Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e203631333137.roa
File:                     3138352e3137302e35382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          hy5fNDzWfa73/qo2Srh78CaVT1ULv0As/vpGVaw5C/A=
Subject key identifier:   CD:97:AB:7E:CC:21:D5:02:19:AC:4B:0A:71:44:AB:6A:E1:64:E9:34
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       67F6B192CC427536439A892FFD2178E765C05CE6
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 17 Feb 2022 11:45:08 +0000
ROA not before:           Thu 17 Feb 2022 11:40:08 +0000
ROA not after:            Thu 16 Feb 2023 11:45:08 +0000
asID:                     61317
IP address blocks:        185.170.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f6:b1:92:cc:42:75:36:43:9a:89:2f:fd:21:78:e7:65:c0:5c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:08 2022 GMT
            Not After : Feb 16 11:45:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:56:c1:ef:dc:bf:28:9c:a2:0b:29:c7:9b:
                    43:b4:27:1e:6f:01:10:5d:9b:53:76:1f:ed:a4:cf:
                    cc:23:01:74:03:dd:c9:52:3a:02:f7:1c:76:69:c5:
                    09:67:76:ad:7d:be:15:1f:1c:49:b0:c5:a2:76:73:
                    2d:15:4c:db:e0:5c:1f:00:d8:b8:0a:d6:42:cd:88:
                    31:a2:68:70:9c:05:80:d0:c3:32:2b:5e:2b:a2:d0:
                    a6:c9:9f:d7:f7:36:44:25:71:ec:eb:41:fa:aa:c6:
                    7b:60:60:5b:7a:fa:a6:f8:c5:21:fc:50:bf:f2:0b:
                    86:2a:0c:09:8a:c3:18:80:7f:6b:ae:ad:53:a8:23:
                    34:82:4d:ec:10:f9:4b:a6:65:83:3a:9f:1c:6c:f7:
                    41:ce:1b:74:15:89:bf:bf:29:10:1b:91:16:5d:ab:
                    0d:76:b0:21:d0:13:38:31:87:53:1b:e5:eb:70:0a:
                    1b:d5:9e:b8:46:fb:7a:88:db:0d:43:68:77:be:3d:
                    58:4d:6b:cd:d8:ad:5d:56:2a:bd:39:ae:7e:02:b3:
                    82:0b:98:e8:ea:95:09:23:6a:40:2c:37:fd:f6:4d:
                    25:c2:72:dd:7d:f4:c5:40:7f:c1:46:95:36:40:00:
                    5f:f5:c7:e3:74:f3:7f:c2:d7:f8:77:d3:f1:69:b9:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:AB:7E:CC:21:D5:02:19:AC:4B:0A:71:44:AB:6A:E1:64:E9:34
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b6:de:30:68:32:db:77:db:d1:96:0e:14:cd:fc:54:81:ec:
         f2:7d:f5:1a:44:4f:f0:ae:76:66:70:22:c9:9f:9e:28:d6:eb:
         09:3c:be:bd:da:4c:2e:30:7b:ca:c7:69:1e:ef:4d:e8:ba:a5:
         7d:ce:f9:d0:13:99:9e:0f:d0:72:58:aa:c0:02:86:13:f4:28:
         57:88:d7:80:fe:ab:16:05:19:1a:33:b1:41:02:4f:56:19:01:
         df:d5:63:82:5d:46:49:c6:ef:6a:a6:33:c3:56:9c:ca:e8:d6:
         62:1b:4f:a4:26:81:52:f6:24:d1:7b:54:c9:e0:89:96:e2:79:
         da:9d:06:43:eb:73:d6:da:8b:2b:74:88:85:21:36:f9:0d:9f:
         26:70:52:2c:0b:28:79:61:6d:22:72:db:47:c8:14:aa:7a:1b:
         3b:2e:11:e6:f1:d5:19:f8:d6:9a:72:27:d2:4b:cc:fa:98:d2:
         57:b3:a3:7e:5b:93:49:6c:2d:c9:a8:f0:38:18:4d:e5:63:de:
         62:0b:05:70:50:d9:1c:1b:d4:c1:dc:c2:11:cc:79:de:e9:03:
         1e:c4:d3:c6:48:80:6c:0c:6f:fd:b7:43:bf:4f:a2:78:29:96:
         7a:86:04:87:f0:2c:4f:dd:c1:41:3f:6a:46:00:57:bc:90:0b:
         41:81:47:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:40 2023 by rpki-client on console-fra.rpki-client.org