Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e203137323136.roa
File:                     3139382e33372e39362e302f32302d3234203d3e203137323136.roa (raw, json)
Hash identifier:          SC9LcLcT4jNqYHKg4NdCtCveEbO8RZSHUdcqOtEd3vk=
Subject key identifier:   9D:CE:8A:7B:7E:99:24:18:E1:C9:B7:00:A3:8F:A4:6B:0B:56:FA:E2
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       02EDF7DDAE6CEF4947D8CC3F9BCA833A241418D3
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e203137323136.roa
Signing time:             Thu 18 Nov 2021 15:53:31 +0000
ROA not before:           Thu 18 Nov 2021 15:48:31 +0000
ROA not after:            Thu 17 Nov 2022 15:53:31 +0000
asID:                     17216
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ed:f7:dd:ae:6c:ef:49:47:d8:cc:3f:9b:ca:83:3a:24:14:18:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:48:31 2021 GMT
            Not After : Nov 17 15:53:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:24:11:e6:66:d9:ca:d7:cd:c7:38:22:bf:
                    13:6e:e2:21:c9:c6:bc:62:c7:86:34:1e:d6:6d:59:
                    6a:85:1f:f3:96:b9:80:60:b9:dc:71:d7:45:d8:87:
                    b7:ba:d8:78:55:01:f8:de:a4:a5:07:a9:7c:71:94:
                    eb:dd:43:47:31:a7:46:23:a6:d7:f3:21:cf:0a:10:
                    fe:34:00:36:55:9e:df:d6:0c:27:40:cb:06:19:8e:
                    78:bb:37:55:6d:04:84:8e:de:ac:71:44:be:98:4b:
                    b2:66:10:62:b9:2e:58:9e:6b:42:bf:c0:72:00:e2:
                    ba:c9:c9:14:4a:3a:6a:79:91:3f:30:e8:0a:87:fa:
                    09:05:b0:a2:78:91:b3:bd:45:aa:18:8b:d3:13:dd:
                    83:5f:85:98:e6:6b:5b:60:6a:49:d2:d3:c6:1d:ea:
                    66:7b:09:e4:a7:3f:d0:bb:51:96:4e:e1:a2:d7:87:
                    1b:70:c9:b0:b4:c2:73:a4:9b:c2:06:5c:57:7a:84:
                    87:bd:36:f9:69:a3:a1:9b:1a:c6:54:d7:0e:73:07:
                    1e:02:b7:d7:d7:a8:9e:f8:d2:36:7c:ac:cb:95:89:
                    3c:a3:c9:b5:e8:39:f5:63:a6:fa:c6:80:c2:ac:b6:
                    40:90:6b:65:e4:41:8e:df:79:b8:35:9e:e5:da:00:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:8A:7B:7E:99:24:18:E1:C9:B7:00:A3:8F:A4:6B:0B:56:FA:E2
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:d8:dd:fd:d3:b7:6d:04:a7:95:61:f7:37:d6:4d:6a:57:57:
         aa:90:ba:29:60:2e:97:bd:ef:b7:70:bb:37:b6:10:21:b4:e1:
         46:19:09:95:57:2b:a2:ff:93:b5:83:d0:d1:7e:f0:be:3c:55:
         bf:ff:68:1d:b5:29:be:88:44:9c:b5:60:e8:d7:d4:f8:24:7f:
         46:bd:32:c0:1c:08:21:b9:c2:7d:7a:32:be:74:b1:41:a1:7b:
         c8:a3:c4:8d:28:ec:21:f9:93:fd:a6:4a:dc:33:49:cd:18:e6:
         ee:8e:d7:51:9c:e2:79:df:10:76:dd:0f:e5:e0:2a:d6:ef:6b:
         53:6e:25:58:f4:a6:a2:96:67:02:56:fa:9a:e6:42:c2:c8:71:
         51:6b:fa:bb:20:c6:14:9c:13:c0:13:26:9b:b9:04:e5:af:12:
         23:5e:e9:78:85:e2:ba:05:e9:8f:66:8c:f7:52:77:81:a1:72:
         d5:d2:06:89:cf:60:a5:8d:e2:79:61:ff:e0:da:10:b2:54:2e:
         4d:16:7b:0c:0e:ea:f3:75:20:43:29:29:a7:d9:90:27:9d:d9:
         8a:73:1d:90:16:1c:fd:77:e7:e2:cd:11:81:99:27:db:61:0b:
         ec:04:36:8d:fb:b0:5c:ee:4b:8c:59:fb:66:90:cd:13:eb:eb:
         6b:15:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org