Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          p2MHAwpPhMN0+A0yZ2PDOzzk7SBriZteqQgAGwdt2+Y=
Subject key identifier:   A4:64:98:07:2F:E3:0C:56:91:66:2E:D0:C2:61:EF:CE:8B:6E:CB:6D
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       7410CA540501C655751A9927249E4ACB841E3468
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa
Signing time:             Thu 18 Nov 2021 15:55:41 +0000
ROA not before:           Thu 18 Nov 2021 15:50:41 +0000
ROA not after:            Thu 17 Nov 2022 15:55:41 +0000
asID:                     397423
IP address blocks:        198.37.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:ca:54:05:01:c6:55:75:1a:99:27:24:9e:4a:cb:84:1e:34:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:50:41 2021 GMT
            Not After : Nov 17 15:55:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:2d:44:67:32:83:af:b3:29:7e:30:20:d4:
                    c9:0f:82:91:a3:26:c3:4d:e1:d3:03:ad:d1:d7:67:
                    b0:a5:a3:ef:07:ce:cc:26:e7:6b:9b:bd:c2:d3:fe:
                    2d:a1:fd:30:8c:31:4f:64:85:b4:05:ee:25:0c:12:
                    8b:ba:34:4e:d9:8e:c8:06:f4:38:f5:64:5c:b8:d7:
                    eb:01:44:84:88:40:89:0d:76:8d:de:a2:b0:4e:8b:
                    27:d3:63:e8:76:66:b5:df:04:da:c4:ed:85:4e:88:
                    8b:ed:6f:21:a6:a3:22:6b:97:be:d2:03:bc:fa:34:
                    1f:01:be:f6:f9:81:c5:bb:c2:22:ce:6f:c5:93:60:
                    61:e9:97:be:14:18:ed:6d:65:a3:d1:f5:39:5c:12:
                    bf:1f:c5:b1:86:4d:04:29:12:0b:d9:10:54:53:ce:
                    36:44:5f:72:41:f4:01:57:95:44:47:27:6b:88:93:
                    ab:5a:ff:41:30:11:86:a4:1e:8d:7b:8b:f5:6d:27:
                    29:c6:42:d7:50:11:41:f5:12:18:f6:5a:b0:77:37:
                    61:f2:b0:12:6d:05:27:ba:25:f8:a0:3a:0e:f5:3a:
                    b2:96:1b:03:16:3b:5c:43:3a:ce:6e:c3:49:0e:ce:
                    58:36:8a:f2:0c:3e:7d:ff:f8:99:5d:d3:88:f2:c2:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:64:98:07:2F:E3:0C:56:91:66:2E:D0:C2:61:EF:CE:8B:6E:CB:6D
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32302d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:9e:61:1d:f8:b6:07:c6:8d:22:c8:84:1c:23:40:6e:d8:c6:
         f4:9f:53:7e:96:01:fe:54:2d:fd:d0:55:40:9d:29:68:04:71:
         df:61:fd:98:16:57:d4:22:81:2f:50:1c:3c:9e:8a:08:b9:6a:
         42:43:42:a3:82:6d:04:d8:dd:6d:85:5d:b1:4a:a1:fb:ba:df:
         d9:9f:a7:a1:63:2a:bc:2e:fa:dd:78:51:31:13:f5:69:e4:13:
         a3:6d:9f:84:53:36:3c:9f:2d:16:10:7f:d4:21:af:b7:36:0b:
         5a:30:42:e1:ea:01:de:26:34:30:fe:b2:7c:64:bd:54:0a:95:
         27:05:da:cd:58:15:ec:09:06:69:20:14:7e:d9:11:e2:de:fe:
         03:1f:bc:8e:7e:78:a7:6f:b1:69:c1:70:05:32:ed:d5:c3:a8:
         cc:96:21:4b:15:d5:9c:b2:83:7a:ae:77:4e:a0:62:0e:b1:de:
