Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa
File:                     3138352e3137302e35382e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          IAYwZbyrqTi/9y8/2xy0v+M5WHvjD/Vr6RIXvV/gTDU=
Subject key identifier:   1D:ED:9E:2B:29:40:7B:F4:F2:6C:6D:80:79:DA:B4:77:8C:2D:4B:1E
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       34A3461B37250DE63F316519293F4FE3AFE6CB62
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     19437
IP address blocks:        185.170.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a3:46:1b:37:25:0d:e6:3f:31:65:19:29:3f:4f:e3:af:e6:cb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject: CN=3082010A0282010100E17F2E61376BD78AC594E2C7AF6B724A057DCC875B0E97F58F08FAAC414B80E1F4F5D30D2D4485DD2B9FF41E84CC46B93E3D174291CB5FCB4398B9F0DD604762D03AA37A7606E9FB25CE9BAD50339B168723CC525012F6BAECFD2C3A3235C0575E23C85C89F91F425414007167F09D9EF2A5D798298495197684C49636326E7400585D625AB57219738A39088AEAA3AE0943411080EF794C7B5B16B05EEB4A3758529CF20AD082ACCA3512648B006AAC675F9D482765FDABF1073B32D80990A702FC3D2413A866B85D9A364655C3F90166F0C9F64CEEB6468A1E2387A12F034CD199CB39A4F0D92F77D5EAF471076B6A6EBE545F673FDBF0A7219A664BDDD6C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7f:2e:61:37:6b:d7:8a:c5:94:e2:c7:af:6b:
                    72:4a:05:7d:cc:87:5b:0e:97:f5:8f:08:fa:ac:41:
                    4b:80:e1:f4:f5:d3:0d:2d:44:85:dd:2b:9f:f4:1e:
                    84:cc:46:b9:3e:3d:17:42:91:cb:5f:cb:43:98:b9:
                    f0:dd:60:47:62:d0:3a:a3:7a:76:06:e9:fb:25:ce:
                    9b:ad:50:33:9b:16:87:23:cc:52:50:12:f6:ba:ec:
                    fd:2c:3a:32:35:c0:57:5e:23:c8:5c:89:f9:1f:42:
                    54:14:00:71:67:f0:9d:9e:f2:a5:d7:98:29:84:95:
                    19:76:84:c4:96:36:32:6e:74:00:58:5d:62:5a:b5:
                    72:19:73:8a:39:08:8a:ea:a3:ae:09:43:41:10:80:
                    ef:79:4c:7b:5b:16:b0:5e:eb:4a:37:58:52:9c:f2:
                    0a:d0:82:ac:ca:35:12:64:8b:00:6a:ac:67:5f:9d:
                    48:27:65:fd:ab:f1:07:3b:32:d8:09:90:a7:02:fc:
                    3d:24:13:a8:66:b8:5d:9a:36:46:55:c3:f9:01:66:
                    f0:c9:f6:4c:ee:b6:46:8a:1e:23:87:a1:2f:03:4c:
                    d1:99:cb:39:a4:f0:d9:2f:77:d5:ea:f4:71:07:6b:
                    6a:6e:be:54:5f:67:3f:db:f0:a7:21:9a:66:4b:dd:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:ED:9E:2B:29:40:7B:F4:F2:6C:6D:80:79:DA:B4:77:8C:2D:4B:1E
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35382e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:a0:97:50:2a:61:5a:b6:56:84:b8:1d:94:0d:6b:af:cf:
         3f:bb:ae:80:3f:56:cb:56:14:eb:93:27:de:f3:93:40:02:31:
         6c:29:64:5d:18:54:93:e8:61:b1:74:b3:18:54:86:0c:6c:e6:
         21:3a:70:e2:29:14:48:52:6b:9b:75:9f:d1:25:85:0d:b3:dc:
         98:89:f9:f2:7d:3e:3e:92:fa:1d:60:e5:3f:5c:1a:f7:a3:fd:
         09:c8:13:a1:a0:02:6a:79:b2:97:25:22:77:9b:c4:fd:c4:bf:
         dd:df:91:b3:95:45:b3:f6:b5:5f:a5:ea:f7:74:9e:32:9f:6d:
