Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138352e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3132322e3138352e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          rHckQSFcdxx4afKvzt6dypu7XzIv+sx+F1XsIBGkrKs=
Subject key identifier:   0B:2B:4D:A9:C6:16:58:03:EA:70:6B:4A:A6:DA:F1:94:27:C6:16:EC
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       05298328070A276165F1C9D4C8CE97835D123FA2
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138352e302f32342d3234203d3e20323131353835.roa
Signing time:             Fri 10 Jun 2022 06:46:22 +0000
ROA not before:           Fri 10 Jun 2022 06:41:22 +0000
ROA not after:            Fri 09 Jun 2023 06:46:22 +0000
asID:                     211585
IP address blocks:        216.122.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:29:83:28:07:0a:27:61:65:f1:c9:d4:c8:ce:97:83:5d:12:3f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Jun 10 06:41:22 2022 GMT
            Not After : Jun  9 06:46:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6a:83:3a:1c:2f:f0:b0:ea:a9:b8:7f:d9:aa:
                    5d:35:cf:ed:0e:ec:d6:c7:82:de:1b:82:70:27:76:
                    e9:06:a6:15:c8:7a:64:bb:74:49:52:7b:26:12:c7:
                    3d:e1:aa:8f:3c:c1:16:d2:33:74:c6:e0:6e:7d:74:
                    88:84:98:c4:25:00:02:e7:ed:d3:51:1d:59:97:f3:
                    1e:20:80:67:02:03:10:93:56:e0:92:87:4b:4a:5c:
                    2a:b8:83:ce:ca:17:79:9d:bc:b7:72:d2:6e:95:5d:
                    36:ae:3c:df:bf:02:27:b5:a3:66:49:9b:08:5f:22:
                    81:97:9e:2e:52:b4:dd:cd:a2:f5:d2:75:6d:1c:c3:
                    b4:ad:52:1b:c6:a5:6e:8f:74:85:1d:cb:e8:93:b8:
                    17:de:6f:f9:32:b1:66:32:c5:e2:71:d1:03:f3:84:
                    d7:45:c5:2e:60:9b:91:6a:e2:5a:b8:82:31:1f:72:
                    1d:16:26:cb:45:c7:71:ad:b6:6e:33:36:d3:91:36:
                    1e:26:07:00:47:a9:64:e6:7e:88:e0:f6:e9:fc:ea:
                    e6:dd:a3:69:12:0c:2f:4b:62:14:ed:56:15:92:2f:
                    fb:c8:48:e5:41:d5:e6:98:f8:a0:ae:f5:3b:89:e5:
                    30:c8:95:0e:c4:ea:0a:a1:08:ce:d3:61:03:f2:24:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2B:4D:A9:C6:16:58:03:EA:70:6B:4A:A6:DA:F1:94:27:C6:16:EC
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138352e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:a8:16:99:7c:31:97:79:28:39:e9:5a:ce:59:24:d1:65:
         67:ee:f7:f9:b0:03:71:08:3c:1c:ca:21:78:6e:2e:e8:90:fd:
         76:bb:0d:c5:39:91:07:ec:fe:c7:11:6e:df:07:1e:8e:f5:1b:
         e7:3a:8b:30:2d:2e:61:a1:8c:74:a8:73:78:e2:02:77:71:e3:
         2c:af:74:77:34:c0:55:d6:06:87:83:28:f0:1c:ba:23:a6:64:
         6a:55:33:8d:e7:dd:7b:01:39:17:b7:6b:71:94:a5:35:f7:94:
         f4:92:75:93:84:1d:1f:be:f2:26:b8:be:22:71:fe:26:2e:27:
         32:c2:a6:a4:dc:bf:20:48:44:ea:ac:94:05:a7:2e:a4:30:16:
         00:91:06:05:fb:97:0a:85:a9:62:35:38:cb:26:26:60:0e:04:
         62:d9:30:e5:97:33:06:ac:bc:b9:af:84:92:b6:fc:99:5c:fb:
         00:2c:cd:b1:25:0a:85:e9:07:70:76:39:14:d9:5f:55:7e:ba:
         36:47:b4:73:2f:2e:2c:c1:68:c5:8f:9a:eb:6f:f2:68:80:c2:
         7b:93:c1:f0:44:9f:b9:52:7b:a5:7f:86:4e:e9:60:ba:9a:15:
         c5:97:c9:22:1b:90:2c:fc:27:4e:87:25:ba:ef:c1:66:2b:65:
         ae:f7:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org