Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230342e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Fw8Q8aVgHZ7hKQS1jyv4k6Nez5FdDkqR7IXkUpAJZPE=
Subject key identifier:   CD:9D:EB:E9:9D:2C:99:BC:8C:F2:1E:92:5E:34:F6:98:DC:7C:AE:8E
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       5D89E92442DA54BCA09434BE86F8C6FD609E01E3
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230342e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 25 Oct 2021 08:32:06 +0000
ROA not before:           Mon 25 Oct 2021 08:27:06 +0000
ROA not after:            Mon 24 Oct 2022 08:32:06 +0000
asID:                     61317
IP address blocks:        181.41.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:89:e9:24:42:da:54:bc:a0:94:34:be:86:f8:c6:fd:60:9e:01:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Oct 25 08:27:06 2021 GMT
            Not After : Oct 24 08:32:06 2022 GMT
        Subject: CN=3082010A0282010100B42C7F5A99194122CDA50114FF1BCFC56956F7E8DE854F4F922A509E7E8ED903F36EA11E93F732D664EAFCE43715963EF80215331D8DF1D500F5C1B55C20F8043A50C5D0C6005D5EFF015CAFB7B9ACD74DF39206E81DF95AEB0BF184D8864458D5B5476CE31E007F0E6F16EADD652B90932E8F7164FFC2BD24B4C46E6145C365ECBB1FBDE4D78747FB67ED175DAB437BFE83B835AFBEDA52DDE671A1F38E24E79EA7850AA386E315316889E4B1B56E0157AB9E5FDE319D82D959F9D12711A535C7D579E33497B6F4AA1285EBAC7A291098AA00DE78EC0B876EF6C8B3AA8BCF71C27FE0925919296F1B70590EDCB0E677F6BB9FAD2CFCDD7A1DE18C390278EF5D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:7f:5a:99:19:41:22:cd:a5:01:14:ff:1b:
                    cf:c5:69:56:f7:e8:de:85:4f:4f:92:2a:50:9e:7e:
                    8e:d9:03:f3:6e:a1:1e:93:f7:32:d6:64:ea:fc:e4:
                    37:15:96:3e:f8:02:15:33:1d:8d:f1:d5:00:f5:c1:
                    b5:5c:20:f8:04:3a:50:c5:d0:c6:00:5d:5e:ff:01:
                    5c:af:b7:b9:ac:d7:4d:f3:92:06:e8:1d:f9:5a:eb:
                    0b:f1:84:d8:86:44:58:d5:b5:47:6c:e3:1e:00:7f:
                    0e:6f:16:ea:dd:65:2b:90:93:2e:8f:71:64:ff:c2:
                    bd:24:b4:c4:6e:61:45:c3:65:ec:bb:1f:bd:e4:d7:
                    87:47:fb:67:ed:17:5d:ab:43:7b:fe:83:b8:35:af:
                    be:da:52:dd:e6:71:a1:f3:8e:24:e7:9e:a7:85:0a:
                    a3:86:e3:15:31:68:89:e4:b1:b5:6e:01:57:ab:9e:
                    5f:de:31:9d:82:d9:59:f9:d1:27:11:a5:35:c7:d5:
                    79:e3:34:97:b6:f4:aa:12:85:eb:ac:7a:29:10:98:
                    aa:00:de:78:ec:0b:87:6e:f6:c8:b3:aa:8b:cf:71:
                    c2:7f:e0:92:59:19:29:6f:1b:70:59:0e:dc:b0:e6:
                    77:f6:bb:9f:ad:2c:fc:dd:7a:1d:e1:8c:39:02:78:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9D:EB:E9:9D:2C:99:BC:8C:F2:1E:92:5E:34:F6:98:DC:7C:AE:8E
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138312e34312e3230342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c9:c5:4d:96:7c:c5:4c:bb:b7:b2:f7:33:7d:b3:5f:8e:86:
         6a:62:4b:d5:66:d8:97:78:55:8c:f2:22:29:c9:59:5c:cd:63:
         6b:2b:0b:fd:a8:9e:2a:3b:af:27:c2:50:43:93:61:7c:a7:62:
         ed:d9:17:ea:52:1e:93:82:61:79:e6:a8:fb:f9:e8:32:52:75:
         7c:15:04:cf:eb:e1:a8:ef:05:78:39:63:b3:1e:44:28:5f:89:
         55:29:00:b7:a0:6e:4e:41:a5:a5:32:7a:23:8c:eb:cf:e5:5e:
         40:5c:06:d5:a7:a7:78:6f:94:06:a6:7d:da:cc:b5:97:65:4d:
         84:15:15:77:07:34:89:0c:53:76:77:4f:8c:76:b1:13:99:58:
         a4:94:ea:3b:75:15:03:9c:07:ad:f5:2e:68:44:01:70:7e:52:
         02:f9:ec:d1:ce:e4:f1:ca:ab:54:44:83:89:64:62:a8:dd:40:
         b0:fa:30:4a:ed:9d:14:d6:11:f1:d4:28:b5:89:d1:f0:5c:70:
         3a:e2:23:c5:8e:38:27:a7:33:e0:93:53:9c:dc:d5:df:e7:90:
         9c:e5:f1:74:85:d6:4c:97:90:a1:a4:f7:16:f4:dc:e2:f6:e4:
         77:ce:ef:1b:25:9a:6b:84:e1:05:c2:1f:81:68:26:3f:d3:3e:
         47:e1:44:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org