         e9:1b:9f:3f:53:4b:cf:07:97:b9:54:15:7b:14:e1:6c:28:45:
         65:78:37:5c:92:4d:6a:89:c7:8b:93:45:8e:60:86:72:ce:0b:
         a2:d7:56:c8:3b:d7:20:12:c8:d3:8a:e9:03:58:d2:3d:7d:ca:
         83:b0:a6:7a:2d:81:a9:fe:cb:32:c8:42:53:20:7a:53:07:a9:
         01:40:cc:42:89:ba:53:87:4e:f5:4d:ff:38:b6:a7:86:78:73:
         9f:fc:96:22:70:31:a5:45:fa:56:3e:b1:36:31:c5:c0:01:b3:
         7d:8a:14:0f:8b:33:42:69:16:1a:e8:6e:f3:69:84:eb:68:93:
         84:01:24:68
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUNKNGGzclDeY/MWUZKT9P46/my2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1MjIwQjEy
M0ZCMjBCNjAeFw0yMjA1MTkxMjMwMjRaFw0yMzA1MTgxMjM1MjRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTE3RjJFNjEzNzZCRDc4QUM1
OTRFMkM3QUY2QjcyNEEwNTdEQ0M4NzVCMEU5N0Y1OEYwOEZBQUM0MTRCODBFMUY0
RjVEMzBEMkQ0NDg1REQyQjlGRjQxRTg0Q0M0NkI5M0UzRDE3NDI5MUNCNUZDQjQz
OThCOUYwREQ2MDQ3NjJEMDNBQTM3QTc2MDZFOUZCMjVDRTlCQUQ1MDMzOUIxNjg3
MjNDQzUyNTAxMkY2QkFFQ0ZEMkMzQTMyMzVDMDU3NUUyM0M4NUM4OUY5MUY0MjU0
MTQwMDcxNjdGMDlEOUVGMkE1RDc5ODI5ODQ5NTE5NzY4NEM0OTYzNjMyNkU3NDAw
NTg1RDYyNUFCNTcyMTk3MzhBMzkwODhBRUFBM0FFMDk0MzQxMTA4MEVGNzk0QzdC
NUIxNkIwNUVFQjRBMzc1ODUyOUNGMjBBRDA4MkFDQ0EzNTEyNjQ4QjAwNkFBQzY3
NUY5RDQ4Mjc2NUZEQUJGMTA3M0IzMkQ4MDk5MEE3MDJGQzNEMjQxM0E4NjZCODVE
OUEzNjQ2NTVDM0Y5MDE2NkYwQzlGNjRDRUVCNjQ2OEExRTIzODdBMTJGMDM0Q0Qx
OTlDQjM5QTRGMEQ5MkY3N0Q1RUFGNDcxMDc2QjZBNkVCRTU0NUY2NzNGREJGMEE3
MjE5QTY2NEJEREQ2QzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4X8uYTdr14rFlOLHr2tySgV9zIdbDpf1jwj6rEFLgOH09dMNLUSF
3Suf9B6EzEa5Pj0XQpHLX8tDmLnw3WBHYtA6o3p2Bun7Jc6brVAzmxaHI8xSUBL2
uuz9LDoyNcBXXiPIXIn5H0JUFABxZ/CdnvKl15gphJUZdoTEljYybnQAWF1iWrVy
GXOKOQiK6qOuCUNBEIDveUx7WxawXutKN1hSnPIK0IKsyjUSZIsAaqxnX51IJ2X9
q/EHOzLYCZCnAvw9JBOoZrhdmjZGVcP5AWbwyfZM7rZGih4jh6EvA0zRmcs5pPDZ
L3fV6vRxB2tqbr5UX2c/2/CnIZpmS93WyQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FB3tnispQHv08mxtgHnatHeMLUseMB8GA1UdIwQYMBaAFBqowrcNxu989rwMR3VS
ILEj+yC2MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzllOGQxZjI2LWY5ZGMtNDM5Zi05
MTMzLWFkNTQ2NWRjMzVkNS0yLzMvMUFBOEMyQjcwREM2RUY3Q0Y2QkMwQzQ3NzU1
MjIwQjEyM0ZCMjBCNi5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4ZDFmMjYtZjlk
Yy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTQvMy8xQUE4QzJCNzBEQzZFRjdDRjZC
QzBDNDc3NTUyMjBCMTIzRkIyMEI2LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vOWU4
ZDFmMjYtZjlkYy00MzlmLTkxMzMtYWQ1NDY1ZGMzNWQ1LTIvMy8zMTM4MzUyZTMx
MzczMDJlMzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNDMzMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAC5qjowDQYJKoZIhvcNAQELBQADggEBADtxoJdQKmFatlaEuB2UDWuv
zz+7roA/VstWFOuTJ97zk0ACMWwpZF0YVJPoYbF0sxhUhgxs5iE6cOIpFEhSa5t1
n9ElhQ2z3JiJ+fJ9Pj6S+h1g5T9cGvej/QnIE6GgAmp5spclInebxP3Ev93fkbOV
RbP2tV+l6vd0njKfbekbnz9TS88Hl7lUFXsU4WwoRWV4N1ySTWqJx4uTRY5ghnLO
C6LXVsg71yASyNOK6QNY0j19yoOwpnotgan+yzLIQlMgelMHqQFAzEKJulOHTvVN
/zi2p4Z4c5/8liJwMaVF+lY+sTYxxcABs32KFA+LM0JpFhrobvNphOtok4QBJGg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org