Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3232342e302f31392d3234203d3e2031323339.roa
File:                     32332e38382e3232342e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          z9/NnwbBjMAv2GkDtPzZaZVlqg85pIWNqBdTVCyb+Qw=
Subject key identifier:   C4:CD:1E:97:9A:C9:66:01:D1:8E:85:A1:1C:ED:77:77:81:E8:32:32
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       2D48D2D2724B36D3C607DA7047E0FDB3D4BC3632
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3232342e302f31392d3234203d3e2031323339.roa
Signing time:             Thu 10 Mar 2022 14:01:23 +0000
ROA not before:           Thu 10 Mar 2022 13:56:23 +0000
ROA not after:            Thu 09 Mar 2023 14:01:23 +0000
asID:                     1239
IP address blocks:        23.88.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:d2:d2:72:4b:36:d3:c6:07:da:70:47:e0:fd:b3:d4:bc:36:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Mar 10 13:56:23 2022 GMT
            Not After : Mar  9 14:01:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:6a:60:14:31:a2:35:3a:d0:92:01:2d:f7:
                    5a:cd:77:e1:d1:c6:1d:6b:ac:4a:0e:b0:3b:71:24:
                    d5:94:4e:f2:76:60:3b:30:4c:08:dc:91:22:ab:ae:
                    6b:8f:0e:b9:80:80:e5:15:17:3f:6a:f7:e5:cb:0b:
                    05:8c:96:53:f1:c5:68:1d:bc:fe:32:99:b0:6f:74:
                    be:3a:13:6a:a2:bc:05:b1:a0:7e:e1:68:e5:dd:ce:
                    e3:ad:9c:a0:6e:a1:93:26:89:5f:7c:e3:b0:11:e6:
                    59:39:59:da:01:a5:ff:74:91:dc:6a:f9:b9:68:cf:
                    c6:9b:cf:ef:0f:8c:56:ee:db:b8:3d:21:75:4c:64:
                    37:1a:a6:c0:17:35:6f:76:ad:dd:92:24:47:d9:f0:
                    53:55:7a:a5:00:98:1e:ef:50:95:2c:6d:0c:eb:fb:
                    03:21:a9:a8:df:4a:b7:17:c7:32:f1:c4:dc:f0:f1:
                    bf:34:19:9b:54:e4:9c:2e:91:d3:54:31:01:b2:23:
                    f8:61:d7:20:0a:47:cd:ad:ec:48:ef:00:6f:e9:80:
                    6e:84:50:a8:e3:75:cc:d2:ba:f1:7c:58:ff:bf:b6:
                    a5:69:5a:a8:7a:cc:74:4b:f5:8b:14:07:82:17:18:
                    e2:89:6b:93:a9:79:0d:9d:8c:2d:73:b7:82:92:dc:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CD:1E:97:9A:C9:66:01:D1:8E:85:A1:1C:ED:77:77:81:E8:32:32
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3232342e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c2:be:51:ad:90:ef:87:87:aa:f0:7d:6d:d5:18:07:eb:94:c8:
         65:97:3f:da:28:a4:54:e5:d5:a1:0a:16:63:70:1c:bf:8a:88:
         e9:57:50:e7:71:be:2f:98:f0:74:07:db:40:df:73:d3:86:a5:
         86:bd:3d:2a:53:ee:db:38:3f:36:bb:24:1a:9f:8b:5e:37:82:
         de:a9:f6:1a:41:97:34:60:e9:56:57:07:5f:3b:cf:b1:0f:8f:
         96:84:e1:8c:5e:f9:35:6e:5f:1d:8a:9b:b3:25:c2:6f:73:d6:
         c1:0d:fc:10:66:ad:c2:cb:76:67:0f:05:28:01:88:42:7b:b4:
         f5:dc:4e:37:81:0f:b6:98:74:7a:2a:06:88:fc:0f:3c:bc:b0:
         0d:ac:75:5f:5a:69:7f:8b:07:d3:b7:92:dd:54:6f:e2:36:45:
         a0:ea:d6:78:26:44:00:2c:5e:97:27:cd:59:ff:a4:04:40:c7:
         d3:b1:b8:97:19:9b:d6:02:f2:6f:c4:6f:1f:4f:4f:ea:66:2b:
         c1:04:16:6f:b0:0b:ea:f2:1c:c2:b0:bc:95:e2:54:ed:b1:8a:
         15:19:a3:70:cc:6f:da:d9:3b:8d:25:9b:24:ab:53:2b:de:ab:
         75:df:81:5f:37:57:66:f3:5c:43:be:2c:1b:d6:51:95:d8:65:
         cd:7b:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org