Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e39362e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          hG5SjDBRY4s5oD1LqkG84MqMwaaJjnUSPW9hnBmrJxs=
Subject key identifier:   F6:A0:E8:35:E9:EB:82:83:B9:F0:EF:58:6A:15:5A:3F:70:FF:2B:2C
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       48D7405222D8177493FE50BD4EA4BA82898E459E
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32312d3234203d3e203137323136.roa
Signing time:             Thu 18 Nov 2021 15:51:37 +0000
ROA not before:           Thu 18 Nov 2021 15:46:37 +0000
ROA not after:            Thu 17 Nov 2022 15:51:37 +0000
asID:                     17216
IP address blocks:        198.37.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d7:40:52:22:d8:17:74:93:fe:50:bd:4e:a4:ba:82:89:8e:45:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:46:37 2021 GMT
            Not After : Nov 17 15:51:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:f7:a5:d4:50:a5:72:d9:d5:e6:a2:5a:0f:
                    de:4a:72:d1:5f:9a:59:31:6e:2f:9a:32:a3:8d:5e:
                    07:9a:6e:10:1b:cd:ae:b4:9a:12:d3:f4:1e:44:06:
                    71:73:32:3f:97:14:3b:00:8c:fd:ae:9c:a2:3c:b6:
                    0a:2b:4f:ba:5e:7e:5c:fc:90:91:e1:5d:4e:0e:97:
                    1f:75:76:51:e3:d1:d8:01:c3:19:c7:ab:eb:23:c7:
                    f7:42:9f:3a:b7:66:8b:3e:0b:dd:19:6b:99:5c:0c:
                    39:4a:6d:dc:f0:30:f2:d1:e7:61:08:97:ef:8b:ec:
                    c6:99:c1:20:cb:d0:fc:01:be:c6:ba:0f:ce:54:6c:
                    4a:38:33:8d:be:93:50:a7:c4:c3:53:c4:dd:95:eb:
                    7a:f0:6c:1a:df:8a:45:e8:37:87:f8:b6:34:57:9a:
                    32:9d:ac:d4:33:d0:fd:06:6e:a9:98:8b:a5:d5:f4:
                    68:18:e5:10:1f:63:f6:67:e0:e7:a3:20:5a:32:9f:
                    7f:30:fa:b6:9f:cd:c2:e8:ad:6b:ad:e6:89:98:2a:
                    ea:64:e6:d3:1f:dc:e6:b1:bc:a4:41:be:0e:a2:71:
                    4d:06:9c:60:27:20:f2:51:e4:73:d0:32:29:c3:a2:
                    72:2e:8e:ed:ed:06:87:0f:55:6a:6c:33:29:d7:2c:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:E8:35:E9:EB:82:83:B9:F0:EF:58:6A:15:5A:3F:70:FF:2B:2C
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/3139382e33372e39362e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:58:ea:73:25:41:f5:10:31:f5:ae:48:6b:de:46:99:f2:3f:
         09:4e:8b:1c:51:59:70:93:1f:4e:aa:97:c4:77:e2:46:71:7a:
         7b:bf:d2:76:a6:68:7d:3c:55:b3:aa:cb:5f:61:5d:b4:50:01:
         63:c4:31:45:19:23:94:3a:32:c7:1e:a9:e6:a4:51:80:8f:ef:
         74:42:e4:ec:c8:3c:78:21:cf:b6:e5:f9:f5:01:31:e0:37:af:
         5a:15:71:7d:d7:9b:5f:e1:7a:9d:bc:f9:04:d0:04:6a:7f:41:
         1c:46:ad:b9:90:a4:16:45:e8:56:8b:54:b2:84:e5:4d:81:b2:
         ea:4b:4e:64:fb:43:27:fc:91:b8:6d:43:e4:df:74:30:b7:40:
         c0:f0:14:89:78:bb:92:0a:b7:52:cc:d1:b2:05:ce:f6:63:54:
         28:78:4a:38:f1:00:c8:14:e8:f3:32:cf:d0:55:6b:e7:20:a6:
         97:9c:48:84:e3:b4:08:27:15:eb:05:5f:23:c7:56:d6:d0:21:
         67:f4:43:ae:97:ef:36:3f:ea:25:18:7a:52:c7:8f:fb:5d:63:
         74:0b:a9:1b:2c:a4:18:5e:d2:f7:da:d2:5b:aa:ac:68:3c:22:
         47:92:e4:65:b2:fb:13:67:1f:51:2a:10:f9:77:95:f0:53:d8:
         4e:22:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org