Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa
File:                     3138312e34312e3230332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          1UfV+yUAc8eHbcjT5H7SOEik1CzB83sIX5fOiHKkK24=
Subject key identifier:   0D:DE:26:05:94:F5:68:14:24:E4:21:5E:B3:E8:ED:4D:95:5E:AF:00
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       32279E14E8F0CAE42927AFA7C090F306ADE3A2D2
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:23 +0000
ROA not before:           Thu 19 May 2022 12:30:23 +0000
ROA not after:            Thu 18 May 2023 12:35:23 +0000
asID:                     61317
IP address blocks:        181.41.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:27:9e:14:e8:f0:ca:e4:29:27:af:a7:c0:90:f3:06:ad:e3:a2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:23 2022 GMT
            Not After : May 18 12:35:23 2023 GMT
        Subject: CN=3082010A0282010100957469A08CF15D2C79D0DD70005B75EDEDB7659C15736B951DDF3561268404FC2C08EEDE0BF5160352592E04A63F34FE4B50FF98FC59005ACCD2A110418AA4A29B2A7502031BEB432200A6306E294895D2519A7BDB193A8C34F2A5497E2A4EFA2FD7718CFE365FF54B2E7D096A3378260169E1A2F5FE5923770779F31C532DC61AC69A853182B2EAF9F867991890F3DA57DEC4316A7234EF569460AD0FE8AB3015B6D6F31250041FD83F9A52411E33BBEFC0D7FB6B9F096B62176C99FCFC1DBA00618F7C68DFBC80F07B434C7B0A09023E9BFD09506182836381B386FFC2B7B0F7BE6A7380C3A8A315762C73B52C36433B67503500BC6E5D1A44924804DF81890203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:69:a0:8c:f1:5d:2c:79:d0:dd:70:00:5b:
                    75:ed:ed:b7:65:9c:15:73:6b:95:1d:df:35:61:26:
                    84:04:fc:2c:08:ee:de:0b:f5:16:03:52:59:2e:04:
                    a6:3f:34:fe:4b:50:ff:98:fc:59:00:5a:cc:d2:a1:
                    10:41:8a:a4:a2:9b:2a:75:02:03:1b:eb:43:22:00:
                    a6:30:6e:29:48:95:d2:51:9a:7b:db:19:3a:8c:34:
                    f2:a5:49:7e:2a:4e:fa:2f:d7:71:8c:fe:36:5f:f5:
                    4b:2e:7d:09:6a:33:78:26:01:69:e1:a2:f5:fe:59:
                    23:77:07:79:f3:1c:53:2d:c6:1a:c6:9a:85:31:82:
                    b2:ea:f9:f8:67:99:18:90:f3:da:57:de:c4:31:6a:
                    72:34:ef:56:94:60:ad:0f:e8:ab:30:15:b6:d6:f3:
                    12:50:04:1f:d8:3f:9a:52:41:1e:33:bb:ef:c0:d7:
                    fb:6b:9f:09:6b:62:17:6c:99:fc:fc:1d:ba:00:61:
                    8f:7c:68:df:bc:80:f0:7b:43:4c:7b:0a:09:02:3e:
                    9b:fd:09:50:61:82:83:63:81:b3:86:ff:c2:b7:b0:
                    f7:be:6a:73:80:c3:a8:a3:15:76:2c:73:b5:2c:36:
                    43:3b:67:50:35:00:bc:6e:5d:1a:44:92:48:04:df:
                    81:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DE:26:05:94:F5:68:14:24:E4:21:5E:B3:E8:ED:4D:95:5E:AF:00
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138312e34312e3230332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:3c:af:d0:a8:69:81:db:4c:79:63:5d:f9:91:78:ad:84:70:
         cb:ed:99:1d:f2:fa:c7:93:53:64:31:4f:1c:78:e4:a9:ed:e5:
         b3:4b:b6:9f:80:86:4c:92:94:9e:06:09:2d:f2:96:d5:04:44:
         9b:13:b2:c7:e1:3c:83:9e:47:49:3a:d8:00:d8:45:93:1c:0e:
         9d:6c:50:72:6d:53:9d:37:5b:cf:fa:e1:50:e0:4d:6f:fc:64:
         8e:7e:11:a5:91:e5:8b:76:f8:3c:6d:86:24:03:27:67:91:77:
         3b:13:2f:27:74:ef:8f:15:93:ba:56:ee:c0:7b:f2:04:99:ae:
         7f:3f:53:41:f2:5b:f3:2e:22:e6:d8:0b:19:c0:62:9a:3e:7b:
         a4:10:18:46:36:df:c0:6d:cf:9f:6b:ec:3d:e7:8e:ae:df:fd:
         6a:ec:90:0f:1b:1c:86:b1:bf:cc:90:41:42:7a:44:a0:58:6f:
         76:66:79:20:a5:25:24:60:e8:6a:63:7f:3d:a6:29:ec:bf:02:
         b8:88:5b:5a:48:d7:6a:99:88:01:cd:70:31:b9:a5:e0:73:5a:
         61:a4:11:02:9d:f9:77:85:2a:e5:42:c8:3d:d7:d2:7d:b8:87:
         77:e0:6a:81:7a:9e:98:58:b5:03:b7:34:2e:7c:5d:9a:95:82:
         d5:ba:7a:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org