7:72:17:
         a9:2e:4d:df:0e:f8:09:ad:16:cc:a2:3e:26:3a:46:c3:7d:4c:
         81:ad:f1:94:cf:0c:74:14:3d:a1:72:26:e3:81:55:82:8f:87:
         b1:da:b5:33:46:6c:35:2a:e4:1a:2a:92:3a:c2:d9:ce:ed:4d:
         10:a9:d3:ef:bd:2f:d7:5b:66:67:17:9d:04:e8:0e:d4:8a:6c:
         45:16:67:65:c6:2f:ae:d1:aa:90:58:68:32:b3:a7:c3:2d:f3:
         45:de:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org