Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231372e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3231372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          pTAWy9QZ31r2edpP9pc/67QPyqiwfalOyVOxvtyfZyw=
Subject key identifier:   30:22:05:80:E8:B8:18:60:0C:D5:BE:B7:AD:46:DC:81:CD:0A:EB:6B
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       517D5A1CA3BDEB3E4F00626DFD449B75BD92B557
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231372e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:07 +0000
ROA not before:           Thu 17 Feb 2022 11:40:07 +0000
ROA not after:            Thu 16 Feb 2023 11:45:07 +0000
asID:                     61317
IP address blocks:        181.41.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7d:5a:1c:a3:bd:eb:3e:4f:00:62:6d:fd:44:9b:75:bd:92:b5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:07 2022 GMT
            Not After : Feb 16 11:45:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:79:7c:1c:34:5c:43:b3:e4:f0:3a:5a:21:
                    fd:b3:8f:f7:34:16:94:a3:a5:db:d4:d2:8e:dd:41:
                    e4:fa:79:36:81:2f:15:c8:1b:07:bc:de:a0:77:15:
                    42:2e:e1:d5:2f:81:de:18:22:34:f8:c8:e9:2f:95:
                    35:72:65:62:d5:2c:ab:b0:71:4c:24:fe:ff:e3:3a:
                    c0:13:cf:49:1a:50:81:7b:3c:56:0c:96:71:ec:0a:
                    7b:f8:30:84:fb:fb:a1:d2:b9:ab:97:26:93:0d:38:
                    82:c4:ed:a0:8b:55:64:5e:40:d0:c3:73:95:c4:73:
                    04:48:83:61:2c:c6:cf:ed:cf:ed:bb:40:db:da:f1:
                    ab:28:c7:bc:73:91:98:8b:c4:37:93:40:2b:74:25:
                    9b:7e:5c:f5:60:24:4b:db:b4:91:3e:c3:e1:5c:1e:
                    da:4d:22:45:fb:61:dc:5c:9a:71:20:e8:2c:1d:b3:
                    73:7a:2e:2c:00:89:92:b5:6c:c6:92:f8:22:6f:90:
                    2f:16:97:78:63:62:0b:7d:68:14:75:c8:d2:14:0b:
                    c6:1c:e4:d2:e4:fb:10:60:3f:2e:ba:7f:7a:64:07:
                    3d:7c:02:71:73:e1:1a:22:a6:e1:60:01:92:c7:8f:
                    7b:ef:fd:fd:8b:b9:66:e2:67:94:0e:61:7c:bb:99:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:22:05:80:E8:B8:18:60:0C:D5:BE:B7:AD:46:DC:81:CD:0A:EB:6B
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138312e34312e3231372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:ce:5e:a6:00:0d:8e:7a:a9:67:70:fd:f7:d5:25:7e:a3:
         5b:41:42:d8:a4:c8:d7:99:bf:ef:c6:74:b7:fb:49:74:30:a3:
         a4:8f:d5:a9:98:38:d4:91:07:60:96:03:5c:7e:78:73:4b:3e:
         38:43:a7:19:64:e5:6b:c3:10:b5:c4:b3:ea:6b:be:4a:b7:b8:
         cc:1f:f4:52:b7:a0:57:5c:45:93:53:f1:ea:e9:4d:0c:37:85:
         36:f2:ce:44:04:dc:6b:04:2c:b2:56:db:51:48:12:f5:83:73:
         34:1d:f4:27:c4:34:9d:e0:05:43:8a:6c:d2:2d:74:11:94:6a:
