Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa
File:                     3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          jvYW/8tk6qtRX7XXm+fZyT7ADtpQa6jAcSvjw5pJ0TQ=
Subject key identifier:   A7:05:59:77:2F:94:E8:F5:EF:55:EF:21:39:5A:35:1D:12:30:1C:5E
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       2D0E32A1ED49279AE311A5A3B71C658F621C3C99
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa
Signing time:             Thu 03 Feb 2022 16:27:10 +0000
ROA not before:           Thu 03 Feb 2022 16:22:10 +0000
ROA not after:            Thu 02 Feb 2023 16:27:10 +0000
asID:                     49981
IP address blocks:        192.109.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0e:32:a1:ed:49:27:9a:e3:11:a5:a3:b7:1c:65:8f:62:1c:3c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Feb  3 16:22:10 2022 GMT
            Not After : Feb  2 16:27:10 2023 GMT
        Subject: CN=3082010A0282010100B65E5989682B19DC0F3E59F6D6ADCCCB58238D7BF309C567EF831F1911599C6E8B63500B5470348C87F60FA9A5D5B5B151D305FE9874A063E70C4D8AAE782EB69A3F9DB1E4CB897CF57E64D116E4ECDA01DA6A8066119F570FBA1F436461AAD75C67CDE031CD5B7B63A065DF86B8B1C5DC4E01BFA2B2115D62CE80A1118AA8DB7E417A4A8220CB89526920161BAB7B97E3E3160B6688EC983599769023F55696A1479DB180114DFBB44F291545E91A7CCBF08739B090B8910A78D8C93EEA75EB627DED1B437DC9A25F9045DECBB2982689BC0F83397BB9590B8340BAFA0C23E43913F0BF1DC3900DCEEE92C9BA39AB8C2A6902074F8E97E4FAE795C64E8652190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:59:89:68:2b:19:dc:0f:3e:59:f6:d6:ad:
                    cc:cb:58:23:8d:7b:f3:09:c5:67:ef:83:1f:19:11:
                    59:9c:6e:8b:63:50:0b:54:70:34:8c:87:f6:0f:a9:
                    a5:d5:b5:b1:51:d3:05:fe:98:74:a0:63:e7:0c:4d:
                    8a:ae:78:2e:b6:9a:3f:9d:b1:e4:cb:89:7c:f5:7e:
                    64:d1:16:e4:ec:da:01:da:6a:80:66:11:9f:57:0f:
                    ba:1f:43:64:61:aa:d7:5c:67:cd:e0:31:cd:5b:7b:
                    63:a0:65:df:86:b8:b1:c5:dc:4e:01:bf:a2:b2:11:
                    5d:62:ce:80:a1:11:8a:a8:db:7e:41:7a:4a:82:20:
                    cb:89:52:69:20:16:1b:ab:7b:97:e3:e3:16:0b:66:
                    88:ec:98:35:99:76:90:23:f5:56:96:a1:47:9d:b1:
                    80:11:4d:fb:b4:4f:29:15:45:e9:1a:7c:cb:f0:87:
                    39:b0:90:b8:91:0a:78:d8:c9:3e:ea:75:eb:62:7d:
                    ed:1b:43:7d:c9:a2:5f:90:45:de:cb:b2:98:26:89:
                    bc:0f:83:39:7b:b9:59:0b:83:40:ba:fa:0c:23:e4:
                    39:13:f0:bf:1d:c3:90:0d:ce:ee:92:c9:ba:39:ab:
                    8c:2a:69:02:07:4f:8e:97:e4:fa:e7:95:c6:4e:86:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:05:59:77:2F:94:E8:F5:EF:55:EF:21:39:5A:35:1D:12:30:1C:5E
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3131392e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:0f:82:ac:2f:01:c6:80:c8:51:a2:9b:9a:85:88:b1:5a:49:
         a3:87:a5:b6:29:c5:03:2e:f6:e8:dc:a2:8b:25:35:db:86:e4:
         78:0b:99:14:04:a9:7c:36:7a:9d:c7:36:b0:be:00:50:76:8c:
         70:4c:a1:a3:76:16:f5:0d:6e:74:24:90:7b:b9:ea:dc:1c:ae:
         7f:95:45:a9:8d:25:8d:6b:3a:30:3e:c8:22:8c:5b:59:bb:09:
         3a:20:64:42:9a:9a:5f:c1:a0:c7:37:4b:59:b9:4a:08:c0:13:
         cb:54:ca:44:61:60:e7:cb:c8:2f:3f:3b:f8:17:b6:a1:ac:2c:
         75:b4:0f:f3:1d:02:d8:9a:c2:f0:46:b7:3f:e1:0f:ec:4e:27:
         72:7a:f7:ee:b9:dd:fe:bb:7f:73:2b:aa:3e:96:52:63:22:90:
         0b:35:39:ac:ba:02:e2:1a:33:fa:6d:6e:c0:7c:0f:ca:f1:33:
         c6:1a:fd:b4:7c:7e:dc:02:30:59:4d:db:59:7e:23:b5:58:07:
         02:63:51:4d:86:0d:27:3e:9f:cc:c3:61:bc:2e:b3:40:d4:10:
         4a:dc:dd:35:c4:4e:49:81:38:06:71:6f:f0:89:41:4c:89:de:
         68:dd:e5:c9:c2:46:1f:88:4e:22:c9:0e:1a:d7:ce:4a:0e:ac:
         35:76:55:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org