Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3132322e3131322e302f32302d3234203d3e203232373733.roa
File:                     3231362e3132322e3131322e302f32302d3234203d3e203232373733.roa (raw, json)
Hash identifier:          M0XyLDv22Y0CL5DKBah5RsVSVxAPplxC+z2cR1O5tqI=
Subject key identifier:   20:14:7C:DA:CF:71:4C:65:1D:12:F3:E5:6B:D2:83:85:94:E4:BC:A2
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       24CD0D99DD2C3FF042EC8B5F438BDF8732496CFB
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3132322e3131322e302f32302d3234203d3e203232373733.roa
Signing time:             Wed 20 Apr 2022 05:39:10 +0000
ROA not before:           Wed 20 Apr 2022 05:34:10 +0000
ROA not after:            Wed 19 Apr 2023 05:39:10 +0000
asID:                     22773
IP address blocks:        216.122.112.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cd:0d:99:dd:2c:3f:f0:42:ec:8b:5f:43:8b:df:87:32:49:6c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Apr 20 05:34:10 2022 GMT
            Not After : Apr 19 05:39:10 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:17:c5:e4:55:17:9a:f4:58:2b:8a:38:de:
                    1c:14:23:96:4c:be:bc:6c:c3:74:4f:bb:57:55:51:
                    a4:50:64:32:a3:10:67:6f:75:22:a8:44:07:74:fc:
                    eb:d1:93:db:48:b1:f3:a7:71:bb:c5:3b:0a:cb:3e:
                    b0:43:92:c7:89:5d:6f:47:49:2e:ba:9a:95:c7:a6:
                    13:b1:14:df:88:ea:84:9f:23:c5:4b:e4:27:4e:55:
                    73:56:9e:79:19:37:14:10:da:19:67:ca:04:c1:3d:
                    a6:59:9a:e3:86:0c:e6:45:ed:23:47:8a:32:35:a1:
                    ea:24:2b:7d:bc:22:43:52:fa:4d:cc:dd:32:aa:86:
                    64:09:11:00:d3:68:b4:82:89:ce:ad:15:af:5d:b0:
                    a8:cb:13:35:c7:ba:eb:77:85:96:db:87:16:7d:2b:
                    52:d3:6e:0e:08:8a:a5:03:45:27:f5:8f:68:c6:6a:
                    07:41:7a:1d:37:c7:b3:58:e2:1e:7d:d0:10:f0:7d:
                    28:6d:c6:26:43:20:4d:c0:06:61:25:40:d0:34:b5:
                    e1:56:cd:e2:08:08:cc:ec:5b:ae:c0:73:00:fd:60:
                    d0:f6:38:88:38:49:1b:6d:61:af:a9:70:82:29:39:
                    83:d3:44:22:1a:00:ef:34:72:e4:0d:03:8d:81:e4:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:14:7C:DA:CF:71:4C:65:1D:12:F3:E5:6B:D2:83:85:94:E4:BC:A2
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3132322e3131322e302f32302d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:fa:aa:5d:88:94:91:d6:59:0b:ac:83:08:ec:ac:f6:87:
         0f:cc:98:0d:26:29:77:54:96:7f:06:ef:e2:09:05:4d:9f:bb:
         9a:15:36:db:29:b8:e3:88:9b:d0:e3:bc:2e:0f:38:3b:98:80:
         58:80:87:8a:24:f1:6f:a5:30:ff:d5:73:d1:82:82:e3:15:bb:
         c1:b0:c9:e2:d3:1a:f8:c4:7d:6b:53:f0:cc:5a:30:95:08:f8:
         27:d6:b8:91:86:0d:8a:23:c7:ac:30:40:58:ba:73:4c:09:3b:
         bb:43:ce:2d:6d:1e:7b:04:27:15:2a:61:55:2d:91:cc:99:23:
         3f:dd:a7:49:3d:04:0a:27:0b:a4:48:60:d2:77:17:da:f9:86:
         da:4c:96:61:5a:63:f6:92:c5:3c:4d:9b:0d:81:cf:9e:51:7c:
         ab:a2:db:98:42:ad:e7:2e:89:56:8b:0b:f8:ed:1e:9d:f2:a6:
         7a:2c:23:67:52:40:3a:3c:49:0b:8e:dc:7d:68:6c:72:3b:ad:
         59:f2:ee:a5:f7:f8:63:0d:08:4e:6a:dd:1e:0f:0d:df:46:3f:
         a7:aa:8b:58:da:38:72:25:0d:fa:06:9a:01:c8:4e:0b:ed:2a:
         de:25:0a:4f:d9:09:52:3c:12:60:8c:a9:f7:09:e2:f4:3c:eb:
         4b:15:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org