Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231362e302f32342d3234203d3e20323131313933.roa
File:                     3138312e34312e3231362e302f32342d3234203d3e20323131313933.roa (raw, json)
Hash identifier:          oRQQV5Yif4k+NbaV9RTvqsLRLKe/nCceUo1ZxiK1LsQ=
Subject key identifier:   FB:4C:BA:86:72:A8:2F:13:8A:07:19:D6:CA:0F:24:71:AC:51:21:5F
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       3796D20B93163DFF43F44BEAF25E1896BF65C7D0
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231362e302f32342d3234203d3e20323131313933.roa
Signing time:             Thu 17 Feb 2022 11:45:07 +0000
ROA not before:           Thu 17 Feb 2022 11:40:07 +0000
ROA not after:            Thu 16 Feb 2023 11:45:07 +0000
asID:                     211193
IP address blocks:        181.41.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:96:d2:0b:93:16:3d:ff:43:f4:4b:ea:f2:5e:18:96:bf:65:c7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:07 2022 GMT
            Not After : Feb 16 11:45:07 2023 GMT
        Subject: CN=3082010A0282010100C36F26888AC4FF74389ABBB63B1DDBA1D98A7FB0C8FF30CE4C8E195C640F6ECBB929BE0A343EF2C64F496A695967F8E71E4B8771E35066FC88EAEC6D0875335BF9B4C8BEFE11E65095C1AEBB98F58D1BCCA1CDE3EA59E7E4692BB626E55F1A32773958AEAE12A7C89B7ADAE4F19D4DDE978A3CDB4B1414F365457E349D6110F0B727C3D3A63527BB511DBF17D8835B9739179FD29D6211A063FDD7F885D67C3440F9227DF6C1C08886BDF0E46DB03DCF1E3604B54F8B86B9F5E515DC5AA23CAF4090306659DAB6AE0A89FEDE937819659B9E1ECBBEAF07D408430B9D3ABD4BCCD98A8E9CB25667CA022687DE447EC0B538AE56BCB7E056313D7F8BB573EAC1D70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:26:88:8a:c4:ff:74:38:9a:bb:b6:3b:1d:
                    db:a1:d9:8a:7f:b0:c8:ff:30:ce:4c:8e:19:5c:64:
                    0f:6e:cb:b9:29:be:0a:34:3e:f2:c6:4f:49:6a:69:
                    59:67:f8:e7:1e:4b:87:71:e3:50:66:fc:88:ea:ec:
                    6d:08:75:33:5b:f9:b4:c8:be:fe:11:e6:50:95:c1:
                    ae:bb:98:f5:8d:1b:cc:a1:cd:e3:ea:59:e7:e4:69:
                    2b:b6:26:e5:5f:1a:32:77:39:58:ae:ae:12:a7:c8:
                    9b:7a:da:e4:f1:9d:4d:de:97:8a:3c:db:4b:14:14:
                    f3:65:45:7e:34:9d:61:10:f0:b7:27:c3:d3:a6:35:
                    27:bb:51:1d:bf:17:d8:83:5b:97:39:17:9f:d2:9d:
                    62:11:a0:63:fd:d7:f8:85:d6:7c:34:40:f9:22:7d:
                    f6:c1:c0:88:86:bd:f0:e4:6d:b0:3d:cf:1e:36:04:
                    b5:4f:8b:86:b9:f5:e5:15:dc:5a:a2:3c:af:40:90:
                    30:66:59:da:b6:ae:0a:89:fe:de:93:78:19:65:9b:
                    9e:1e:cb:be:af:07:d4:08:43:0b:9d:3a:bd:4b:cc:
                    d9:8a:8e:9c:b2:56:67:ca:02:26:87:de:44:7e:c0:
                    b5:38:ae:56:bc:b7:e0:56:31:3d:7f:8b:b5:73:ea:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4C:BA:86:72:A8:2F:13:8A:07:19:D6:CA:0F:24:71:AC:51:21:5F
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231362e302f32342d3234203d3e20323131313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:af:69:af:96:5e:b3:9f:04:91:d8:35:87:e2:7d:f3:46:f7:
         f2:b4:6f:43:4c:94:32:3b:69:03:b5:1a:61:c7:9f:9b:ee:e5:
         fc:b2:52:35:4a:ae:4b:23:a5:24:0c:18:07:ea:e4:a4:27:5e:
         12:9e:c0:33:9f:36:40:b3:43:bf:a2:23:f2:2a:e3:84:65:96:
         59:39:71:92:45:eb:71:3b:ff:c2:26:32:69:df:a5:69:5d:26:
         17:a5:3c:d7:55:4a:4f:de:e7:22:48:92:7a:3f:ad:a3:aa:c6:
         00:22:bd:76:ce:05:aa:ef:da:1a:d9:b6:01:3b:47:12:b2:9b:
         35:78:bc:7f:59:94:24:bc:ee:f2:f7:7c:48:31:bf:5e:b3:fb:
         38:61:1b:4b:38:6b:ad:2c:5c:b2:3b:64:51:b6:24:fa:fe:59:
         b5:7b:69:de:09:b6:dc:d4:df:42:27:1c:5f:51:e5:89:5a:6a:
         0a:77:0d:6d:26:c4:c5:26:6a:be:f3:f5:58:02:e0:11:65:9f:
         a1:3a:03:6d:54:90:53:4f:d1:bf:86:c3:68:ef:63:2a:39:7d:
         a6:bf:9d:b4:ab:3f:12:dc:55:5e:a1:b3:a4:3c:c8:ac:56:0b:
         45:ef:af:ad:e4:61:56:13:a4:21:cc:39:19:02:3b:77:20:58:
         56:bd:cd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:10 2025 by rpki-client