Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138362e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3132322e3138362e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          wiSHQeqL0sSSWzl52EwK5UNDvXR2Uw3YJoOE573cFwY=
Subject key identifier:   E9:45:43:18:26:0F:C6:DF:5D:63:97:1B:E1:72:2F:19:50:82:C4:3A
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       1C67B5D22BD896C4AE87F769AA2A8DF1AE002F0E
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138362e302f32342d3234203d3e20323131353835.roa
Signing time:             Thu 28 Apr 2022 18:58:53 +0000
ROA not before:           Thu 28 Apr 2022 18:53:53 +0000
ROA not after:            Thu 27 Apr 2023 18:58:53 +0000
asID:                     211585
IP address blocks:        216.122.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:67:b5:d2:2b:d8:96:c4:ae:87:f7:69:aa:2a:8d:f1:ae:00:2f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Apr 28 18:53:53 2022 GMT
            Not After : Apr 27 18:58:53 2023 GMT
        Subject: CN=3082010A0282010100CF2AB40AF556218123CB576B6754F35E72556F06282B528D9844A99CAB0F03041223FEE273E94E9A7B1585D0FF5A1002A8F568EB641BA32A8B8DDFEA547F140B0524BF9DC9F9C07EF5D46BE10A9BBBBBBB95F175483ED91BBD807AF75DA1626E418F1702BCF974B6734D6FE9C95F274BAB970185E0B36DC280CA123E21D993601F2BEF371013885B383E02EA55306A03D5255CE96D04AF61AB659655A190F4D50B11B14E2273CA05748E1B72AA421C098DEE3C42F598E00154826E28F0A93F2D70DCBF1D7B3E6B357E49BB1926F9BF5E99937953B50C90268EE0B99081CF30468DBD142E9C08A990A0D61836C3266EC55CC05A7EAC21ADB80045DB270D8A58150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:b4:0a:f5:56:21:81:23:cb:57:6b:67:54:
                    f3:5e:72:55:6f:06:28:2b:52:8d:98:44:a9:9c:ab:
                    0f:03:04:12:23:fe:e2:73:e9:4e:9a:7b:15:85:d0:
                    ff:5a:10:02:a8:f5:68:eb:64:1b:a3:2a:8b:8d:df:
                    ea:54:7f:14:0b:05:24:bf:9d:c9:f9:c0:7e:f5:d4:
                    6b:e1:0a:9b:bb:bb:bb:95:f1:75:48:3e:d9:1b:bd:
                    80:7a:f7:5d:a1:62:6e:41:8f:17:02:bc:f9:74:b6:
                    73:4d:6f:e9:c9:5f:27:4b:ab:97:01:85:e0:b3:6d:
                    c2:80:ca:12:3e:21:d9:93:60:1f:2b:ef:37:10:13:
                    88:5b:38:3e:02:ea:55:30:6a:03:d5:25:5c:e9:6d:
                    04:af:61:ab:65:96:55:a1:90:f4:d5:0b:11:b1:4e:
                    22:73:ca:05:74:8e:1b:72:aa:42:1c:09:8d:ee:3c:
                    42:f5:98:e0:01:54:82:6e:28:f0:a9:3f:2d:70:dc:
                    bf:1d:7b:3e:6b:35:7e:49:bb:19:26:f9:bf:5e:99:
                    93:79:53:b5:0c:90:26:8e:e0:b9:90:81:cf:30:46:
                    8d:bd:14:2e:9c:08:a9:90:a0:d6:18:36:c3:26:6e:
                    c5:5c:c0:5a:7e:ac:21:ad:b8:00:45:db:27:0d:8a:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:45:43:18:26:0F:C6:DF:5D:63:97:1B:E1:72:2F:19:50:82:C4:3A
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138362e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:7f:7d:f9:b7:57:1d:2d:dc:30:a4:fd:f4:30:d5:d5:04:
         07:60:bb:e4:dd:cd:2e:44:7a:0a:d3:41:3b:fa:fe:53:b0:83:
         7a:87:84:19:96:19:79:f2:e9:32:8e:50:90:f5:64:b4:45:a4:
         df:5a:e1:3a:3d:cc:f4:e6:8c:73:45:79:45:b7:26:4b:33:d9:
         15:67:46:ca:98:c7:c8:4c:9f:eb:03:3f:0c:20:b9:f4:3c:cf:
         00:fb:e8:0a:7c:48:2c:14:12:da:2b:06:e5:61:a1:1a:0d:a2:
         09:8b:46:a4:99:47:cc:63:3c:f4:3f:bc:cf:29:1b:fa:ff:3a:
         e1:31:99:44:a8:28:31:6b:6c:fc:17:5a:4e:34:5f:07:a9:85:
         2e:16:0e:b1:f1:95:aa:ca:6d:5c:ea:5f:cd:1b:92:eb:27:82:
         15:65:e4:52:06:e5:17:4b:b2:5c:f6:19:02:bf:27:0d:26:cd:
         57:40:05:22:9e:41:ad:e3:c2:fb:da:98:e7:be:c1:c9:a8:41:
         17:fa:36:89:a9:ba:26:3b:d9:d3:29:44:12:4c:a3:f0:13:c0:
         22:a2:c3:6c:0a:62:3c:f4:bc:87:d0:7d:9d:88:75:a6:a6:60:
         c2:23:7b:c9:0b:ff:c4:31:70:0a:20:c0:a3:3f:87:93:bd:52:
         b0:e9:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org