Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa
File:                     3138352e3137302e35382e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          LEJZ5g75qXSAR9wY8jsM2zon7rrhIVF59nxrXvIOerg=
Subject key identifier:   30:AC:C0:E0:1B:94:A1:50:F8:88:A6:61:45:C3:AB:27:8F:35:FB:17
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       33997B9B574CCF1634D77C073CF583241960F3F9
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa
Signing time:             Thu 17 Feb 2022 11:45:06 +0000
ROA not before:           Thu 17 Feb 2022 11:40:06 +0000
ROA not after:            Thu 16 Feb 2023 11:45:06 +0000
asID:                     19437
IP address blocks:        185.170.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:99:7b:9b:57:4c:cf:16:34:d7:7c:07:3c:f5:83:24:19:60:f3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:06 2022 GMT
            Not After : Feb 16 11:45:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5d:6f:9e:58:fc:6b:5a:6f:4f:1b:3b:d2:e1:
                    e4:1b:70:17:23:e5:8b:9d:e0:b6:f7:f3:0b:21:79:
                    32:bb:e5:e2:1d:89:a7:7d:c4:ef:ea:43:ef:2a:bf:
                    42:d6:5a:52:4d:5a:88:c5:c9:62:39:ab:07:71:80:
                    45:7d:9c:82:70:b8:89:48:86:bd:be:8d:9e:c9:0d:
                    aa:29:bb:ad:4f:08:a4:00:2a:4a:a6:1f:48:2f:b9:
                    a1:5b:5b:8e:69:50:4b:80:6c:0a:fa:07:2a:48:ba:
                    76:08:70:6f:cf:50:3e:b1:9c:3c:6b:d3:8d:c6:f8:
                    cf:7b:77:9f:1a:f5:83:e1:88:67:90:38:ad:83:b8:
                    36:bc:02:c8:b5:26:f8:66:e6:51:95:38:05:f3:e4:
                    a4:75:c2:62:00:fb:6d:e5:83:dc:ba:78:2f:4a:3e:
                    70:37:53:a2:7a:7f:0f:61:2a:91:1a:23:7c:e7:ff:
                    9c:d8:53:4f:f4:1b:e7:84:22:92:e8:b5:5e:02:96:
                    aa:67:25:03:0d:1f:80:97:e0:05:24:c8:e9:cc:7d:
                    5a:dc:e0:5d:d4:1d:29:29:b6:69:fd:74:ad:e7:44:
                    81:5f:6c:92:94:c3:09:8e:ae:5b:ea:2b:58:0d:39:
                    92:e3:e6:1e:6d:6c:f6:b2:b4:af:42:ad:cd:d6:b5:
                    36:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:C0:E0:1B:94:A1:50:F8:88:A6:61:45:C3:AB:27:8F:35:FB:17
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:e7:b0:ce:26:13:3f:4b:1d:68:1d:36:8c:5e:ed:4b:c9:
         59:8d:96:1c:63:ad:ec:0c:da:09:30:61:b9:72:ea:05:bd:78:
         5f:49:bd:d1:be:f4:89:8a:4b:a2:b8:22:ed:16:5c:58:04:2e:
         07:27:69:d5:02:4b:0f:3b:c1:7a:1a:e5:c7:9c:d2:6d:4a:8f:
         13:87:b1:64:12:c0:98:df:84:6f:ba:a1:33:40:4a:03:8b:0d:
         c3:79:8a:81:2f:02:59:ad:79:8c:b0:aa:6b:f7:65:7c:70:c1:
         b1:16:41:a8:3f:17:66:1d:6e:ce:4f:95:f8:21:e5:27:da:65:
         e2:94:3e:8c:38:94:05:2d:d5:43:a8:bb:f0:11:02:92:42:01:
