Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/95ead249-9d57-49c2-b9f1-d91244347eee-0/0/3132382e3235342e3230372e302f32342d3234203d3e20333939313232.roa
File:                     3132382e3235342e3230372e302f32342d3234203d3e20333939313232.roa (raw, json)
Hash identifier:          N9TkTlpfh4uJPp6s+M7IlTfin9n5AA2BB+7Qr7p7p2M=
Subject key identifier:   B9:D5:35:49:F0:C4:0D:BC:92:51:C1:23:D7:4E:C6:DF:C7:C6:1E:D2
Certificate issuer:       /CN=BCF5751D2920B465B788E4A55E6EDB7EF8496C37
Certificate serial:       016CBD7C0BFBDEFD5A7F292B9E23EEC87157E0E9
Authority key identifier: BC:F5:75:1D:29:20:B4:65:B7:88:E4:A5:5E:6E:DB:7E:F8:49:6C:37
Authority info access:    rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/BCF5751D2920B465B788E4A55E6EDB7EF8496C37.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/95ead249-9d57-49c2-b9f1-d91244347eee-0/0/3132382e3235342e3230372e302f32342d3234203d3e20333939313232.roa
Signing time:             Mon 12 Dec 2022 12:57:22 +0000
ROA not before:           Mon 12 Dec 2022 12:52:22 +0000
ROA not after:            Mon 11 Dec 2023 12:57:22 +0000
asID:                     399122
IP address blocks:        128.254.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6c:bd:7c:0b:fb:de:fd:5a:7f:29:2b:9e:23:ee:c8:71:57:e0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF5751D2920B465B788E4A55E6EDB7EF8496C37
        Validity
            Not Before: Dec 12 12:52:22 2022 GMT
            Not After : Dec 11 12:57:22 2023 GMT
        Subject: CN=B9D53549F0C40DBC9251C123D74EC6DFC7C61ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:d9:59:26:36:82:4b:80:ef:80:5d:97:8e:
                    33:9b:eb:39:1c:b6:d4:07:4e:4b:e1:fd:56:07:92:
                    28:f5:6c:ad:46:c6:2a:29:6a:7f:5f:5d:2b:14:07:
                    f5:c2:50:c3:4b:f1:6e:bc:fc:2a:06:3c:ef:80:41:
                    2a:e4:10:05:5b:63:a0:25:4b:75:f3:9b:03:b3:ad:
                    4c:f3:6a:32:d4:d3:4b:a6:7d:7a:c9:21:92:fb:d9:
                    9d:87:bb:8b:87:3c:b8:b5:47:4e:ae:1c:50:84:5e:
                    50:f6:35:a4:e0:50:e8:29:84:2f:3b:0b:ea:ed:a7:
                    e7:bf:3b:76:32:1f:88:a2:9b:84:ee:38:de:a7:ee:
                    dd:34:f2:ef:91:4c:68:1d:09:71:00:e8:49:1c:13:
                    67:d1:bb:95:83:84:e0:04:ad:5f:af:f1:43:f1:31:
                    b5:58:5b:f4:f3:09:c1:8e:fd:54:94:27:1b:92:23:
                    13:92:8f:97:b9:19:7c:dd:d8:a5:ef:f4:1a:a8:c9:
                    a9:97:87:56:de:35:73:5a:22:27:25:18:1b:e5:fa:
                    4f:ec:6b:7c:1a:be:23:a6:2b:84:03:93:f9:91:a4:
                    69:a2:ec:50:1d:cc:98:1c:06:ce:77:6b:c9:e1:1a:
                    aa:d4:0e:8a:e8:64:63:b6:e2:3f:94:dd:db:7d:ce:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D5:35:49:F0:C4:0D:BC:92:51:C1:23:D7:4E:C6:DF:C7:C6:1E:D2
            X509v3 Authority Key Identifier:
                keyid:BC:F5:75:1D:29:20:B4:65:B7:88:E4:A5:5E:6E:DB:7E:F8:49:6C:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/95ead249-9d57-49c2-b9f1-d91244347eee-0/0/BCF5751D2920B465B788E4A55E6EDB7EF8496C37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/1/BCF5751D2920B465B788E4A55E6EDB7EF8496C37.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/95ead249-9d57-49c2-b9f1-d91244347eee-0/0/3132382e3235342e3230372e302f32342d3234203d3e20333939313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:46:bf:1a:0d:7e:ac:67:63:12:0c:aa:87:1d:0c:0b:25:a9:
         7b:30:65:d2:4a:6a:ea:7d:7e:1f:3b:5e:bb:6c:d3:d7:7c:68:
         91:e3:be:e5:40:28:b9:6e:e4:a3:f9:b3:d0:1e:4b:45:1c:85:
         a1:06:13:1c:9b:59:9b:61:a9:52:fd:3a:2a:82:88:8d:5d:57:
         39:65:4d:dc:cc:c2:5d:26:63:c7:83:c2:92:4c:76:ba:c4:5a:
         f5:35:b0:72:3d:94:69:2d:60:82:16:2a:4c:1a:1e:02:ec:98:
         e8:dd:32:e8:fd:44:3f:c4:f9:5d:eb:88:3e:b3:4c:76:6e:70:
         b2:cf:4e:43:04:60:57:78:61:25:65:08:95:23:7a:59:c8:ec:
         eb:2d:a6:fc:02:32:2c:16:6c:8b:d9:2d:be:0d:1b:41:39:94:
         0c:00:84:f6:f8:96:14:68:a2:58:72:0e:df:dc:13:85:be:4f:
         c3:97:11:c6:89:5e:48:cb:7c:17:a3:50:15:61:f1:15:60:8c:
         e5:96:0d:32:25:bc:3c:c2:11:e3:f2:5c:44:a0:ce:20:e5:d1:
         61:86:a1:b6:b7:66:1d:02:5f:e5:cf:58:10:a7:92:26:7b:1e:
         27:f5:d0:b6:02:6e:c6:b9:aa:5a:3a:e3:22:8c:00:f3:2b:8d:
         96:83:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org