Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          8uco2jEzugsN2sh2lc8fPzfznw9esPd+gRK902KN9Y0=
Subject key identifier:   95:A4:29:C9:E1:84:33:2A:8B:DD:F4:D3:BE:03:3C:87:8D:31:A2:B7
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       3008E0E00AE2F475E67D5BEE1CA64CF4BDD979
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
Signing time:             Thu 18 Nov 2021 15:56:48 +0000
ROA not before:           Thu 18 Nov 2021 15:51:48 +0000
ROA not after:            Thu 17 Nov 2022 15:56:48 +0000
asID:                     397373
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:08:e0:e0:0a:e2:f4:75:e6:7d:5b:ee:1c:a6:4c:f4:bd:d9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:51:48 2021 GMT
            Not After : Nov 17 15:56:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:95:fa:64:77:db:25:f0:38:29:c2:e9:50:
                    24:aa:3a:b6:30:da:77:23:81:0a:2f:73:20:21:dd:
                    5b:ff:cc:d5:c9:19:be:fb:49:19:9b:e6:d1:a1:49:
                    58:27:43:bf:c1:09:b9:aa:de:1f:5c:94:48:02:9c:
                    46:c7:bf:8c:bb:cc:f7:d6:51:b8:63:78:61:67:2e:
                    72:03:33:19:ff:ea:2a:62:da:7f:c5:14:14:94:0e:
                    26:04:02:cc:e9:c9:9c:84:7a:f1:3f:ed:b9:b7:93:
                    62:ad:18:38:9e:7a:6f:84:4f:79:2f:ac:ff:e8:4e:
                    88:5c:08:b4:1c:8d:be:9a:64:9e:ef:01:fa:b6:0f:
                    13:50:03:7e:62:ab:31:81:eb:09:02:e4:2d:b9:3c:
                    d7:18:47:5b:9b:9c:a7:dd:d8:0b:af:73:c7:bf:0f:
                    4b:0d:61:2e:48:cc:ca:8f:5f:ca:2a:d2:a2:c2:09:
                    40:14:d5:d1:ed:d7:c8:c2:be:04:af:01:18:56:42:
                    cc:cd:a5:0d:0a:1f:6e:62:82:e0:be:fd:ec:f0:f4:
                    3e:93:48:58:58:81:2c:84:02:d7:0c:b8:3e:46:77:
                    f9:c2:10:3b:7e:7f:da:da:d9:13:80:fe:75:df:52:
                    3e:f6:39:19:1e:be:ae:f5:ae:e8:d0:a5:ff:49:0a:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A4:29:C9:E1:84:33:2A:8B:DD:F4:D3:BE:03:3C:87:8D:31:A2:B7
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:93:3c:71:c9:e1:05:ef:86:cf:e3:74:b7:9f:5a:ad:94:0a:
         01:c1:cb:79:f3:75:df:d0:52:59:7b:c5:16:1c:a2:92:2d:61:
         10:08:80:38:ea:12:1b:f9:48:0d:0f:69:bf:40:6d:a6:b7:c0:
         75:4e:99:d0:43:03:c1:92:0d:1e:7d:b6:b6:d0:00:9d:db:72:
         11:0f:46:11:bf:af:e4:d2:e4:e0:95:e1:b1:16:6d:21:c7:21:
         06:b8:4b:18:0b:dc:11:c0:2f:f9:fe:50:2a:a6:d4:18:f6:39:
         27:e4:91:7b:f4:3e:9d:57:d4:e6:e5:93:b5:53:ad:14:19:0e:
         75:41:1d:ad:39:f0:06:83:4c:0b:b4:d7:a3:13:28:bb:d8:f4:
         b2:a0:b8:60:fc:d2:de:5a:e4:7c:dd:7e:f0:68:03:4f:2b:dd:
         9c:3a:ff:f3:92:b4:27:4d:30:97:86:8b:4e:28:06:7a:d6:8d:
         76:b5:a8:ac:40:24:7e:5a:c5:41:58:68:3d:e0:5c:8c:9a:d8:
         2d:b9:95:5b:96:56:58:bc:de:2c:08:fd:e4:cd:fb:6e:71:38:
         c1:2d:02:49:41:ad:b6:3b:fb:7f:c5:4c:08:1d:41:76:e4:17:
         fb:95:93:be:c8:c4:5d:a6:5c:7a:65:21:fe:0e:d5:52:5d:ab:
         6d:3b:67:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org