Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230342e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          67CjU5WRlzdgGIzuak+ilEFFKBg8vH4JhlLz6Pbp0gY=
Subject key identifier:   C6:BF:A0:40:90:0F:3C:8E:71:4B:81:E0:60:B8:9F:C0:44:E7:63:D4
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       32E701C643822E17AE493F4FC5C509AE5B127725
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230342e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:05 +0000
ROA not before:           Thu 17 Feb 2022 11:40:05 +0000
ROA not after:            Thu 16 Feb 2023 11:45:05 +0000
asID:                     61317
IP address blocks:        181.41.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e7:01:c6:43:82:2e:17:ae:49:3f:4f:c5:c5:09:ae:5b:12:77:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:05 2022 GMT
            Not After : Feb 16 11:45:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:5a:99:eb:c4:fc:7c:4c:56:2f:d1:34:32:
                    ce:03:5a:91:20:f6:5d:1f:90:65:5e:fe:5c:7f:d0:
                    ad:2f:03:bf:e6:8b:58:4d:94:6d:cc:da:4a:5d:7a:
                    50:e6:53:2f:1f:8d:dd:0a:94:ff:95:ef:c5:eb:ff:
                    12:db:ec:5a:29:89:cd:9a:14:b8:a1:69:d2:3e:49:
                    97:1d:73:e0:d9:e2:2c:eb:81:5a:24:c4:69:08:e7:
                    e3:36:12:4a:31:46:79:d9:f4:9f:5b:fe:e3:68:0d:
                    c5:14:96:ad:bc:48:1b:2c:fb:4b:74:23:62:97:c9:
                    c8:10:bf:bf:30:7e:28:c8:9d:c7:d5:3a:fb:72:ca:
                    a6:26:d8:be:ad:37:f5:d3:df:10:07:f4:63:b6:c6:
                    b5:9b:74:43:8b:61:c0:32:ee:d0:2d:69:82:37:83:
                    2c:f3:91:b7:7b:bc:f1:5b:74:da:22:13:3b:e9:75:
                    4e:28:44:60:2a:34:00:fb:ae:71:40:71:c6:bb:f7:
                    35:a5:9c:bc:a5:48:74:b5:e3:11:76:f4:e7:b9:4a:
                    a9:e5:6f:97:f4:3c:34:18:91:f7:3d:c4:b3:c6:41:
                    83:66:63:57:6a:a6:80:d2:c0:3d:65:63:5f:53:7a:
                    33:68:4b:2a:90:9a:80:db:7d:d2:1f:fc:1a:fc:57:
                    82:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BF:A0:40:90:0F:3C:8E:71:4B:81:E0:60:B8:9F:C0:44:E7:63:D4
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230342e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:23:d5:94:98:9a:61:0e:9b:ab:c8:37:d7:4c:66:39:83:40:
         77:06:1e:6e:88:80:85:f0:c6:a9:3e:57:9b:c5:31:bc:fe:cc:
         7a:1f:86:76:33:50:f3:cb:57:ad:4a:41:bd:48:0d:36:2f:54:
         91:a9:13:7f:40:6e:6b:81:ad:b3:0f:d1:39:a5:52:2d:ea:fb:
         6b:c3:cf:5d:cb:07:fc:c5:ca:aa:ba:2f:45:82:3b:70:d9:c1:
         56:7f:d4:ab:65:2c:0f:99:78:90:dd:4f:f1:b9:17:e8:eb:86:
         c7:8c:49:f2:52:f3:e3:8d:5f:93:c7:ce:48:2e:e8:51:de:e6:
         d9:fa:9d:39:1a:93:01:7a:ca:a1:1d:e4:a3:0e:c3:7a:d8:39:
         2c:ae:dc:a9:dd:4b:96:08:40:7a:3b:ca:64:ba:78:56:9a:35:
         fa:f3:bb:ec:64:50:e4:ca:96:fa:29:92:0b:3c:79:72:9f:b6:
         ce:84:a0:40:12:2c:99:cb:f9:8d:65:39:b9:08:98:7c:39:7c:
         c4:07:ac:ff:57:33:dc:90:7d:22:c2:57:24:7f:56:62:39:48:
         5e:80:fc:92:a7:db:a0:af:c9:02:a3:4d:e2:db:65:12:e0:02:
         10:61:ef:94:e9:48:fe:0a:cf:45:c3:71:68:cd:70:ac:de:28:
         49:79:17:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org