Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35382e302f32342d3234203d3e203631333137.roa
File:                     3138352e3137302e35382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          +Oc+Yj+cIYRCvVwlCdCOxA6D3TaM/1p0TipwjpdPn7k=
Subject key identifier:   5C:41:CF:6B:A4:4C:37:63:D2:5E:73:34:1D:6A:A2:97:E9:E3:92:45
Certificate issuer:       /CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
Certificate serial:       5B5169EE29298BDAB01A17ADEA9A27957503F96D
Authority key identifier: 78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35382e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 20 Dec 2021 09:02:48 +0000
ROA not before:           Mon 20 Dec 2021 08:57:48 +0000
ROA not after:            Mon 19 Dec 2022 09:02:48 +0000
asID:                     61317
IP address blocks:        185.170.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:51:69:ee:29:29:8b:da:b0:1a:17:ad:ea:9a:27:95:75:03:f9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781CD2A9D9D572EB450122A844422B1A9BAF06C6
        Validity
            Not Before: Dec 20 08:57:48 2021 GMT
            Not After : Dec 19 09:02:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:b7:27:4c:95:88:03:5f:4c:9d:01:0d:1d:
                    a9:b9:43:66:94:8f:b9:02:48:0b:ee:0a:d2:c1:98:
                    97:04:9a:60:45:83:b2:98:42:b1:67:97:4c:d2:b6:
                    d9:ae:18:98:49:13:48:0f:94:26:89:76:27:1a:8e:
                    83:71:76:1f:f2:b2:20:e2:6a:fe:9f:4e:3d:ea:12:
                    54:1f:42:80:4a:c3:d4:a5:55:88:42:22:ae:0b:3b:
                    03:6c:b1:c6:d3:41:d1:f3:91:d1:e0:76:54:6a:82:
                    9e:cb:c2:be:d7:74:6a:09:19:7d:af:ba:c1:1c:a2:
                    85:c3:8d:77:02:26:64:93:76:dd:34:94:88:74:d3:
                    f7:06:e6:7f:69:b9:70:f9:9f:11:9a:16:73:95:4d:
                    81:89:47:16:95:51:5e:34:e7:37:54:c9:3f:61:12:
                    50:fb:93:79:91:c5:63:d7:ca:be:1d:20:df:68:00:
                    93:2e:37:ed:0c:f6:12:be:02:d1:ba:0e:a5:67:b8:
                    80:73:cb:46:2e:c4:19:80:0b:a5:a0:66:29:e4:4a:
                    6f:63:1c:2a:46:4d:5e:c0:19:bf:b3:23:24:a3:83:
                    23:05:4b:63:58:76:d2:ad:28:7f:e2:ea:61:ed:2d:
                    61:a8:45:d8:fd:5e:fc:ec:24:c5:98:da:e1:6c:f0:
                    80:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:41:CF:6B:A4:4C:37:63:D2:5E:73:34:1D:6A:A2:97:E9:E3:92:45
            X509v3 Authority Key Identifier:
                keyid:78:1C:D2:A9:D9:D5:72:EB:45:01:22:A8:44:42:2B:1A:9B:AF:06:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/1/781CD2A9D9D572EB450122A844422B1A9BAF06C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/1/3138352e3137302e35382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:14:e6:07:13:e3:4d:62:f4:66:61:52:74:4e:d2:06:e0:65:
         94:f3:17:c6:59:d5:01:5a:75:50:74:6a:08:2e:bf:96:98:2d:
         80:0b:07:e6:e7:21:7e:43:cf:22:52:6f:c5:93:3c:92:26:b9:
         d6:54:0e:79:0f:57:4c:75:98:3a:6b:11:54:1a:3b:c8:d4:cf:
         60:a3:13:f3:83:0b:34:22:2e:e4:94:9c:c4:c5:e5:a0:cd:5e:
         7b:b9:f3:3a:7a:8c:06:65:4c:e5:81:da:3a:b8:92:5c:a9:6e:
         21:f8:43:1b:2c:95:b7:2b:8d:12:92:5a:69:06:a4:c5:09:85:
         3c:3a:e2:09:b8:87:a7:72:b4:93:f1:1b:76:3b:9e:eb:1d:7c:
         f8:53:61:87:0c:4d:6e:a7:58:5a:f3:a2:74:5d:c5:13:90:07:
         42:18:99:58:b9:1c:1a:cc:ab:86:06:e9:e3:ee:35:70:c9:ca:
         8a:54:af:9a:b8:6c:e9:de:a1:42:68:19:60:f8:85:aa:88:3a:
         9b:90:dd:3b:14:25:c4:bb:d5:8c:28:0a:a4:78:44:98:1c:fc:
         03:2e:fa:54:a0:8d:b0:df:12:73:14:db:1a:f2:d8:b6:86:63:
         58:ff:4e:31:9e:95:56:44:f5:22:61:44:82:2a:95:9d:b3:d7:
         dc:f7:7a:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:59 2024 by rpki-client on console-fra.rpki-client.org