Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3232342e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3232342e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          e7+QPg4Hz3BZfECyZxrIQc/B4wA+WNTDGbUl3a0IrJc=
Subject key identifier:   41:10:5F:2B:1F:9B:11:BA:AA:AD:F3:5F:95:5A:DE:A3:47:C1:48:84
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       4E50A35FEAB60EBA413237FD60404D3451C8E851
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3232342e302f32312d3234203d3e2037303239.roa
Signing time:             Thu 18 Nov 2021 15:51:12 +0000
ROA not before:           Thu 18 Nov 2021 15:46:12 +0000
ROA not after:            Thu 17 Nov 2022 15:51:12 +0000
asID:                     7029
IP address blocks:        23.88.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:50:a3:5f:ea:b6:0e:ba:41:32:37:fd:60:40:4d:34:51:c8:e8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:46:12 2021 GMT
            Not After : Nov 17 15:51:12 2022 GMT
        Subject: CN=3082010A0282010100C9F26D461B2609F0F30028CC565082387010DF94A85B4BE1B8B92DF2C920AC9F15DC57407E1BAC069C164F5BCCD53901658923DF0D73E93130BE00FD17D52563E56654F3C88A69B701405821275D5B8B36D53BA7C2741E06AB9E2FC96D549D97DC43BA6612325243B47789E576459CFD8FAAF343840BBF08D7761B110004DDC28CCB99EA19906B912A5C16D9D5B46E13B50F406A79B5D00D076F9EC615A630BF6820A2714BDE4DC7612854EF5B096920A4CE605D785F692E95243CF556FB4321B823A76551DADFEE63369D35A7FCE2DBDF59403FE3F5CBF1242CFB8D4B1C072EDBF66CFAE0887C5F9545E3064E5DFC5891760A167D10BFABC0D1E7FB4E04E96B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:6d:46:1b:26:09:f0:f3:00:28:cc:56:50:
                    82:38:70:10:df:94:a8:5b:4b:e1:b8:b9:2d:f2:c9:
                    20:ac:9f:15:dc:57:40:7e:1b:ac:06:9c:16:4f:5b:
                    cc:d5:39:01:65:89:23:df:0d:73:e9:31:30:be:00:
                    fd:17:d5:25:63:e5:66:54:f3:c8:8a:69:b7:01:40:
                    58:21:27:5d:5b:8b:36:d5:3b:a7:c2:74:1e:06:ab:
                    9e:2f:c9:6d:54:9d:97:dc:43:ba:66:12:32:52:43:
                    b4:77:89:e5:76:45:9c:fd:8f:aa:f3:43:84:0b:bf:
                    08:d7:76:1b:11:00:04:dd:c2:8c:cb:99:ea:19:90:
                    6b:91:2a:5c:16:d9:d5:b4:6e:13:b5:0f:40:6a:79:
                    b5:d0:0d:07:6f:9e:c6:15:a6:30:bf:68:20:a2:71:
                    4b:de:4d:c7:61:28:54:ef:5b:09:69:20:a4:ce:60:
                    5d:78:5f:69:2e:95:24:3c:f5:56:fb:43:21:b8:23:
                    a7:65:51:da:df:ee:63:36:9d:35:a7:fc:e2:db:df:
                    59:40:3f:e3:f5:cb:f1:24:2c:fb:8d:4b:1c:07:2e:
                    db:f6:6c:fa:e0:88:7c:5f:95:45:e3:06:4e:5d:fc:
                    58:91:76:0a:16:7d:10:bf:ab:c0:d1:e7:fb:4e:04:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:5F:2B:1F:9B:11:BA:AA:AD:F3:5F:95:5A:DE:A3:47:C1:48:84
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3232342e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:f9:18:6f:60:97:98:1f:f4:7d:3d:2c:bc:78:59:60:06:fd:
         cc:e6:5e:7a:0d:a4:52:8d:71:57:97:f0:a9:b2:f9:3f:7b:96:
         0c:63:f8:93:7c:90:1e:a3:b1:f1:94:5d:bc:7d:65:4e:b6:6c:
         b9:af:8f:86:47:1c:67:1e:72:7d:c7:15:b3:98:6c:de:65:24:
         ff:8e:2e:69:ae:91:73:f6:0b:ac:0b:85:9e:4c:64:05:3e:6c:
         de:c3:79:b9:7f:63:23:fb:05:94:44:c2:d1:07:33:02:44:dd:
         75:6c:7e:11:b6:3f:05:6f:b0:6e:6d:25:3e:99:68:2d:ac:a1:
         4d:a9:90:b2:22:26:39:91:cc:6b:18:38:db:c0:34:35:4b:fe:
         0b:5b:09:c3:8d:d2:81:03:07:57:32:fa:e6:3f:87:f8:b7:a0:
         33:aa:f3:c9:c7:e7:ee:7f:80:ff:75:a5:ac:f6:a0:db:1a:43:
         20:40:28:08:5f:9e:0a:4e:7a:17:87:e6:28:00:06:25:31:d1:
         d9:84:2e:99:fd:76:45:89:d5:4a:a2:2a:cd:d2:e4:78:36:30:
         82:cf:3f:4f:42:43:44:8f:46:e5:f8:a2:d5:f5:49:1d:7b:37:
         9f:f6:8d:fe:03:37:79:f6:31:ba:13:78:2d:30:0c:26:8c:0e:
         62:a1:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org