Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32342d3234203d3e203330343536.roa
File:                     3138312e34312e3230362e302f32342d3234203d3e203330343536.roa (raw, json)
Hash identifier:          9F+zbCWJRlLRhJEcpq620Xs6BhgzEO0cmkXOBHdvPNo=
Subject key identifier:   C3:B1:F8:C1:FF:C4:EC:C7:B7:B6:27:1F:5F:53:36:58:EC:87:2B:8E
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       663906A9C521E82FE8DB291DE7C04E3A0AF6AC25
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32342d3234203d3e203330343536.roa
Signing time:             Fri 18 Mar 2022 22:11:40 +0000
ROA not before:           Fri 18 Mar 2022 22:06:40 +0000
ROA not after:            Fri 17 Mar 2023 22:11:40 +0000
asID:                     30456
IP address blocks:        181.41.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:39:06:a9:c5:21:e8:2f:e8:db:29:1d:e7:c0:4e:3a:0a:f6:ac:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Mar 18 22:06:40 2022 GMT
            Not After : Mar 17 22:11:40 2023 GMT
        Subject: CN=3082010A0282010100D1A16B8F6B96BB9A8FD8E0BB14BB75FA0418057187B2115933CC5593B35246073A6182901BA2B6E4654E41D79191A2823AEC5CF15B8862D312CF7C5CBB7BECFEC72C1D7F88C1880BACE57283764C15DCF8553D01CD9E26005A2381BEFB31B9C01E0BB5D85D9FF1FCAC92ADA36B8FD23DEE1F4C9CD1745492C3F03096826DD91EEE32290A846AA3B4DC482310287CAE9B50FBA547BFF7385045F4720CFBAB0FF2A4819A1BCA86FFC2DB7738BD19D61ABBA4A5FDE89EA4C6C239E99CCAD24D0B12D85EC9ABBFF470B29AFEC905578079D39BFBC3267BF3F6D9790FEF25905BE0537BDF5D9AF3CE5E8654524AF5F3B14DA5BC3CDB61BB8C1F4D8A465A67CEBD07C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:6b:8f:6b:96:bb:9a:8f:d8:e0:bb:14:bb:
                    75:fa:04:18:05:71:87:b2:11:59:33:cc:55:93:b3:
                    52:46:07:3a:61:82:90:1b:a2:b6:e4:65:4e:41:d7:
                    91:91:a2:82:3a:ec:5c:f1:5b:88:62:d3:12:cf:7c:
                    5c:bb:7b:ec:fe:c7:2c:1d:7f:88:c1:88:0b:ac:e5:
                    72:83:76:4c:15:dc:f8:55:3d:01:cd:9e:26:00:5a:
                    23:81:be:fb:31:b9:c0:1e:0b:b5:d8:5d:9f:f1:fc:
                    ac:92:ad:a3:6b:8f:d2:3d:ee:1f:4c:9c:d1:74:54:
                    92:c3:f0:30:96:82:6d:d9:1e:ee:32:29:0a:84:6a:
                    a3:b4:dc:48:23:10:28:7c:ae:9b:50:fb:a5:47:bf:
                    f7:38:50:45:f4:72:0c:fb:ab:0f:f2:a4:81:9a:1b:
                    ca:86:ff:c2:db:77:38:bd:19:d6:1a:bb:a4:a5:fd:
                    e8:9e:a4:c6:c2:39:e9:9c:ca:d2:4d:0b:12:d8:5e:
                    c9:ab:bf:f4:70:b2:9a:fe:c9:05:57:80:79:d3:9b:
                    fb:c3:26:7b:f3:f6:d9:79:0f:ef:25:90:5b:e0:53:
                    7b:df:5d:9a:f3:ce:5e:86:54:52:4a:f5:f3:b1:4d:
                    a5:bc:3c:db:61:bb:8c:1f:4d:8a:46:5a:67:ce:bd:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B1:F8:C1:FF:C4:EC:C7:B7:B6:27:1F:5F:53:36:58:EC:87:2B:8E
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3230362e302f32342d3234203d3e203330343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f6:bc:ff:2e:f5:80:90:4a:4e:7f:e4:cf:7c:ee:be:ba:38:
         c1:9e:95:ec:a4:6b:44:f0:28:10:40:e6:1a:5a:0e:62:be:2e:
         e3:30:9d:73:f7:91:1b:44:9b:11:ad:c1:88:6f:55:36:68:29:
         e2:e6:ee:48:a6:47:a3:b3:e0:be:48:e9:ce:cb:78:fc:ff:ed:
         ef:98:b3:9b:9c:1b:70:be:7c:df:bb:a2:b2:a9:18:7c:86:b1:
         28:39:95:35:74:e4:32:e2:9f:6a:6a:2d:4b:24:7a:a5:ac:4e:
         23:87:52:47:2d:d4:58:4f:2e:c8:ff:b5:eb:eb:97:92:41:52:
         88:1a:df:da:df:d7:64:ff:a1:50:4b:e5:e7:3d:80:5b:67:d8:
         af:7b:8e:da:5a:7b:c3:e2:10:82:70:9f:b7:40:85:21:20:77:
         0e:cd:0f:24:8c:86:aa:67:92:c8:62:bf:45:0e:da:ab:47:d2:
         97:2f:e2:be:18:6b:24:ac:84:05:8c:49:59:51:0e:bc:08:ab:
         05:9f:22:b9:9b:70:32:49:c9:d6:4f:80:28:04:2d:20:dd:04:
         5c:43:97:8b:6c:19:dd:81:34:51:cf:6c:32:ca:e2:a8:df:10:
         a8:a4:f3:c4:b9:c4:0e:0d:a0:98:ef:a8:a5:ee:d8:95:11:41:
         d6:22:8d:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:00:01 2025 by rpki-client