Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa
File:                     3138352e3137302e35392e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          BskUv9ltytS9i6HbmEkMC3JwbnrVA1owRAHuTxr8ZQg=
Subject key identifier:   59:B5:45:62:B0:C0:CF:22:53:03:AD:28:6B:D3:4C:0E:A6:95:69:10
Certificate issuer:       /CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
Certificate serial:       21055007B6FACBF4905929AC03913CACED1760ED
Authority key identifier: 1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6
Authority info access:    rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa
Signing time:             Thu 19 May 2022 12:35:24 +0000
ROA not before:           Thu 19 May 2022 12:30:24 +0000
ROA not after:            Thu 18 May 2023 12:35:24 +0000
asID:                     22773
IP address blocks:        185.170.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:50:07:b6:fa:cb:f4:90:59:29:ac:03:91:3c:ac:ed:17:60:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6
        Validity
            Not Before: May 19 12:30:24 2022 GMT
            Not After : May 18 12:35:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:24:d4:bf:f9:70:09:8f:20:81:63:2e:31:
                    ef:0e:48:21:e7:2e:27:18:b9:ce:f8:9c:04:af:eb:
                    5f:40:e3:a5:90:13:db:5e:f7:29:6b:65:d9:1c:7e:
                    7a:67:5e:6e:82:e2:82:fb:0c:be:81:6f:4f:55:c4:
                    29:a5:ec:41:48:51:b3:77:09:f6:fa:10:09:a2:e7:
                    ea:f8:8d:93:d6:0a:96:58:3b:15:77:bb:3d:ff:a7:
                    3f:9d:9f:ee:86:37:96:da:3c:72:e9:84:b6:b2:49:
                    ba:ea:c1:ae:c7:9e:54:56:71:f0:4b:4d:b3:be:35:
                    24:1f:b5:1f:c7:a5:bf:08:85:63:0e:d0:45:f5:ca:
                    2f:39:dc:4a:eb:d6:b5:39:9e:be:3f:ad:f4:6b:6f:
                    2e:2d:1a:03:e5:f8:0a:9b:e2:64:05:ee:88:39:a6:
                    b0:16:6e:a9:f2:dd:1a:b9:66:51:4a:92:f3:c8:4f:
                    81:99:67:39:bc:50:b4:18:4b:15:cf:a1:66:ee:4b:
                    6e:56:d8:cf:db:a5:68:c3:c2:dd:90:a0:e1:cc:30:
                    47:58:c8:d8:58:d3:13:9f:0b:ff:22:0b:f1:d3:8c:
                    b4:87:21:06:c6:2f:a6:91:5e:ac:e4:c6:03:21:63:
                    e9:b4:4a:a5:f2:1a:dd:00:6b:e0:b2:30:cf:7b:27:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B5:45:62:B0:C0:CF:22:53:03:AD:28:6B:D3:4C:0E:A6:95:69:10
            X509v3 Authority Key Identifier:
                keyid:1A:A8:C2:B7:0D:C6:EF:7C:F6:BC:0C:47:75:52:20:B1:23:FB:20:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-4/3/1AA8C2B70DC6EF7CF6BC0C47755220B123FB20B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/9e8d1f26-f9dc-439f-9133-ad5465dc35d5-2/3/3138352e3137302e35392e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e3:ca:79:ab:bd:28:81:f5:94:31:f5:fa:1e:bb:df:35:cd:
         40:24:00:a2:36:75:2e:2f:27:2c:70:0e:9d:5f:8b:3b:ea:28:
         ed:df:88:d7:7a:04:c6:20:e7:92:05:40:13:49:6c:3a:f2:60:
         7b:1f:94:27:8c:11:cb:cf:25:2f:43:f1:38:79:54:d6:2f:a6:
         7f:a6:de:b6:73:6f:93:ef:15:ed:85:65:47:77:64:7b:c9:af:
         b0:dd:00:12:95:c1:e7:94:57:26:02:8d:e2:52:96:40:7a:d9:
         0e:69:9e:fb:47:e9:01:7b:f1:a7:cb:14:29:27:bb:50:f9:29:
         95:83:80:e2:2d:fa:4b:fa:df:6e:16:97:6c:88:86:50:84:62:
         b6:a1:5d:6f:e9:f9:ed:4c:c4:df:6f:ed:e4:8d:e1:00:55:a9:
         cd:4f:51:2d:c3:29:66:3d:ac:6c:bd:7d:6b:bb:62:9d:e6:03:
         3c:6a:35:b6:95:0d:c9:ab:d7:00:07:ee:59:0c:cd:cf:9c:60:
         8a:cf:a0:2f:a3:c2:8b:d7:d0:ab:86:67:a2:ac:20:94:04:50:
         1e:de:63:25:3b:62:86:21:a4:3c:9f:d7:67:d1:86:3b:a0:f6:
         09:6d:15:a3:c7:65:b8:8f:f9:7a:18:af:b9:33:55:00:d1:6f:
         d6:72:c2:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:55 2023 by rpki-client on console-ams.rpki-client.org