Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa
File:                     3138352e3137302e35392e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          JyKZiyHkd/E8dnFNJZ+uHjKCeABj8XXmuN+HlYndQoM=
Subject key identifier:   0D:1E:DF:7C:17:DD:75:74:A3:5D:7B:5D:9F:37:A2:CC:73:85:10:81
Certificate issuer:       /CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
Certificate serial:       5F172198090090AB4C980391FB2BC64C20780122
Authority key identifier: B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa
Signing time:             Thu 17 Feb 2022 11:45:08 +0000
ROA not before:           Thu 17 Feb 2022 11:40:08 +0000
ROA not after:            Thu 16 Feb 2023 11:45:08 +0000
asID:                     22773
IP address blocks:        185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:17:21:98:09:00:90:ab:4c:98:03:91:fb:2b:c6:4c:20:78:01:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A7DAA247B88ABF22D2987A41654DDE8DD19855
        Validity
            Not Before: Feb 17 11:40:08 2022 GMT
            Not After : Feb 16 11:45:08 2023 GMT
        Subject: CN=3082010A0282010100F1AAD22FD6C255E9924179BC785371DB412281264ACF3F3193E02A673C53486CA73676CDD9EEAF10B06548ACF09B1148DE01402512493E9A73152F4C5D0A2C5850469AC54D5DD5B9F4829F007F47D67DD2B4BE0D3DEFE8ABA2A918D426F42142E396173CFB7B3DDAD6C06889CC1B9BEC0BE18D4F76AA716B9493CFA33FCC1E6E37BAF7A482003DEA0239BC430B81F9D1998627653A84B8DF627204593C5E39A03607966C5CF82675C6A5CDE6FF64663D4DA8112A51E98A32D7B334EC37511B27189725778A0F220DD51AE4A86EC1B1F79FB6F4851B375E5CBBDE6431F7C7016645948D52BF2E0C721ED1F160B57BA4DBB65054B10F3D9487C1224DE40342C3C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:aa:d2:2f:d6:c2:55:e9:92:41:79:bc:78:53:
                    71:db:41:22:81:26:4a:cf:3f:31:93:e0:2a:67:3c:
                    53:48:6c:a7:36:76:cd:d9:ee:af:10:b0:65:48:ac:
                    f0:9b:11:48:de:01:40:25:12:49:3e:9a:73:15:2f:
                    4c:5d:0a:2c:58:50:46:9a:c5:4d:5d:d5:b9:f4:82:
                    9f:00:7f:47:d6:7d:d2:b4:be:0d:3d:ef:e8:ab:a2:
                    a9:18:d4:26:f4:21:42:e3:96:17:3c:fb:7b:3d:da:
                    d6:c0:68:89:cc:1b:9b:ec:0b:e1:8d:4f:76:aa:71:
                    6b:94:93:cf:a3:3f:cc:1e:6e:37:ba:f7:a4:82:00:
                    3d:ea:02:39:bc:43:0b:81:f9:d1:99:86:27:65:3a:
                    84:b8:df:62:72:04:59:3c:5e:39:a0:36:07:96:6c:
                    5c:f8:26:75:c6:a5:cd:e6:ff:64:66:3d:4d:a8:11:
                    2a:51:e9:8a:32:d7:b3:34:ec:37:51:1b:27:18:97:
                    25:77:8a:0f:22:0d:d5:1a:e4:a8:6e:c1:b1:f7:9f:
                    b6:f4:85:1b:37:5e:5c:bb:de:64:31:f7:c7:01:66:
                    45:94:8d:52:bf:2e:0c:72:1e:d1:f1:60:b5:7b:a4:
                    db:b6:50:54:b1:0f:3d:94:87:c1:22:4d:e4:03:42:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1E:DF:7C:17:DD:75:74:A3:5D:7B:5D:9F:37:A2:CC:73:85:10:81
            X509v3 Authority Key Identifier:
                keyid:B1:A7:DA:A2:47:B8:8A:BF:22:D2:98:7A:41:65:4D:DE:8D:D1:98:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/2/B1A7DAA247B88ABF22D2987A41654DDE8DD19855.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/2/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:9b:b3:4a:da:20:e0:76:a6:65:d8:01:e4:91:00:f8:97:58:
