Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32342d3234203d3e203433323630.roa
File:                     3231362e3132322e3138382e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          BpU9YBvYjzLsPunOLhtnB2C9XoDvOkAlvxgcI2xB/Ag=
Subject key identifier:   6A:87:2D:84:E0:F4:DD:E8:6A:70:CB:DA:74:E6:A5:7A:38:E6:83:93
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       2280A4DCFFC83F879D33D76875070F94DB805D4D
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32342d3234203d3e203433323630.roa
Signing time:             Mon 09 May 2022 18:35:32 +0000
ROA not before:           Mon 09 May 2022 18:30:32 +0000
ROA not after:            Mon 08 May 2023 18:35:32 +0000
asID:                     43260
IP address blocks:        216.122.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:80:a4:dc:ff:c8:3f:87:9d:33:d7:68:75:07:0f:94:db:80:5d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May  9 18:30:32 2022 GMT
            Not After : May  8 18:35:32 2023 GMT
        Subject: CN=3082010A0282010100AE6E83A10D2F0C6F9B721CFA5F511ADEFD29A875468BF11F618368BE21730C41F13754B181DC0A1FAE1E4ECA570CD8731DD8BF85583D5B3E807590985BD2069CB35D0F48BF44BFDCFCB227BF96E222653247728F0DB3E53D36B424D7A5450409FC94907A79EC69CF7DB46E9848596537712990B0901844FA21BB1BCFFEEFB4197E4856894D6F4818B3746E4EA3BBB033BB5763F3B68B5266E17FB272C4C68DDE50481165277309F0DBB8FD427FA33FF67FFCBA2C4168E0D4C654C89950F984972F3FD23A801336C74DCF7E83FA4BD506D3565EEBC938232C78E6162BBE14AD6BE6CC66E3450228C4F9E2999A1B7A9DDC2D2DCE9A870E0073E20B45E20E1F16E90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:83:a1:0d:2f:0c:6f:9b:72:1c:fa:5f:51:
                    1a:de:fd:29:a8:75:46:8b:f1:1f:61:83:68:be:21:
                    73:0c:41:f1:37:54:b1:81:dc:0a:1f:ae:1e:4e:ca:
                    57:0c:d8:73:1d:d8:bf:85:58:3d:5b:3e:80:75:90:
                    98:5b:d2:06:9c:b3:5d:0f:48:bf:44:bf:dc:fc:b2:
                    27:bf:96:e2:22:65:32:47:72:8f:0d:b3:e5:3d:36:
                    b4:24:d7:a5:45:04:09:fc:94:90:7a:79:ec:69:cf:
                    7d:b4:6e:98:48:59:65:37:71:29:90:b0:90:18:44:
                    fa:21:bb:1b:cf:fe:ef:b4:19:7e:48:56:89:4d:6f:
                    48:18:b3:74:6e:4e:a3:bb:b0:33:bb:57:63:f3:b6:
                    8b:52:66:e1:7f:b2:72:c4:c6:8d:de:50:48:11:65:
                    27:73:09:f0:db:b8:fd:42:7f:a3:3f:f6:7f:fc:ba:
                    2c:41:68:e0:d4:c6:54:c8:99:50:f9:84:97:2f:3f:
                    d2:3a:80:13:36:c7:4d:cf:7e:83:fa:4b:d5:06:d3:
                    56:5e:eb:c9:38:23:2c:78:e6:16:2b:be:14:ad:6b:
                    e6:cc:66:e3:45:02:28:c4:f9:e2:99:9a:1b:7a:9d:
                    dc:2d:2d:ce:9a:87:0e:00:73:e2:0b:45:e2:0e:1f:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:87:2D:84:E0:F4:DD:E8:6A:70:CB:DA:74:E6:A5:7A:38:E6:83:93
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3138382e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:00:c3:b0:7e:b7:ee:29:2d:d9:83:72:ac:56:55:95:9a:c8:
         b7:6c:95:b3:ad:42:e7:e3:3b:4e:3d:7d:a8:b3:56:30:56:f2:
         a3:ea:f0:f5:f9:e7:69:4d:0c:ac:a1:4b:4d:41:36:28:36:c9:
         a0:ec:53:a8:0e:54:9b:99:45:53:b9:f6:9b:89:28:77:4d:15:
         3a:e8:22:18:24:d1:c1:fa:2a:cd:89:92:4c:ee:d2:67:53:d1:
         b7:86:0b:b2:01:2c:3c:27:ed:4b:9d:3f:ea:de:f4:61:a2:59:
         7f:a0:e9:c2:a5:90:9b:a0:79:f3:1e:25:98:64:9b:dd:40:b6:
         f8:d7:69:87:51:74:0c:27:2e:a6:c4:5d:f2:93:7a:a5:b8:02:
         6b:ce:f6:53:63:ac:01:56:d4:a3:5b:ef:11:4d:cc:90:3b:4b:
         54:28:da:c7:a1:8b:b9:8c:1e:06:78:2a:e7:a3:f1:59:61:8e:
         21:e8:a0:f3:57:a6:c5:b6:ab:1e:b0:33:b8:b5:47:a1:19:6c:
         58:01:6b:51:3b:a2:e8:f3:c1:d5:f6:08:ef:63:e3:dd:0d:d3:
         76:4f:e5:23:67:06:8d:70:72:96:5e:ee:88:2a:df:f0:10:1d:
         72:5e:1f:02:b1:13:f6:83:1e:f0:11:b2:2e:cc:e1:cf:17:e7:
         37:d2:a7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org