Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa
File:                     3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa (raw, json)
Hash identifier:          ey89kQYDA82F7erTEYdKJ12BaltthGso587fLjFWYKA=
Subject key identifier:   C5:CA:A6:4A:FA:A8:04:D3:7A:D5:26:EF:FB:A7:87:07:1D:02:EB:EF
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       55117FD6D5AC7D144F2964D03BC21940320D5054
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa
Signing time:             Thu 24 Mar 2022 07:59:56 +0000
ROA not before:           Thu 24 Mar 2022 07:54:56 +0000
ROA not after:            Thu 23 Mar 2023 07:59:56 +0000
asID:                     208911
IP address blocks:        192.109.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:7f:d6:d5:ac:7d:14:4f:29:64:d0:3b:c2:19:40:32:0d:50:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Mar 24 07:54:56 2022 GMT
            Not After : Mar 23 07:59:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:5c:8b:ef:0c:77:cb:8c:53:41:a3:7e:f8:
                    b3:7f:a0:2b:0b:f6:2a:d8:01:a3:3c:25:c1:83:cf:
                    81:46:bb:b6:47:56:61:f6:b3:73:b7:7f:eb:ed:2c:
                    cb:4a:b3:c2:b1:44:47:80:54:c5:fd:da:3a:c3:d5:
                    d8:de:d4:77:90:cc:37:cc:8e:b1:95:42:4a:46:b8:
                    9c:ee:17:59:13:d7:fb:d9:d0:94:72:2c:cd:dd:a2:
                    b5:c0:97:e5:98:5b:ee:b8:b2:73:53:34:fa:2e:1a:
                    94:0f:ff:66:fe:25:e4:db:21:86:d3:c9:cc:73:0a:
                    49:94:0b:2c:40:34:3a:a3:40:94:3c:f2:dd:c4:26:
                    20:23:4c:4d:68:c2:5f:6b:98:ab:4a:7a:b2:e0:41:
                    82:50:f9:b3:3b:6f:b0:d6:a6:ce:4f:f9:05:5c:05:
                    25:28:a0:cc:db:2c:be:73:3e:54:b2:2f:91:6d:cd:
                    b4:3f:f4:74:d7:b1:fa:e6:29:78:27:2a:f4:2f:c7:
                    43:bf:67:8b:78:4c:a8:e3:ca:c1:22:4a:07:34:c2:
                    41:8c:4c:0e:29:7d:dd:6d:fa:de:68:a6:5e:0f:53:
                    82:8f:e5:e3:ae:ea:56:b2:b8:38:c7:c0:79:88:08:
                    b7:29:25:84:2f:1b:87:b3:0f:ab:5e:a9:a3:4d:9b:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CA:A6:4A:FA:A8:04:D3:7A:D5:26:EF:FB:A7:87:07:1D:02:EB:EF
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3134392e302f32342d3234203d3e20323038393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:14:7a:a8:86:26:e5:d6:40:5b:20:83:0e:9a:bf:16:c6:
         c3:9b:0a:1a:8e:f9:a0:20:95:ad:5c:19:9a:b5:5e:ef:4f:a1:
         8f:60:cd:1c:67:12:8b:3d:24:7a:13:c5:15:ef:95:a6:cd:a5:
         63:31:c1:c2:94:23:c3:22:07:17:01:f5:34:fd:c5:01:69:25:
         1b:c7:1f:bc:7f:88:e6:7f:83:0d:71:c8:d0:73:00:5c:37:0e:
         ba:bf:91:90:e8:f2:ae:8d:b2:0c:6d:a5:44:ca:70:04:4e:d9:
         a4:97:a4:e9:8b:1d:45:a4:1d:a8:a2:63:c3:09:57:2e:44:89:
         e5:ca:e0:9d:ab:7c:b0:fb:a4:08:d8:55:c9:08:14:0e:1c:c0:
         b6:46:8e:ae:3a:94:9d:c2:87:e3:4f:47:2b:52:ca:cf:3a:43:
         50:dc:47:92:56:86:50:a5:29:2e:c1:32:6e:e3:8c:d8:07:42:
         7a:d7:41:a5:3a:19:8d:1c:6e:7a:e9:f9:9e:6b:a6:80:bb:e2:
         59:9f:98:01:62:72:74:6b:17:a1:f1:de:8a:73:d3:21:5f:7f:
         72:54:e0:40:81:92:3a:e5:da:5e:68:9b:45:94:79:82:2f:c3:
         1a:ab:be:84:80:bf:b8:07:8d:5b:eb:56:5a:27:6b:7c:b3:66:
         cd:dd:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org