         1c:07:c2:4a:c1:d6:e4:01:0f:b2:4a:a0:da:e7:7a:6b:74:02:
         63:7d:fa:66:f3:a8:5c:63:5f:61:43:d8:0a:d7:86:2d:ff:47:
         38:96:3e:53:8f:eb:0d:d9:e5:29:0d:d1:b6:c1:97:6c:c7:f1:
         e9:0b:7f:06:eb:8c:f7:77:39:99:e8:0b:c9:e0:cc:b0:44:c6:
         7e:de:e6:6c:d7:3c:f8:cc:b3:e3:1b:58:2b:52:c1:f3:ef:f8:
         e5:c4:42:7f:0a:4a:81:52:b3:49:98:64:3a:af:2f:8d:ac:b1:
         ae:34:df:9e:5b:d1:ee:37:89:c0:fe:0e:54:56:e5:8c:ba:d1:
         15:25:31:55:8b:8f:09:2a:43:f0:52:66:f4:8e:ec:4f:4b:65:
         05:d6:69:e6:6e:ae:5c:8a:72:5c:69:7b:0e:40:91:96:ed:ce:
         f9:1b:94:de:13:cc:5e:f6:3d:5a:11:23:b3:fb:03:8f:4c:08:
         03:48:3b:03:c2:af:85:07:c1:4b:cb:bd:b5:4c:10:85:9a:30:
         63:a1:53:3a:6b:e4:be:e4:0f:7f:54:06:40:a4:50:c6:97:60:
         72:93:b6:cc:32:29:6f:96:d1:26:68:e6:dc:f6:38:39:99:d5:
         1a:01:a2:9b
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUXxchmAkAkKtMmAOR+yvGTCB4ASIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2NTREREU4
REQxOTg1NTAeFw0yMjAyMTcxMTQwMDhaFw0yMzAyMTYxMTQ1MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjFBQUQyMkZENkMyNTVFOTky
NDE3OUJDNzg1MzcxREI0MTIyODEyNjRBQ0YzRjMxOTNFMDJBNjczQzUzNDg2Q0E3
MzY3NkNERDlFRUFGMTBCMDY1NDhBQ0YwOUIxMTQ4REUwMTQwMjUxMjQ5M0U5QTcz
MTUyRjRDNUQwQTJDNTg1MDQ2OUFDNTRENURENUI5RjQ4MjlGMDA3RjQ3RDY3REQy
QjRCRTBEM0RFRkU4QUJBMkE5MThENDI2RjQyMTQyRTM5NjE3M0NGQjdCM0REQUQ2
QzA2ODg5Q0MxQjlCRUMwQkUxOEQ0Rjc2QUE3MTZCOTQ5M0NGQTMzRkNDMUU2RTM3
QkFGN0E0ODIwMDNERUEwMjM5QkM0MzBCODFGOUQxOTk4NjI3NjUzQTg0QjhERjYy
NzIwNDU5M0M1RTM5QTAzNjA3OTY2QzVDRjgyNjc1QzZBNUNERTZGRjY0NjYzRDRE
QTgxMTJBNTFFOThBMzJEN0IzMzRFQzM3NTExQjI3MTg5NzI1Nzc4QTBGMjIwREQ1
MUFFNEE4NkVDMUIxRjc5RkI2RjQ4NTFCMzc1RTVDQkJERTY0MzFGN0M3MDE2NjQ1
OTQ4RDUyQkYyRTBDNzIxRUQxRjE2MEI1N0JBNERCQjY1MDU0QjEwRjNEOTQ4N0Mx
MjI0REU0MDM0MkMzQzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8arSL9bCVemSQXm8eFNx20EigSZKzz8xk+AqZzxTSGynNnbN2e6v
ELBlSKzwmxFI3gFAJRJJPppzFS9MXQosWFBGmsVNXdW59IKfAH9H1n3StL4NPe/o
q6KpGNQm9CFC45YXPPt7PdrWwGiJzBub7AvhjU92qnFrlJPPoz/MHm43uvekggA9
6gI5vEMLgfnRmYYnZTqEuN9icgRZPF45oDYHlmxc+CZ1xqXN5v9kZj1NqBEqUemK
MtezNOw3URsnGJcld4oPIg3VGuSobsGx95+29IUbN15cu95kMffHAWZFlI1Svy4M
ch7R8WC1e6TbtlBUsQ89lIfBIk3kA0LDxQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FA0e33wX3XV0o117XZ83osxzhRCBMB8GA1UdIwQYMBaAFLGn2qJHuIq/ItKYekFl
Td6N0ZhVMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzIvQjFBN0RBQTI0N0I4OEFCRjIyRDI5ODdBNDE2
NTREREU4REQxOTg1NS5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMi9CMUE3REFBMjQ3Qjg4QUJGMjJE
Mjk4N0E0MTY1NERERThERDE5ODU1LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMi8zMTM4MzUyZTMx
MzczMDJlMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzIzNzM3MzMucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC5qjswDQYJKoZIhvcNAQELBQADggEBACSbs0raIOB2pmXYAeSRAPiX
WBwHwkrB1uQBD7JKoNrnemt0AmN9+mbzqFxjX2FD2ArXhi3/RziWPlOP6w3Z5SkN
0bbBl2zH8ekLfwbrjPd3OZnoC8ngzLBExn7e5mzXPPjMs+MbWCtSwfPv+OXEQn8K
SoFSs0mYZDqvL42ssa40355b0e43icD+DlRW5Yy60RUlMVWLjwkqQ/BSZvSO7E9L
ZQXWaeZurlyKclxpew5AkZbtzvkblN4TzF72PVoRI7P7A49MCANIOwPCr4UHwUvL
vbVMEIWaMGOhUzpr5L7kD39UBkCkUMaXYHKTtswyKW+W0SZo5tz2ODmZ1RoBops=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org