Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139312e302f32342d3234203d3e2031323339.roa
File:                     3231362e3132322e3139312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          TAm6Ibs8X7z6yi8v9aBhG+fehr1O+xdRs54EM4S3t3o=
Subject key identifier:   A8:8D:53:B0:C6:17:09:F3:26:C7:98:3D:72:5A:C3:55:C9:E0:D4:63
Certificate issuer:       /CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
Certificate serial:       7DF8CB5B45BB364D4D2875E6DE420549B1E19015
Authority key identifier: 3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B
Authority info access:    rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139312e302f32342d3234203d3e2031323339.roa
Signing time:             Tue 10 May 2022 07:35:57 +0000
ROA not before:           Tue 10 May 2022 07:30:57 +0000
ROA not after:            Tue 09 May 2023 07:35:57 +0000
asID:                     1239
IP address blocks:        216.122.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f8:cb:5b:45:bb:36:4d:4d:28:75:e6:de:42:05:49:b1:e1:90:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F159BEF6452E03E684BF5671A1B012AC2F07F0B
        Validity
            Not Before: May 10 07:30:57 2022 GMT
            Not After : May  9 07:35:57 2023 GMT
        Subject: CN=3082010A0282010100CA79C4125D8A3C07B92480A46106F5196ABB5B38CA0648A50516CDE2BEEA9CE830589210698B017CC901B94F424458E3B5B1F3841F4F38C23D5DADA30AE67BDD16E0BFD40252DCC44788EB32323FE5560C5D3808F2E3933D03E020EF0C525DF2782B0D78A826045C7F3DBBBBC655BD02315A453B086E0CBB072030E3F90CC8D40F0EB83AB037997E3A315E29103C36E0948AF7B72D6C7E0A339D75400218B575ECF07CBB7B6072C9EEF68D9A3D94613FC6F0149E8017DB01503BFDF1DE18F8FD559E1DF8B3CF7E9B1C27E58EC27E683FE0CD7DAE37E671A69F48E53163ECE65706967549F48023AC3463D7DE73A96F139BE1B373B09839F9C1726CEC2C8C0A6D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:79:c4:12:5d:8a:3c:07:b9:24:80:a4:61:06:
                    f5:19:6a:bb:5b:38:ca:06:48:a5:05:16:cd:e2:be:
                    ea:9c:e8:30:58:92:10:69:8b:01:7c:c9:01:b9:4f:
                    42:44:58:e3:b5:b1:f3:84:1f:4f:38:c2:3d:5d:ad:
                    a3:0a:e6:7b:dd:16:e0:bf:d4:02:52:dc:c4:47:88:
                    eb:32:32:3f:e5:56:0c:5d:38:08:f2:e3:93:3d:03:
                    e0:20:ef:0c:52:5d:f2:78:2b:0d:78:a8:26:04:5c:
                    7f:3d:bb:bb:c6:55:bd:02:31:5a:45:3b:08:6e:0c:
                    bb:07:20:30:e3:f9:0c:c8:d4:0f:0e:b8:3a:b0:37:
                    99:7e:3a:31:5e:29:10:3c:36:e0:94:8a:f7:b7:2d:
                    6c:7e:0a:33:9d:75:40:02:18:b5:75:ec:f0:7c:bb:
                    7b:60:72:c9:ee:f6:8d:9a:3d:94:61:3f:c6:f0:14:
                    9e:80:17:db:01:50:3b:fd:f1:de:18:f8:fd:55:9e:
                    1d:f8:b3:cf:7e:9b:1c:27:e5:8e:c2:7e:68:3f:e0:
                    cd:7d:ae:37:e6:71:a6:9f:48:e5:31:63:ec:e6:57:
                    06:96:75:49:f4:80:23:ac:34:63:d7:de:73:a9:6f:
                    13:9b:e1:b3:73:b0:98:39:f9:c1:72:6c:ec:2c:8c:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8D:53:B0:C6:17:09:F3:26:C7:98:3D:72:5A:C3:55:C9:E0:D4:63
            X509v3 Authority Key Identifier:
                keyid:3F:15:9B:EF:64:52:E0:3E:68:4B:F5:67:1A:1B:01:2A:C2:F0:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-10/0/3F159BEF6452E03E684BF5671A1B012AC2F07F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/58f33e9d-045c-441a-8e72-e03e3bb7b553-8/0/3231362e3132322e3139312e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c9:9a:61:60:7f:2d:c9:0e:52:9b:e2:a2:15:06:38:09:10:
         fc:f0:d0:67:5e:5f:d2:7b:65:7a:7e:4a:5a:9b:c2:60:29:a4:
         9b:c7:83:9d:a0:e1:48:68:80:87:aa:99:dd:ef:7a:86:60:30:
         a0:19:b6:82:a4:3c:af:11:86:13:08:fe:d7:3d:fd:25:15:68:
         f4:56:a8:ba:73:89:de:c1:92:cf:44:83:00:ac:84:06:b7:01:
         f9:c4:b8:bf:f2:a2:dd:6d:cd:a9:f5:cf:1f:86:cd:b9:e5:81:
         84:cb:c6:ab:d8:fa:e1:f4:56:53:d9:31:fa:36:3d:49:c0:e6:
         95:32:a2:11:5d:7d:77:77:d9:1d:3b:4a:91:11:9b:85:3f:b9:
         b3:bb:12:c7:af:da:b5:2f:20:f9:2a:c6:fd:dd:41:c9:72:f6:
         26:b8:64:dc:24:d7:05:cb:79:4e:bb:c6:4c:58:ca:8d:10:09:
         d4:7c:af:0b:e9:77:a5:6a:a6:61:f9:8f:b0:da:91:ec:ac:d4:
         b7:cb:e1:29:7f:04:94:90:0d:86:5b:c3:2b:16:a3:89:15:29:
         06:d7:41:4c:22:3c:b5:e1:42:a4:5b:16:93:46:7c:15:62:55:
         bd:b6:3d:f3:60:c7:51:3d:94:a3:7c:cc:00:a4:9a:1b:e9:ca:
         dc:97:a7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org