         40:17:3a:46:70:c7:78:89:0d:87:98:cd:ad:19:9f:8b:35:ba:
         51:87:30:84:f6:06:06:ab:ad:00:98:07:6a:9a:d7:f0:4e:4c:
         7f:98:eb:cc:3a:47:3d:e5:b3:c7:f9:84:d3:a8:88:b1:5e:ef:
         72:fd:41:bb:31:73:bf:58:1a:bc:d7:e5:db:27:b1:ff:f5:00:
         cb:24:cd:92
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUdBDKVAUBxlV1GpknJJ5Ky4QeNGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVBQ0FCNjVE
QzVFRkY5RjAeFw0yMTExMTgxNTUwNDFaFw0yMjExMTcxNTU1NDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0RBMDJENDQ2NzMyODNBRkIz
Mjk3RTMwMjBENEM5MEY4MjkxQTMyNkMzNERFMUQzMDNBREQxRDc2N0IwQTVBM0VG
MDdDRUNDMjZFNzZCOUJCREMyRDNGRTJEQTFGRDMwOEMzMTRGNjQ4NUI0MDVFRTI1
MEMxMjhCQkEzNDRFRDk4RUM4MDZGNDM4RjU2NDVDQjhEN0VCMDE0NDg0ODg0MDg5
MEQ3NjhEREVBMkIwNEU4QjI3RDM2M0U4NzY2NkI1REYwNERBQzRFRDg1NEU4ODhC
RUQ2RjIxQTZBMzIyNkI5N0JFRDIwM0JDRkEzNDFGMDFCRUY2Rjk4MUM1QkJDMjIy
Q0U2RkM1OTM2MDYxRTk5N0JFMTQxOEVENkQ2NUEzRDFGNTM5NUMxMkJGMUZDNUIx
ODY0RDA0MjkxMjBCRDkxMDU0NTNDRTM2NDQ1RjcyNDFGNDAxNTc5NTQ0NDcyNzZC
ODg5M0FCNUFGRjQxMzAxMTg2QTQxRThEN0I4QkY1NkQyNzI5QzY0MkQ3NTAxMTQx
RjUxMjE4RjY1QUIwNzczNzYxRjJCMDEyNkQwNTI3QkEyNUY4QTAzQTBFRjUzQUIy
OTYxQjAzMTYzQjVDNDMzQUNFNkVDMzQ5MEVDRTU4MzY4QUYyMEMzRTdERkZGODk5
NUREMzg4RjJDMkQ0MEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzaAtRGcyg6+zKX4wINTJD4KRoybDTeHTA63R12ewpaPvB87MJudr
m73C0/4tof0wjDFPZIW0Be4lDBKLujRO2Y7IBvQ49WRcuNfrAUSEiECJDXaN3qKw
Tosn02Podma13wTaxO2FToiL7W8hpqMia5e+0gO8+jQfAb72+YHFu8Iizm/Fk2Bh
6Ze+FBjtbWWj0fU5XBK/H8Wxhk0EKRIL2RBUU842RF9yQfQBV5VERydriJOrWv9B
MBGGpB6Ne4v1bScpxkLXUBFB9RIY9lqwdzdh8rASbQUnuiX4oDoO9TqylhsDFjtc
QzrObsNJDs5YNoryDD59//iZXdOI8sLUDwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FKRkmAcv4wxWkWYu0MJh786LbsttMB8GA1UdIwQYMBaAFPFQURNfZvH/Z0rZpvWs
q2XcXv+fMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzdiYmFhNWQwLWE1MGMtNDE3OC04
NTczLTgwNDUwNDhiN2JjMy03LzAvRjE1MDUxMTM1RjY2RjFGRjY3NEFEOUE2RjVB
Q0FCNjVEQzVFRkY5Ri5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2JiYWE1ZDAtYTUw
Yy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTkvMC9GMTUwNTExMzVGNjZGMUZGNjc0
QUQ5QTZGNUFDQUI2NURDNUVGRjlGLmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vN2Ji
YWE1ZDAtYTUwYy00MTc4LTg1NzMtODA0NTA0OGI3YmMzLTcvMC8zMTM5MzgyZTMz
MzcyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMzM5MzczNDMyMzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATGJWAwDQYJKoZIhvcNAQELBQADggEBAKGeYR34tgfGjSLIhBwjQG7Y
xvSfU36WAf5ULf3QVUCdKWgEcd9h/ZgWV9QigS9QHDyeigi5akJDQqOCbQTY3W2F
XbFKofu639mfp6FjKrwu+t14UTET9WnkE6Ntn4RTNjyfLRYQf9Qhr7c2C1owQuHq
Ad4mNDD+snxkvVQKlScF2s1YFewJBmkgFH7ZEeLe/gMfvI5+eKdvsWnBcAUy7dXD
qMyWIUsV1Zyyg3qud06gYg6x3kAXOkZwx3iJDYeYza0Zn4s1ulGHMIT2BgarrQCY
B2qa1/BOTH+Y68w6Rz3ls8f5hNOoiLFe73L9Qbsxc79YGrzX5dsnsf/1AMskzZI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org