Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3134392e302f32342d3234203d3e203439313237.roa
File:                     3139322e3130392e3134392e302f32342d3234203d3e203439313237.roa (raw, json)
Hash identifier:          QAQwNOzH5zqoscW3U3RearWRqRkUjyC1JbI9ZOksPVw=
Subject key identifier:   CA:73:05:12:82:EB:E4:E3:F1:28:8E:FA:7D:95:97:86:45:70:0E:44
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       4D8718FE9420E2D76B792B6C26A40657F7EBEEF9
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3134392e302f32342d3234203d3e203439313237.roa
Signing time:             Thu 03 Feb 2022 10:22:11 +0000
ROA not before:           Thu 03 Feb 2022 10:17:11 +0000
ROA not after:            Thu 02 Feb 2023 10:22:11 +0000
asID:                     49127
IP address blocks:        192.109.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:87:18:fe:94:20:e2:d7:6b:79:2b:6c:26:a4:06:57:f7:eb:ee:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Feb  3 10:17:11 2022 GMT
            Not After : Feb  2 10:22:11 2023 GMT
        Subject: CN=3082010A0282010100E3F789300BC90912D3DB306CA0EE1C8486098B82D97AFEF7A36BF9BA1F1154F75E0D0DA4BD9D1DD0B61BC0BCE4385C4D4053A26632093650DAB8305A799680624E41B57BE7726A794281DB2D6444BBDD3D5DFE9B23DF71B4159874D13B72DB3F3A03F1FE426554C71BA4D40F668DEFC4E1A159C894C33C442FACF881FC00313F2B345B880B5034ED7C08BA56FB3DB8C539707CF4C1DCB050F21C139E4356170B3562A9D2ABAE10B64AD945A418C67AE3EC5973AA9333E74083AB6C80DF4A5BCBBBE797563B4765290D4285672242B89E011E55D35CD99FB89DAA7FE0BD1B4D6D1995C922A268515C7A15D84EF18D3E3E4E5679FD9A53864F162FCC2C23E72EED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f7:89:30:0b:c9:09:12:d3:db:30:6c:a0:ee:
                    1c:84:86:09:8b:82:d9:7a:fe:f7:a3:6b:f9:ba:1f:
                    11:54:f7:5e:0d:0d:a4:bd:9d:1d:d0:b6:1b:c0:bc:
                    e4:38:5c:4d:40:53:a2:66:32:09:36:50:da:b8:30:
                    5a:79:96:80:62:4e:41:b5:7b:e7:72:6a:79:42:81:
                    db:2d:64:44:bb:dd:3d:5d:fe:9b:23:df:71:b4:15:
                    98:74:d1:3b:72:db:3f:3a:03:f1:fe:42:65:54:c7:
                    1b:a4:d4:0f:66:8d:ef:c4:e1:a1:59:c8:94:c3:3c:
                    44:2f:ac:f8:81:fc:00:31:3f:2b:34:5b:88:0b:50:
                    34:ed:7c:08:ba:56:fb:3d:b8:c5:39:70:7c:f4:c1:
                    dc:b0:50:f2:1c:13:9e:43:56:17:0b:35:62:a9:d2:
                    ab:ae:10:b6:4a:d9:45:a4:18:c6:7a:e3:ec:59:73:
                    aa:93:33:e7:40:83:ab:6c:80:df:4a:5b:cb:bb:e7:
                    97:56:3b:47:65:29:0d:42:85:67:22:42:b8:9e:01:
                    1e:55:d3:5c:d9:9f:b8:9d:aa:7f:e0:bd:1b:4d:6d:
                    19:95:c9:22:a2:68:51:5c:7a:15:d8:4e:f1:8d:3e:
                    3e:4e:56:79:fd:9a:53:86:4f:16:2f:cc:2c:23:e7:
                    2e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:73:05:12:82:EB:E4:E3:F1:28:8E:FA:7D:95:97:86:45:70:0E:44
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3134392e302f32342d3234203d3e203439313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:74:9e:bd:f6:b7:56:6d:c5:a7:df:9c:a5:a4:fc:51:0f:
         0b:4a:4b:bd:bb:16:ca:10:90:4d:4c:92:f1:9f:70:0a:94:68:
         fb:77:f5:29:43:71:12:06:43:38:11:d0:90:55:cc:20:be:10:
         74:4f:30:c0:fa:6f:34:22:b7:2a:2f:2e:95:94:57:cb:e9:1b:
         31:3d:4c:d5:50:d4:3f:0c:90:c6:ce:44:81:42:80:79:4e:27:
         72:62:6f:07:78:19:42:e8:e0:34:ea:a5:f7:b8:46:01:9f:b2:
         a5:ed:6f:c2:63:df:61:2e:a0:e6:f3:c3:d6:0d:50:d1:27:07:
         40:d5:a9:63:4b:fc:48:d2:6c:72:98:80:29:ab:53:a8:3a:ea:
         1f:93:6c:4b:6b:7c:40:70:87:12:d7:2f:df:89:a3:1b:dc:b9:
         95:f4:f0:4e:f7:3d:1a:8f:e4:5a:9d:c0:ea:2b:8a:42:03:4e:
         2c:a8:03:65:0c:7d:84:50:14:77:db:13:fd:b4:ec:69:cd:9c:
         1b:fd:56:25:ce:a5:f3:2b:79:af:20:bd:cf:46:47:86:33:a8:
         25:86:8d:31:43:a9:25:ac:a3:ae:d1:7e:25:c4:36:8b:ca:47:
         19:e9:3c:bc:6e:f1:b2:14:82:64:fa:4b:20:24:7e:9b:e7:66:
         00:cc:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org