Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa
File:                     3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          d72n8+YMdu+OJwFM5owNQTMp0IMDPH/0soBCuaT6EQA=
Subject key identifier:   E0:0A:D4:F0:F0:8D:79:5B:70:92:57:23:32:B0:A6:1F:23:67:88:C9
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       43730574F6A0E5C7340FAB76DCD1BCFFCE1468FE
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa
Signing time:             Thu 19 May 2022 12:35:25 +0000
ROA not before:           Thu 19 May 2022 12:30:25 +0000
ROA not after:            Thu 18 May 2023 12:35:25 +0000
asID:                     61317
IP address blocks:        185.135.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:73:05:74:f6:a0:e5:c7:34:0f:ab:76:dc:d1:bc:ff:ce:14:68:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:25 2022 GMT
            Not After : May 18 12:35:25 2023 GMT
        Subject: CN=3082010A0282010100E2D6187F94047D53156E34A00D7870B52AE4A27EC85DD641F9968D16BEE0774B881D241AA0AA6399DFC62CF2744BAA69B02A13F42FF470771F13BDCD4CF3B0E82F236DED86DA12F6308CB1117C34A480581F85812AA4089B2583BB8543F7F613C31CA1B55B2D99C123DF13AB8E84CD8529E670723553DD1F5E2CD193B49D4A26F25A1074525549D26CED7E9AF449C4725460445213D7639B2CCB5CE83B0431229D5BBF7AEAF5048453D820AECE35D38D9ADF01B1119EBA712C3ED4F3EAE8EEF9325DDBF0E458AE8C0FBC9DA1DC2B2C0E0EDC83E5CBDADF36192568066B7DAC80AF4EE8092A85E068568CBECA9F8C1572E9E74D2D6AC2CCF1E037BDD0BBCEB8430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:18:7f:94:04:7d:53:15:6e:34:a0:0d:78:
                    70:b5:2a:e4:a2:7e:c8:5d:d6:41:f9:96:8d:16:be:
                    e0:77:4b:88:1d:24:1a:a0:aa:63:99:df:c6:2c:f2:
                    74:4b:aa:69:b0:2a:13:f4:2f:f4:70:77:1f:13:bd:
                    cd:4c:f3:b0:e8:2f:23:6d:ed:86:da:12:f6:30:8c:
                    b1:11:7c:34:a4:80:58:1f:85:81:2a:a4:08:9b:25:
                    83:bb:85:43:f7:f6:13:c3:1c:a1:b5:5b:2d:99:c1:
                    23:df:13:ab:8e:84:cd:85:29:e6:70:72:35:53:dd:
                    1f:5e:2c:d1:93:b4:9d:4a:26:f2:5a:10:74:52:55:
                    49:d2:6c:ed:7e:9a:f4:49:c4:72:54:60:44:52:13:
                    d7:63:9b:2c:cb:5c:e8:3b:04:31:22:9d:5b:bf:7a:
                    ea:f5:04:84:53:d8:20:ae:ce:35:d3:8d:9a:df:01:
                    b1:11:9e:ba:71:2c:3e:d4:f3:ea:e8:ee:f9:32:5d:
                    db:f0:e4:58:ae:8c:0f:bc:9d:a1:dc:2b:2c:0e:0e:
                    dc:83:e5:cb:da:df:36:19:25:68:06:6b:7d:ac:80:
                    af:4e:e8:09:2a:85:e0:68:56:8c:be:ca:9f:8c:15:
                    72:e9:e7:4d:2d:6a:c2:cc:f1:e0:37:bd:d0:bb:ce:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0A:D4:F0:F0:8D:79:5B:70:92:57:23:32:B0:A6:1F:23:67:88:C9
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3133352e3135362e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:25:60:d2:f7:9b:62:30:1e:cf:c9:d6:27:dd:98:74:44:c5:
         97:b6:c8:45:3c:48:c8:8c:28:ac:dc:42:fb:c2:59:b1:7f:c5:
         5c:ef:cf:c1:12:99:96:e0:ac:dc:e4:d1:dd:6a:68:d4:56:87:
