Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3233322e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3233322e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          TwnmvqAbNXys4QgWRGb/Cwdcppe0pDMEST1CvmtH2wk=
Subject key identifier:   F1:41:7D:B5:6B:6D:2D:64:18:96:FD:ED:65:9E:6F:88:AB:6F:5B:39
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       3F21940C3D7573DE11833C79733B08F3AFBC03DD
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3233322e302f32312d3234203d3e2037303239.roa
Signing time:             Thu 18 Nov 2021 15:51:17 +0000
ROA not before:           Thu 18 Nov 2021 15:46:17 +0000
ROA not after:            Thu 17 Nov 2022 15:51:17 +0000
asID:                     7029
IP address blocks:        23.88.232.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:21:94:0c:3d:75:73:de:11:83:3c:79:73:3b:08:f3:af:bc:03:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Nov 18 15:46:17 2021 GMT
            Not After : Nov 17 15:51:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:ac:01:8d:68:63:fb:c2:0f:37:87:60:8b:
                    4d:3a:4f:1c:d3:92:f3:e0:1b:aa:0b:c3:f9:8a:58:
                    1e:46:2c:1c:15:54:89:0f:84:21:95:f5:82:19:76:
                    f9:ec:27:e4:18:41:9e:7e:11:75:f7:fd:7d:2c:8e:
                    42:e7:65:ad:28:41:a2:0d:86:e0:09:57:ea:7b:79:
                    88:f6:ef:33:93:6c:95:18:de:86:51:eb:f0:40:0f:
                    83:db:c3:ea:1f:f7:7c:17:6c:19:f4:f1:b9:1a:38:
                    f0:4f:2d:2c:98:d5:ac:76:45:b4:b9:41:b7:6b:a1:
                    59:a6:b5:74:59:a9:6b:f1:11:35:54:7c:84:24:44:
                    e9:3e:1c:6f:33:0e:94:f0:ab:b6:07:3c:fc:39:1d:
                    b9:dd:48:cc:4d:46:7a:47:1a:89:5f:02:45:5c:ff:
                    20:eb:a8:be:2c:b3:19:18:e1:c7:89:6e:75:78:1b:
                    59:f1:bb:26:14:d8:14:1f:8f:3c:07:c2:40:db:15:
                    c3:eb:4a:9b:74:d6:d3:19:81:a3:5a:ce:70:91:62:
                    87:70:b9:bf:52:3f:1e:06:e4:ef:ca:b3:01:72:53:
                    67:22:b5:30:c6:ce:de:4b:55:d6:3d:ee:27:e0:68:
                    36:69:dd:34:22:5d:2c:fe:22:0f:fb:03:44:c7:b0:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:41:7D:B5:6B:6D:2D:64:18:96:FD:ED:65:9E:6F:88:AB:6F:5B:39
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3233322e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:9f:3d:f2:4f:eb:ee:c5:22:97:d8:6d:4c:94:99:87:55:
         ca:d1:11:f7:1c:2c:f9:1d:5a:ac:cf:60:b2:3a:e3:a2:70:56:
         c0:76:41:fd:2a:b8:90:29:0b:66:90:c3:26:40:8a:16:08:78:
         bc:a3:91:ff:61:be:46:3b:e4:42:b1:c4:93:e0:b4:d1:7e:96:
         28:55:47:ee:9f:06:dd:9b:b1:c9:b4:34:c4:47:b2:13:50:d2:
         66:7e:d9:e7:90:c3:ad:d4:4a:b3:22:4c:b2:5d:95:6b:b8:0b:
         b3:44:a6:53:88:af:10:2c:df:a0:31:db:10:df:b6:84:bf:93:
         00:27:3b:28:e0:ab:16:4a:92:98:a2:f6:af:dc:74:8d:07:e9:
         96:15:13:2a:e9:fa:f0:7e:25:29:09:27:7a:53:52:72:5f:b6:
         37:fc:2a:b6:02:70:5a:a7:45:e0:bb:0f:13:d9:36:a9:9a:f0:
         41:54:9d:24:40:0d:5b:d7:ff:40:ee:32:97:8d:95:a9:bc:81:
         98:5c:42:48:68:c1:3e:9a:c9:ca:59:85:7f:6a:40:6a:2f:42:
         be:9c:dd:fe:06:00:c4:5d:ba:3b:de:7d:c6:4a:bf:98:59:29:
         b7:bb:c6:fb:d2:29:1b:37:59:75:1c:92:34:30:3d:2b:c3:4c:
         d3:46:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org