Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32322d3232203d3e203439333932.roa
File:                     3231362e3132322e3138382e302f32322d3232203d3e203439333932.roa (raw, json)
Hash identifier:          gEjQW/dCG6guAl2AUBG4SFhyggjA6squCtonVyH/Rf8=
Subject key identifier:   40:B8:42:4B:54:C4:3D:F8:65:9E:4E:07:7E:D0:47:3B:6F:F3:90:69
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       478A9D9A934149D2557634C47A7C5D6B3980CE91
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32322d3232203d3e203439333932.roa
Signing time:             Tue 22 Feb 2022 11:57:43 +0000
ROA not before:           Tue 22 Feb 2022 11:52:43 +0000
ROA not after:            Tue 21 Feb 2023 11:57:43 +0000
asID:                     49392
IP address blocks:        216.122.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8a:9d:9a:93:41:49:d2:55:76:34:c4:7a:7c:5d:6b:39:80:ce:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: Feb 22 11:52:43 2022 GMT
            Not After : Feb 21 11:57:43 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:1e:ee:53:a2:61:15:de:0c:52:e4:81:28:
                    38:26:fa:5b:66:45:aa:83:c0:30:73:d1:dd:8f:9e:
                    0d:05:0f:d3:fe:b8:3c:34:b1:c2:05:41:ff:59:9c:
                    a1:f3:5a:c2:ad:b5:96:21:11:76:69:59:c3:78:c6:
                    b2:ec:6f:52:8b:ae:22:4b:f4:aa:0a:99:36:db:a9:
                    a3:c0:a0:13:ae:c4:e5:8a:ff:ae:6b:e3:89:03:30:
                    25:2e:42:1f:24:b6:21:b4:df:a0:33:c0:b8:d2:dd:
                    7f:63:46:e2:9d:52:34:69:19:29:ad:e5:26:6c:05:
                    5a:92:05:26:1e:57:1f:20:a4:9e:c9:ad:35:0a:af:
                    7f:14:28:ac:48:48:61:39:c0:b7:d2:a4:38:54:f3:
                    21:da:51:c3:9c:4e:18:f6:9c:c2:bf:cc:6e:7e:1e:
                    86:0c:3e:0c:0f:b8:71:46:f3:e5:d4:21:d5:1e:4d:
                    80:94:92:4d:e8:69:56:0b:88:9a:21:ca:02:f4:3d:
                    7b:df:72:1d:14:ba:15:99:9e:1d:a5:d2:9e:9c:55:
                    be:af:cb:7e:e3:cc:83:0e:f3:8c:72:44:68:5e:47:
                    da:12:73:e7:85:16:d8:0d:a0:ad:fe:6b:cf:e2:ed:
                    82:00:2b:18:ab:35:e6:2e:c0:46:61:95:fb:53:19:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B8:42:4B:54:C4:3D:F8:65:9E:4E:07:7E:D0:47:3B:6F:F3:90:69
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32322d3232203d3e203439333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:75:28:20:6b:22:7b:1a:2f:ba:ee:57:40:2f:26:2c:c0:c7:
         f5:98:da:2f:51:34:d5:2f:db:ab:8f:b4:be:28:87:1a:b1:83:
         cc:70:43:1b:ed:f7:38:37:dc:8e:ad:da:1f:fa:66:50:cf:a3:
         d4:ca:e1:2f:f1:ea:cf:42:79:26:68:f7:51:fb:00:e9:41:f5:
         2d:6c:37:57:0b:4e:84:bd:13:81:87:90:16:f4:f0:bd:16:76:
         4e:8f:4f:97:a2:15:03:c6:ab:72:6a:d8:d7:57:ca:4d:3c:0e:
         1f:6f:5a:bd:99:45:47:e9:12:6d:fa:78:da:d0:ca:27:55:cd:
         a4:f4:86:1f:7a:63:e8:0d:4c:c4:c5:ae:53:01:ad:86:cc:33:
         00:a3:42:ad:34:3e:53:09:e5:88:7a:4d:31:be:4f:0d:2f:96:
         12:54:bc:65:c4:ee:11:53:56:52:1b:02:a4:6a:88:b4:75:ab:
         ce:87:1f:71:ad:ff:03:94:73:e3:6b:19:d7:54:ac:7d:02:4d:
         bd:53:3c:65:c3:d3:a4:d0:ae:a2:6c:40:fe:c1:d2:62:5b:e9:
         7c:27:bc:c9:a8:c6:5f:ac:e0:17:3f:43:ea:25:42:93:c1:08:
         87:b4:fa:db:fa:d9:14:f6:ee:ce:7b:d5:ea:c2:6c:3f:12:45:
         59:63:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org