Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3132352e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          iYZ0QHDo6UelPqk0ifqdxW/AMMN85aVRePqERJtHUuE=
Subject key identifier:   C5:A7:97:66:11:41:12:6F:E1:10:C7:C5:54:6F:E3:2F:B1:EF:39:9F
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       0CAA6898E8CB41A3797B3063C9F1A8B54B740782
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa
Signing time:             Thu 18 Nov 2021 15:59:18 +0000
ROA not before:           Thu 18 Nov 2021 15:54:18 +0000
ROA not after:            Thu 17 Nov 2022 15:59:18 +0000
asID:                     53340
IP address blocks:        198.37.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:aa:68:98:e8:cb:41:a3:79:7b:30:63:c9:f1:a8:b5:4b:74:07:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:54:18 2021 GMT
            Not After : Nov 17 15:59:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:78:94:fa:db:b2:66:7b:19:b3:f1:38:42:
                    66:7d:d1:1c:ed:df:5c:80:d5:e5:67:25:b7:24:43:
                    0e:3d:9b:a3:fd:a4:0b:e7:9e:25:a2:29:8c:e9:cd:
                    11:5d:6d:86:e2:7f:15:ce:4b:d4:92:fc:ec:0f:74:
                    18:82:08:83:40:ce:e2:bc:27:ab:21:d4:8e:b6:90:
                    ed:d4:7d:62:29:f0:52:99:ce:bb:a0:14:ef:1e:52:
                    64:37:9d:4f:f9:30:0a:31:7a:64:ee:4f:d6:15:40:
                    0c:69:f7:05:6f:fa:cc:c8:47:e7:e3:8c:d7:45:9b:
                    5a:5f:51:d6:5f:55:8c:34:0b:3a:31:90:dd:06:5d:
                    36:5a:b8:fd:ed:d4:d9:21:ac:7a:08:16:a2:8a:a6:
                    99:e2:88:a6:ae:6f:13:2c:6b:08:b1:69:49:4e:0f:
                    0a:06:8d:93:f7:6a:b0:ba:00:0b:eb:41:20:9a:18:
                    2d:d5:ad:41:6c:00:9b:5d:6d:b3:e9:40:51:ae:93:
                    a6:f2:47:fa:98:cf:8e:38:b3:43:55:f5:64:a5:c9:
                    6a:3d:58:10:5d:1a:f0:46:a1:3a:a1:56:87:51:aa:
                    1c:8b:b0:2f:a3:5c:0e:bc:60:e4:19:4e:64:b3:c5:
                    fa:f2:6c:78:31:2d:5c:4d:ef:9e:ef:00:78:26:e6:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A7:97:66:11:41:12:6F:E1:10:C7:C5:54:6F:E3:2F:B1:EF:39:9F
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e3132352e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:0d:22:ad:f1:a8:c3:fb:1f:d8:22:28:00:54:48:72:3b:
         2f:12:aa:52:f9:56:69:d3:d8:f4:8b:90:72:f4:2d:75:dd:3a:
         fd:ec:34:87:6d:fe:04:9d:1d:fd:63:b0:ad:ea:d4:d9:bb:80:
         2a:cb:58:74:bc:f2:77:ee:e4:88:8b:7f:c9:9c:ec:13:61:c9:
         1b:72:3c:37:f6:4a:7c:6a:91:a3:84:6e:9a:1e:ae:3b:b4:62:
         96:9b:dd:ea:f7:d8:ae:5d:5c:d5:92:06:09:87:02:ae:80:8f:
         9d:48:01:c6:09:db:0d:64:43:c0:3d:a6:25:1a:84:64:0f:dc:
         df:5a:d8:90:b8:e2:99:84:7a:47:fa:74:ff:cf:a2:10:d4:d3:
         d8:3c:85:f8:ff:7f:43:00:00:2e:c5:07:db:b5:50:fb:fa:e2:
         4b:13:ed:d6:b8:50:22:e7:64:b1:39:1f:b0:55:05:4f:16:54:
         c2:4b:b1:01:a1:74:fd:b3:51:c3:9e:f8:4e:ed:b7:f8:c2:d7:
         30:a4:6f:a6:58:2b:36:8d:50:3d:36:70:b5:64:43:3a:9f:8b:
         b5:2e:6b:e5:87:22:45:6c:47:48:c7:5c:16:c8:73:85:bc:30:
         a0:75:cc:64:22:76:86:1f:a2:69:b4:d5:e2:5e:e9:fe:ac:b5:
         ca:e1:1b:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org