Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
File:                     3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          3UXKJmpTPJqotWutpR6Q6l9CqX6jn2aJ9+Efe1PlH+E=
Subject key identifier:   07:84:57:38:6A:E5:8E:D5:3E:DE:7B:25:9C:62:07:6C:04:8C:A5:8D
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       79B086834AF516FFF6C57C490B911D4165A24A58
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa
Signing time:             Tue 05 Apr 2022 15:05:04 +0000
ROA not before:           Tue 05 Apr 2022 15:00:04 +0000
ROA not after:            Tue 04 Apr 2023 15:05:04 +0000
asID:                     212238
IP address blocks:        192.109.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b0:86:83:4a:f5:16:ff:f6:c5:7c:49:0b:91:1d:41:65:a2:4a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Apr  5 15:00:04 2022 GMT
            Not After : Apr  4 15:05:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:04:96:36:b3:3a:33:10:90:1f:87:ac:97:57:
                    df:12:4b:69:d0:d4:31:76:f6:9b:bc:39:1c:fa:03:
                    7b:f4:db:0c:85:83:f1:88:f6:3e:27:c7:ce:61:48:
                    b6:6c:d2:e3:96:e2:4d:4b:99:fb:3f:8c:ce:fe:94:
                    05:33:99:7c:ac:cb:27:aa:11:c1:33:d2:1f:e7:76:
                    70:c1:ea:f4:2b:60:d4:8a:04:b6:95:c7:eb:9e:bb:
                    5b:2a:f6:93:f6:7e:29:a8:76:53:32:b0:c1:bb:e1:
                    26:83:b2:14:ca:9c:c5:38:75:fb:15:35:06:3a:44:
                    41:5b:10:65:f4:7f:a8:b4:d2:4e:17:e9:64:39:d6:
                    52:9d:8e:fd:c9:60:2f:80:0d:49:a9:be:13:ea:04:
                    66:52:5d:2f:8e:8f:4e:ab:c3:b0:cb:cb:08:da:8c:
                    6f:57:d2:70:2c:23:ed:9f:5f:33:f5:49:b4:52:a7:
                    ea:48:40:80:3f:5d:c7:96:df:ca:76:a4:a1:d5:13:
                    ae:b8:1c:04:3e:af:b2:14:27:7c:58:32:61:c9:a4:
                    bb:3a:6a:7a:89:77:67:ef:c3:3b:f6:9e:69:a4:16:
                    06:72:5c:0e:be:85:86:cd:ba:a3:71:b2:0e:ec:fb:
                    da:0d:c8:cb:82:f0:b8:08:38:e3:aa:64:4e:a5:1f:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:57:38:6A:E5:8E:D5:3E:DE:7B:25:9C:62:07:6C:04:8C:A5:8D
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:8e:3d:f3:2c:1f:7f:bd:74:51:f5:ce:c2:b7:c0:3b:8b:
         1a:87:59:ff:c6:38:c4:9f:08:90:2f:b9:f0:b4:38:9d:bb:26:
         45:2a:62:66:6c:a5:e8:15:21:c9:f4:ba:29:b7:5c:fa:3a:7d:
         73:ec:d3:9c:81:ec:3a:3d:99:78:a2:78:4c:73:8a:67:27:ba:
         03:65:95:42:b8:38:b6:42:c4:60:71:70:30:c5:8b:19:50:12:
         5d:31:66:fb:31:d7:7d:10:86:8b:4e:94:dc:e9:8a:4a:5b:53:
         a3:3f:70:92:29:b4:13:b0:d3:f6:35:e1:60:43:0f:c8:0e:2e:
         7c:8d:8b:6b:37:78:3f:86:f8:1c:80:27:79:44:fb:7a:ce:a6:
         19:0e:e4:73:0b:02:33:23:0c:f2:5f:78:59:7d:c9:99:cb:20:
         2f:13:8c:5d:0b:f5:a0:28:f9:3f:05:0a:71:11:a5:ee:c8:d8:
         03:68:80:a2:cf:e3:d2:8a:89:16:68:4d:99:1c:ee:28:17:ac:
         7e:3e:20:92:5a:60:58:a9:d2:36:c4:cb:b6:f6:ac:88:07:64:
         05:f0:05:c0:4d:b0:bd:d0:bd:74:6c:3d:53:a2:1b:13:e4:90:
         e6:b5:f4:93:27:9e:53:b4:a7:be:bc:3f:cb:bd:a0:1b:7c:a2:
         bd:b4:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org