Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3234302e302f32302d3234203d3e2031323339.roa
File:                     32332e38382e3234302e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          m1nS4S5tmhKjXcmsko6ruvIxDhJTecduF9EgnU+97yk=
Subject key identifier:   83:B0:0D:29:10:5A:96:3A:41:F0:28:B3:41:81:5F:3E:77:09:1E:90
Certificate issuer:       /CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
Certificate serial:       370EF2EBCD3139BFD3905A7B4A98E2DD03C72BF4
Authority key identifier: F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F
Authority info access:    rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3234302e302f32302d3234203d3e2031323339.roa
Signing time:             Thu 10 Mar 2022 11:37:06 +0000
ROA not before:           Thu 10 Mar 2022 11:32:06 +0000
ROA not after:            Thu 09 Mar 2023 11:37:06 +0000
asID:                     1239
IP address blocks:        23.88.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0e:f2:eb:cd:31:39:bf:d3:90:5a:7b:4a:98:e2:dd:03:c7:2b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F
        Validity
            Not Before: Mar 10 11:32:06 2022 GMT
            Not After : Mar  9 11:37:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:2c:18:7c:4e:c2:4f:3f:55:af:18:e7:3c:
                    8e:41:79:8c:5a:46:68:1f:7a:cd:29:3e:78:5f:a1:
                    4d:c4:30:d7:95:df:75:d5:04:8d:c4:8c:9a:12:c1:
                    56:84:9b:69:bb:98:ae:0a:f7:df:67:9b:2d:a8:2f:
                    6c:2c:3e:f9:a8:39:b4:1f:59:2e:31:42:d2:20:c5:
                    18:4c:2c:76:04:d3:15:a6:f5:6f:7b:67:5b:49:59:
                    6f:f3:a3:9f:81:18:9f:42:b1:03:31:75:91:99:7d:
                    16:99:bf:01:db:21:f7:d9:4e:de:90:8a:39:40:a5:
                    30:04:87:8a:e7:e7:c3:ff:eb:d0:0d:b2:42:14:8c:
                    18:08:67:22:5b:59:58:ed:05:b7:0d:d2:51:c9:0d:
                    c2:8c:f0:c1:44:55:de:35:1f:f1:c9:52:e9:87:e5:
                    4d:01:03:b5:78:fa:6e:11:0f:e1:ed:9a:a8:72:e6:
                    82:05:b0:cc:fe:a5:65:88:40:fa:d7:46:d9:30:7b:
                    87:a1:66:98:15:a0:c0:40:fe:ef:a3:c0:a0:b9:77:
                    2b:76:ab:f2:2a:37:91:72:46:4e:c6:3f:9b:04:91:
                    72:f0:54:2b:51:ed:b5:dc:81:f4:6b:92:b2:ef:10:
                    d3:6e:6a:cc:8e:8e:50:e4:f8:d9:00:10:b2:05:bb:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B0:0D:29:10:5A:96:3A:41:F0:28:B3:41:81:5F:3E:77:09:1E:90
            X509v3 Authority Key Identifier:
                keyid:F1:50:51:13:5F:66:F1:FF:67:4A:D9:A6:F5:AC:AB:65:DC:5E:FF:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-9/0/F15051135F66F1FF674AD9A6F5ACAB65DC5EFF9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-7/0/32332e38382e3234302e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:8a:91:b2:c7:e1:0f:fb:c0:8a:bc:ec:0d:ed:dd:e9:8c:2f:
         83:6c:36:be:a2:44:4c:60:4e:ba:02:3b:dc:36:92:60:7d:8c:
         03:83:c4:cf:45:72:b2:88:3e:0d:10:5c:da:86:ba:cc:e7:b4:
         f2:d6:0b:b3:5f:41:32:ad:06:70:bc:b2:d6:0d:5b:90:b3:74:
         82:c0:6d:f8:f1:d4:7e:c3:00:78:a8:b3:72:74:cb:b0:ea:f7:
         70:2a:fa:9c:b7:d1:51:5f:06:47:12:c4:3b:af:55:02:bf:36:
         e4:a8:48:05:3c:67:8e:4e:d8:2d:64:ad:56:58:40:bd:19:14:
         c4:3a:47:68:08:ac:f0:40:2b:b2:4b:1d:fe:0b:9b:72:d2:40:
         2f:fe:a3:7b:04:d2:f9:90:dd:80:a3:ec:47:00:b3:9c:51:58:
         ff:f1:a1:c3:08:36:97:38:59:ac:0f:01:0c:f0:cc:01:1b:7c:
         40:c6:cc:50:e7:1e:43:94:f9:f8:5a:57:de:39:1e:4d:8d:44:
         59:9f:e5:93:05:94:d5:ec:15:de:43:af:bb:73:7d:fa:ae:bb:
         16:0c:bd:a4:3c:37:62:93:6d:62:7b:f6:0a:58:4c:89:3e:eb:
         85:b3:8d:b8:ac:ff:38:f9:a0:49:4d:a4:d4:33:94:41:16:80:
         e2:f9:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org