         00:d3:e7:27:86:0d:3e:63:f9:be:dd:b4:62:8b:e0:e6:1b:ae:
         c1:1f:80:9d:4a:61:86:d6:20:51:06:a4:8a:d1:7c:aa:50:c4:
         e6:ae:bd:bf:d5:4b:17:a7:29:5a:ac:d4:45:86:52:05:f2:6e:
         a9:0d:fd:dd:f9:ff:0b:23:6a:20:78:e3:0b:e4:5e:91:f3:56:
         35:be:05:eb:29:ff:03:f2:e7:b5:9f:30:81:c0:48:f6:74:92:
         c6:f7:10:7c:94:53:16:e4:6d:ae:e1:fd:eb:ae:2f:34:4f:43:
         99:b0:72:5f:07:8e:66:cc:ab:ef:03:30:a4:c4:b5:8a:ef:f6:
         fb:31:77:e3
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUUX1aHKO96z5PAGJt/USbdb2StVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2NTREREU4
REQxOTg1NTAeFw0yMjAyMTcxMTQwMDdaFw0yMzAyMTYxMTQ1MDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzEyNjc5N0MxQzM0NUM0M0Iz
RTRGMDNBNUEyMUZEQjM4RkY3MzQxNjk0QTNBNURCRDREMjhFREQ0MUU0RkE3OTM2
ODEyRjE1QzgxQjA3QkNERUEwNzcxNTQyMkVFMUQ1MkY4MURFMTgyMjM0RjhDOEU5
MkY5NTM1NzI2NTYyRDUyQ0FCQjA3MTRDMjRGRUZGRTMzQUMwMTNDRjQ5MUE1MDgx
N0IzQzU2MEM5NjcxRUMwQTdCRjgzMDg0RkJGQkExRDJCOUFCOTcyNjkzMEQzODgy
QzRFREEwOEI1NTY0NUU0MEQwQzM3Mzk1QzQ3MzA0NDg4MzYxMkNDNkNGRURDRkVE
QkI0MERCREFGMUFCMjhDN0JDNzM5MTk4OEJDNDM3OTM0MDJCNzQyNTlCN0U1Q0Y1
NjAyNDRCREJCNDkxM0VDM0UxNUMxRURBNEQyMjQ1RkI2MURDNUM5QTcxMjBFODJD
MURCMzczN0EyRTJDMDA4OTkyQjU2Q0M2OTJGODIyNkY5MDJGMTY5Nzc4NjM2MjBC
N0Q2ODE0NzVDOEQyMTQwQkM2MUNFNEQyRTRGQjEwNjAzRjJFQkE3RjdBNjQwNzNE
N0MwMjcxNzNFMTFBMjJBNkUxNjAwMTkyQzc4RjdCRUZGREZEOEJCOTY2RTI2Nzk0
MEU2MTdDQkI5OTFBNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwSZ5fBw0XEOz5PA6WiH9s4/3NBaUo6Xb1NKO3UHk+nk2gS8VyBsH
vN6gdxVCLuHVL4HeGCI0+MjpL5U1cmVi1SyrsHFMJP7/4zrAE89JGlCBezxWDJZx
7Ap7+DCE+/uh0rmrlyaTDTiCxO2gi1VkXkDQw3OVxHMESINhLMbP7c/tu0Db2vGr
KMe8c5GYi8Q3k0ArdCWbflz1YCRL27SRPsPhXB7aTSJF+2HcXJpxIOgsHbNzei4s
AImStWzGkvgib5AvFpd4Y2ILfWgUdcjSFAvGHOTS5PsQYD8uun96ZAc9fAJxc+Ea
IqbhYAGSx4977/39i7lm4meUDmF8u5kaVQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FDAiBYDouBhgDNW+t61G3IHNCutrMB8GA1UdIwQYMBaAFLGn2qJHuIq/ItKYekFl
Td6N0ZhVMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzIvQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2
NTREREU4REQxOTg1NS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMi9CMUE3REFBMjQ3Qjg4QUJGMjJE
Mjk4N0E0MTY1NERERThERDE5ODU1LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMi8zMTM4MzEyZTM0
MzEyZTMyMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC1KdkwDQYJKoZIhvcNAQELBQADggEBAGfozl6mAA2OeqlncP331SV+
o1tBQtikyNeZv+/GdLf7SXQwo6SP1amYONSRB2CWA1x+eHNLPjhDpxlk5WvDELXE
s+prvkq3uMwf9FK3oFdcRZNT8erpTQw3hTbyzkQE3GsELLJW21FIEvWDczQd9CfE
NJ3gBUOKbNItdBGUagDT5yeGDT5j+b7dtGKL4OYbrsEfgJ1KYYbWIFEGpIrRfKpQ
xOauvb/VSxenKVqs1EWGUgXybqkN/d35/wsjaiB44wvkXpHzVjW+Besp/wPy57Wf
MIHASPZ0ksb3EHyUUxbkba7h/euuLzRPQ5mwcl8HjmbMq+8DMKTEtYrv9vsxd+M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org