         e5:34:36:f5:53:97:c4:6d:2e:5d:3f:d6:2f:b3:86:fd:8f:dd:
         29:bd:7f:52:1f:30:2c:ad:3c:8e:98:a5:12:83:ba:02:a1:21:
         69:e8:ae:46:a0:0e:60:7a:11:ef:eb:11:59:1b:3b:dc:d2:4d:
         4a:ad:fc:43:94:56:86:b6:a1:ba:6c:f5:76:a7:4c:10:42:4d:
         6f:97:2d:cb:f3:69:af:0f:45:3c:4f:32:e9:eb:d4:1d:b6:ff:
         d6:ec:65:86:fa:87:f9:c5:41:01:80:63:44:20:75:e8:c8:2f:
         42:c6:a4:bd
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUM5l7m1dMzxY013wHPPWDJBlg8/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2NTREREU4
REQxOTg1NTAeFw0yMjAyMTcxMTQwMDZaFw0yMzAyMTYxMTQ1MDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Q1RDZGOUU1OEZDNkI1QTZG
NEYxQjNCRDJFMUU0MUI3MDE3MjNFNThCOURFMEI2RjdGMzBCMjE3OTMyQkJFNUUy
MUQ4OUE3N0RDNEVGRUE0M0VGMkFCRjQyRDY1QTUyNEQ1QTg4QzVDOTYyMzlBQjA3
NzE4MDQ1N0Q5QzgyNzBCODg5NDg4NkJEQkU4RDlFQzkwREFBMjlCQkFENEYwOEE0
MDAyQTRBQTYxRjQ4MkZCOUExNUI1QjhFNjk1MDRCODA2QzBBRkEwNzJBNDhCQTc2
MDg3MDZGQ0Y1MDNFQjE5QzNDNkJEMzhEQzZGOENGN0I3NzlGMUFGNTgzRTE4ODY3
OTAzOEFEODNCODM2QkMwMkM4QjUyNkY4NjZFNjUxOTUzODA1RjNFNEE0NzVDMjYy
MDBGQjZERTU4M0RDQkE3ODJGNEEzRTcwMzc1M0EyN0E3RjBGNjEyQTkxMUEyMzdD
RTdGRjlDRDg1MzRGRjQxQkU3ODQyMjkyRThCNTVFMDI5NkFBNjcyNTAzMEQxRjgw
OTdFMDA1MjRDOEU5Q0M3RDVBRENFMDVERDQxRDI5MjlCNjY5RkQ3NEFERTc0NDgx
NUY2QzkyOTRDMzA5OEVBRTVCRUEyQjU4MEQzOTkyRTNFNjFFNkQ2Q0Y2QjJCNEFG
NDJBRENERDZCNTM2QkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzV1vnlj8a1pvTxs70uHkG3AXI+WLneC29/MLIXkyu+XiHYmnfcTv
6kPvKr9C1lpSTVqIxcliOasHcYBFfZyCcLiJSIa9vo2eyQ2qKbutTwikACpKph9I
L7mhW1uOaVBLgGwK+gcqSLp2CHBvz1A+sZw8a9ONxvjPe3efGvWD4YhnkDitg7g2
vALItSb4ZuZRlTgF8+SkdcJiAPtt5YPcungvSj5wN1Oien8PYSqRGiN85/+c2FNP
9BvnhCKS6LVeApaqZyUDDR+Al+AFJMjpzH1a3OBd1B0pKbZp/XSt50SBX2ySlMMJ
jq5b6itYDTmS4+YebWz2srSvQq3N1rU2uwIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FDCswOAblKFQ+IimYUXDqyePNfsXMB8GA1UdIwQYMBaAFLGn2qJHuIq/ItKYekFl
Td6N0ZhVMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzIvQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2
NTREREU4REQxOTg1NS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMi9CMUE3REFBMjQ3Qjg4QUJGMjJE
Mjk4N0E0MTY1NERERThERDE5ODU1LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMi8zMTM4MzUyZTMx
MzczMDJlMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNDMzMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC5qjowDQYJKoZIhvcNAQELBQADggEBADuW57DOJhM/Sx1oHTaMXu1L
yVmNlhxjrewM2gkwYbly6gW9eF9JvdG+9ImKS6K4Iu0WXFgELgcnadUCSw87wXoa
5cec0m1KjxOHsWQSwJjfhG+6oTNASgOLDcN5ioEvAlmteYywqmv3ZXxwwbEWQag/
F2Ydbs5Plfgh5SfaZeKUPow4lAUt1UOou/ARApJCAeU0NvVTl8RtLl0/1i+zhv2P
3Sm9f1IfMCytPI6YpRKDugKhIWnorkagDmB6Ee/rEVkbO9zSTUqt/EOUVoa2obps
9XanTBBCTW+XLcvzaa8PRTxPMunr1B22/9bsZYb6h/nFQQGAY0QgdejIL0LGpL0=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org