         15:2d:7f:2b:1e:aa:2b:ae:a2:95:fb:24:df:fb:2b:4a:92:c3:
         96:6c:80:fc:56:69:34:b0:9c:a6:76:02:47:01:aa:0f:89:1c:
         43:b0:ca:ef:7d:ba:2e:e1:9e:e1:a9:03:d7:d2:40:1d:72:fc:
         5b:22:b4:c2:6d:bb:de:71:5c:44:5b:e2:9a:54:e1:b3:70:76:
         0e:0a:c2:f7:72:05:10:95:5f:6f:ae:14:2b:1c:0b:65:84:1b:
         bb:c2:cd:69:ac:44:ce:f5:a9:3a:f8:93:16:63:4f:24:20:6b:
         26:e9:a7:73:fb:72:b4:fe:01:99:c2:f5:4f:a4:ee:c3:ab:e6:
         92:f5:a3:09:2c:60:fc:8a:0a:3c:5a:f0:1f:46:f7:d7:2a:0a:
         8a:d4:ff:8a:59:47:39:9e:b4:4e:59:66:41:f6:e1:d9:d0:8a:
         18:da:1e:d4:df:11:7d:03:7f:bf:c6:68:ac:f8:84:fc:2e:c9:
         9e:fa:6a:83:23:c0:84:26:20:9b:ce:dc:73:79:2e:97:14:ad:
         ec:af:b8:c4
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUQ3MFdPag5cc0D6t23NG8/84UaP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1MjIwQjEy
M0ZCMjBCNjAeFw0yMjA1MTkxMjMwMjVaFw0yMzA1MTgxMjM1MjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTJENjE4N0Y5NDA0N0Q1MzE1
NkUzNEEwMEQ3ODcwQjUyQUU0QTI3RUM4NURENjQxRjk5NjhEMTZCRUUwNzc0Qjg4
MUQyNDFBQTBBQTYzOTlERkM2MkNGMjc0NEJBQTY5QjAyQTEzRjQyRkY0NzA3NzFG
MTNCRENENENGM0IwRTgyRjIzNkRFRDg2REExMkY2MzA4Q0IxMTE3QzM0QTQ4MDU4
MUY4NTgxMkFBNDA4OUIyNTgzQkI4NTQzRjdGNjEzQzMxQ0ExQjU1QjJEOTlDMTIz
REYxM0FCOEU4NENEODUyOUU2NzA3MjM1NTNERDFGNUUyQ0QxOTNCNDlENEEyNkYy
NUExMDc0NTI1NTQ5RDI2Q0VEN0U5QUY0NDlDNDcyNTQ2MDQ0NTIxM0Q3NjM5QjJD
Q0I1Q0U4M0IwNDMxMjI5RDVCQkY3QUVBRjUwNDg0NTNEODIwQUVDRTM1RDM4RDlB
REYwMUIxMTE5RUJBNzEyQzNFRDRGM0VBRThFRUY5MzI1RERCRjBFNDU4QUU4QzBG
QkM5REExREMyQjJDMEUwRURDODNFNUNCREFERjM2MTkyNTY4MDY2QjdEQUM4MEFG
NEVFODA5MkE4NUUwNjg1NjhDQkVDQTlGOEMxNTcyRTlFNzREMkQ2QUMyQ0NGMUUw
MzdCREQwQkJDRUI4NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4tYYf5QEfVMVbjSgDXhwtSrkon7IXdZB+ZaNFr7gd0uIHSQaoKpj
md/GLPJ0S6ppsCoT9C/0cHcfE73NTPOw6C8jbe2G2hL2MIyxEXw0pIBYH4WBKqQI
myWDu4VD9/YTwxyhtVstmcEj3xOrjoTNhSnmcHI1U90fXizRk7SdSibyWhB0UlVJ
0mztfpr0ScRyVGBEUhPXY5ssy1zoOwQxIp1bv3rq9QSEU9ggrs41042a3wGxEZ66
cSw+1PPq6O75Ml3b8ORYrowPvJ2h3CssDg7cg+XL2t82GSVoBmt9rICvTugJKoXg
aFaMvsqfjBVy6edNLWrCzPHgN73Qu864QwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FOAK1PDwjXlbcJJXIzKwph8jZ4jJMB8GA1UdIwQYMBaAFBqowrcNxu989rwMR3VS
ILEj+yC2MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzMvMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1
MjIwQjEyM0ZCMjBCNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMy8xQUE4QzJCNzBEQzZFRjdDRjZC
QzBDNDc3NTUyMjBCMTIzRkIyMEI2LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMy8zMTM4MzUyZTMx
MzMzNTJlMzEzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTMzMzEzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEArmHnDANBgkqhkiG9w0BAQsFAAOCAQEAZSVg0vebYjAez8nWJ92Y
dETFl7bIRTxIyIworNxC+8JZsX/FXO/PwRKZluCs3OTR3Wpo1FaHFS1/Kx6qK66i
lfsk3/srSpLDlmyA/FZpNLCcpnYCRwGqD4kcQ7DK7326LuGe4akD19JAHXL8WyK0
wm273nFcRFvimlThs3B2DgrC93IFEJVfb64UKxwLZYQbu8LNaaxEzvWpOviTFmNP
JCBrJumnc/tytP4BmcL1T6Tuw6vmkvWjCSxg/IoKPFrwH0b31yoKitT/illHOZ60
TllmQfbh2dCKGNoe1N8RfQN/v8ZorPiE/C7JnvpqgyPAhCYgm87cc3kulxSt7K+4
xA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org