Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138372e302f32342d3234203d3e203230343733.roa
File:                     3231362e3132322e3138372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          +La30thhBsMcslNrGFfu6Jtqviv9zcTVprWAPwpvFk0=
Subject key identifier:   A0:2D:1B:3B:4E:FA:5B:7E:87:0C:67:17:00:3A:75:49:F8:3F:DD:78
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       159D2F4CDFCDF557D24832CB15AD9B8787EF3FA1
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138372e302f32342d3234203d3e203230343733.roa
Signing time:             Sat 21 May 2022 10:14:28 +0000
ROA not before:           Sat 21 May 2022 10:09:28 +0000
ROA not after:            Sat 20 May 2023 10:14:28 +0000
asID:                     20473
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9d:2f:4c:df:cd:f5:57:d2:48:32:cb:15:ad:9b:87:87:ef:3f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May 21 10:09:28 2022 GMT
            Not After : May 20 10:14:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:43:fe:db:de:ce:22:bd:56:23:af:c9:a5:
                    6a:88:df:e2:32:9e:d5:6b:0d:c1:20:fd:f8:58:d3:
                    16:9e:27:4b:eb:b5:f2:a1:02:fc:bd:ea:88:cd:43:
                    dd:93:a2:30:99:f6:bf:2f:a4:7c:3d:d0:4a:40:c0:
                    6c:f2:fc:52:61:30:1e:72:9f:55:a9:1b:fa:56:c5:
                    2c:cc:fa:d0:96:1e:21:19:f2:18:49:07:7a:ff:5c:
                    74:24:cf:41:d3:a7:68:78:41:94:95:5e:33:c8:d2:
                    73:38:a4:50:0b:6c:44:29:db:0b:f4:bf:6c:f3:a8:
                    ae:4b:40:3c:e7:b9:b4:6c:05:47:bc:27:bc:8d:00:
                    1d:c7:da:67:a6:9a:22:bf:58:a5:14:94:63:b1:82:
                    c9:18:0f:48:03:ea:16:6b:4d:a2:3f:9d:28:e1:df:
                    c4:66:60:08:28:6a:74:fa:bb:b5:a2:59:d3:cf:5c:
                    87:49:96:c5:2a:e6:ed:b0:9e:10:58:8c:3e:64:cf:
                    05:77:59:c2:ba:8b:ae:f4:60:83:b3:ef:80:df:aa:
                    25:8b:36:bb:a4:aa:33:91:47:af:85:fb:c1:df:22:
                    62:e7:7b:e3:41:7d:4c:d4:06:cc:19:97:18:d8:3b:
                    40:13:b3:5d:a5:f7:26:26:3a:27:35:90:d5:7b:20:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2D:1B:3B:4E:FA:5B:7E:87:0C:67:17:00:3A:75:49:F8:3F:DD:78
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138372e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:51:e5:64:e8:63:13:ef:15:6c:e6:7b:9a:28:23:0f:4e:41:
         38:13:9a:35:b4:8c:d7:5e:6f:f4:5f:35:24:65:ea:54:8b:a8:
         58:1d:e8:b6:c8:87:75:27:89:64:f3:93:8d:79:58:c7:94:ed:
         21:47:60:13:e6:29:47:8d:22:2b:d0:f4:69:af:7a:60:7d:cc:
         e3:99:18:b6:cd:19:f3:2a:ed:74:df:44:4e:0c:a1:af:35:2f:
         1b:a9:a6:e1:e3:ab:cb:32:b2:3e:64:4b:60:f5:14:29:e8:98:
         c0:76:e0:80:d1:eb:bd:ae:f3:3b:df:73:45:cc:12:19:4d:a8:
         7c:d3:c3:e7:25:3d:c4:e4:08:14:71:47:27:4d:f5:7f:af:48:
         dc:39:21:2e:9d:13:3c:82:83:a5:cf:25:4d:90:05:a6:e3:75:
         56:9c:cc:db:cd:c3:7b:20:2d:19:a6:3a:57:c9:bc:6a:08:92:
         4c:3a:af:bc:97:c2:a6:71:61:09:8a:c7:22:61:c0:aa:16:7e:
         fe:c7:2d:30:be:3c:47:03:15:0c:13:2c:31:4f:d9:c8:59:f8:
         39:90:9c:2c:30:83:f3:4b:4b:ec:1d:4f:b6:67:c6:58:9d:f8:
         98:57:27:ed:57:ab:63:bb:94:9f:d0:a4:e3:74:f3:65:05:31:
         c1:63:b4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org