Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e20323133333832.roa
File:                     3138352e3137302e35382e302f32342d3234203d3e20323133333832.roa (raw, json)
Hash identifier:          AEwdUj/DTWQA1Bo030tEzW+fMuAbgVhMOZen/120Vxo=
Subject key identifier:   34:06:26:BB:7A:CB:BD:9A:AE:23:26:F4:82:C5:D5:31:2C:1C:D6:18
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       1A219C6CE17E586608F506AD66627005CB79F94C
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e20323133333832.roa
Signing time:             Thu 21 Apr 2022 03:51:45 +0000
ROA not before:           Thu 21 Apr 2022 03:46:45 +0000
ROA not after:            Thu 20 Apr 2023 03:51:45 +0000
asID:                     213382
IP address blocks:        185.170.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:21:9c:6c:e1:7e:58:66:08:f5:06:ad:66:62:70:05:cb:79:f9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Apr 21 03:46:45 2022 GMT
            Not After : Apr 20 03:51:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:0d:86:c1:a0:05:89:29:93:6a:78:aa:cf:
                    31:fe:57:a4:60:f6:69:55:50:99:5c:a5:b7:0b:b3:
                    e7:df:62:c5:db:01:bd:af:5c:ed:d4:5c:a2:77:6b:
                    7e:6a:e6:6f:44:fe:80:e9:ea:90:aa:ab:05:f6:da:
                    28:05:6a:e7:22:58:cf:96:44:48:19:96:45:38:40:
                    0d:2e:b2:ba:6a:7c:17:bf:d1:69:b7:c4:c1:57:61:
                    cd:7a:ff:a1:19:ab:1a:da:ee:5e:6f:53:45:89:50:
                    83:bd:28:e9:0e:33:15:b8:b6:04:2a:97:67:dd:21:
                    cb:8e:08:d6:51:cf:5e:52:23:49:18:2e:7f:fc:e3:
                    cc:67:f6:06:fd:44:66:26:7f:02:0f:a6:49:0c:cd:
                    f5:b0:98:a6:15:c9:07:15:ff:60:42:cf:ea:c1:a6:
                    2a:43:f6:31:6e:72:de:af:e4:4d:47:eb:fb:87:b4:
                    ac:77:5d:3e:22:ac:91:e8:ab:fd:07:af:b4:08:ea:
                    09:6f:a5:ec:59:ad:be:d0:05:ab:00:49:ae:d0:ea:
                    e0:71:25:7e:24:71:9b:04:b3:cb:68:99:2e:99:b6:
                    43:04:39:82:1a:81:49:f7:9b:cf:01:e5:fd:73:a4:
                    b0:13:b5:6c:f6:e4:2b:ad:b2:ab:78:48:96:73:9a:
                    c0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:26:BB:7A:CB:BD:9A:AE:23:26:F4:82:C5:D5:31:2C:1C:D6:18
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e20323133333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:49:9e:55:4f:67:37:90:57:71:e6:34:c9:d0:34:2c:72:ed:
         de:c2:99:9d:9a:aa:31:13:f6:1a:cc:fd:b8:57:0a:c7:64:65:
         99:e5:43:b2:f0:9f:bf:d7:17:04:87:70:7b:99:57:18:f0:a4:
         82:6b:e7:d5:a6:a6:ab:65:e2:fb:cb:7e:59:c1:b7:bc:b2:81:
         3b:7b:f4:12:20:d0:5a:2e:74:44:56:ac:83:16:08:84:71:47:
         8f:68:f7:dd:f9:3c:3e:69:a0:e4:22:e5:a1:67:f5:65:c9:5a:
         11:67:3d:39:7e:64:c0:30:29:9a:b3:7f:9a:d2:40:de:55:42:
         33:72:53:78:98:24:71:81:11:c8:a4:2d:e6:82:55:75:c9:8a:
         46:8e:f3:c5:c2:d2:f8:31:f9:a5:e9:3f:b7:8e:f1:2e:a5:2f:
         f2:30:a1:a1:e5:f6:b7:cd:47:c8:83:ac:3b:f6:11:84:d9:0c:
         c5:40:ca:66:f2:66:60:0f:e9:6e:56:70:72:ac:37:5d:29:ec:
         38:dc:ee:5b:e8:39:08:82:13:1f:f3:31:de:12:9f:85:d3:da:
         b3:eb:27:12:ac:2f:ea:5f:04:70:e0:ce:3f:ee:e2:14:40:c9:
         a9:39:7b:03:dd:ca:56:50:58:03:87:6d:f4:43:2f:c7:92:86:
         b2:5a:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org