Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130352e302f32342d3234203d3e203436353733.roa
File:                     3231362e3234372e3130352e302f32342d3234203d3e203436353733.roa (raw, json)
Hash identifier:          3iIZBF9AGGQ4skD+Pz/4TOrZn1TSglDi5MKQPD3CUvY=
Subject key identifier:   71:92:A7:EC:B9:66:50:7B:8C:08:C2:87:2C:DE:F0:61:C0:49:C6:61
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       6251806A8E4F307DFEF2F6DFDB44789BDD2872AB
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130352e302f32342d3234203d3e203436353733.roa
Signing time:             Thu 09 Jun 2022 21:09:51 +0000
ROA not before:           Thu 09 Jun 2022 21:04:51 +0000
ROA not after:            Thu 08 Jun 2023 21:09:51 +0000
asID:                     46573
IP address blocks:        216.247.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:51:80:6a:8e:4f:30:7d:fe:f2:f6:df:db:44:78:9b:dd:28:72:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun  9 21:04:51 2022 GMT
            Not After : Jun  8 21:09:51 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:6a:e7:e1:11:f5:47:63:6b:63:4b:e1:f4:
                    2c:bd:d7:c6:5b:b8:a0:44:b5:69:18:f2:85:21:be:
                    13:2f:60:dc:b4:04:35:3b:8d:59:ee:ca:d2:81:dc:
                    39:f5:8d:cd:86:ba:7c:79:c7:79:e7:12:d9:5b:47:
                    77:b2:e3:1a:91:7c:31:a0:12:c9:d5:7e:ed:9c:2f:
                    89:9f:f5:db:57:15:39:7e:a6:3f:f4:ef:95:a2:bb:
                    60:b9:e5:c1:44:a6:cb:3e:c7:65:f2:6e:46:d3:0c:
                    7d:c5:5d:aa:c4:82:d5:86:16:c3:ea:16:33:50:e5:
                    4f:28:5e:70:da:de:d8:0e:e1:c5:a2:c8:6d:78:4d:
                    53:7b:d6:08:2d:e8:d4:cc:82:16:de:f2:1b:ed:f5:
                    45:26:af:1d:df:04:52:db:f8:bc:48:c7:9b:cf:c3:
                    01:d0:7d:05:0d:d3:b6:fc:34:1f:9c:ee:aa:74:0c:
                    74:69:99:64:65:81:9a:1f:06:ab:e2:00:1c:9c:dd:
                    a2:88:c7:3a:e7:3c:90:c1:69:e3:d8:7f:3d:39:e0:
                    99:88:a3:a1:ea:f5:82:34:cd:52:04:74:c0:4c:4d:
                    50:ef:29:0e:4f:ab:9d:e6:26:27:0c:b3:81:26:56:
                    8b:6f:cf:74:84:b7:22:0e:d1:c4:2e:a7:0e:b7:91:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:A7:EC:B9:66:50:7B:8C:08:C2:87:2C:DE:F0:61:C0:49:C6:61
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130352e302f32342d3234203d3e203436353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:7a:83:2a:dd:64:51:52:bb:30:a9:c1:25:42:fa:32:6c:3d:
         d9:e1:db:29:85:75:2b:c8:8c:de:16:cc:6b:41:0a:fe:33:b2:
         21:1a:fa:0d:9d:69:4d:37:28:22:24:4f:11:82:30:16:19:9a:
         a7:11:af:29:1e:41:eb:15:7b:39:83:98:0e:ca:52:f0:96:e0:
         8f:9a:a0:56:31:1e:23:f9:24:43:4c:79:6a:a3:a8:85:bc:10:
         f3:24:f7:ff:6a:4f:e4:49:d3:40:06:fa:90:32:17:f0:64:40:
         1e:4b:1c:1b:4b:05:d1:9d:b8:18:90:9c:26:1f:07:f0:bd:12:
         34:62:23:0b:61:44:21:0a:d3:18:74:be:56:11:bd:6a:02:8b:
         04:4d:ec:21:34:07:31:e2:95:81:c8:be:e3:5f:43:0a:9f:d2:
         38:a4:43:93:df:85:ce:da:41:1b:d2:b8:13:d8:35:f5:7d:e7:
         ac:24:46:e7:66:2a:76:2e:24:e1:23:a0:ca:df:12:c9:fb:0e:
         a2:77:04:e8:cf:92:73:82:05:9e:48:1a:ce:af:9d:c8:36:b3:
         7b:e1:08:85:96:be:e2:a5:bb:14:37:e3:c2:de:ec:33:17:eb:
         67:63:98:82:65:ff:5f:98:8e:90:da:17:4a:c0:c3:eb:b0:8f:
         e3:f1:8a:39
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUYlGAao5PMH3+8vbf20R4m90ocqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRCMjUwMUMxNTExMzRBMjAxRkQ4NzE0NURBNTZBMjA3
QkZEMTlGRDAeFw0yMjA2MDkyMTA0NTFaFw0yMzA2MDgyMTA5NTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjMwRjZBRTdFMTExRjU0NzYz
NkI2MzRCRTFGNDJDQkREN0M2NUJCOEEwNDRCNTY5MThGMjg1MjFCRTEzMkY2MERD
QjQwNDM1M0I4RDU5RUVDQUQyODFEQzM5RjU4RENEODZCQTdDNzlDNzc5RTcxMkQ5
NUI0Nzc3QjJFMzFBOTE3QzMxQTAxMkM5RDU3RUVEOUMyRjg5OUZGNURCNTcxNTM5
N0VBNjNGRjRFRjk1QTJCQjYwQjlFNUMxNDRBNkNCM0VDNzY1RjI2RTQ2RDMwQzdE
QzU1REFBQzQ4MkQ1ODYxNkMzRUExNjMzNTBFNTRGMjg1RTcwREFERUQ4MEVFMUM1
QTJDODZENzg0RDUzN0JENjA4MkRFOEQ0Q0M4MjE2REVGMjFCRURGNTQ1MjZBRjFE
REYwNDUyREJGOEJDNDhDNzlCQ0ZDMzAxRDA3RDA1MEREM0I2RkMzNDFGOUNFRUFB
NzQwQzc0Njk5OTY0NjU4MTlBMUYwNkFCRTIwMDFDOUNEREEyODhDNzNBRTczQzkw
QzE2OUUzRDg3RjNEMzlFMDk5ODhBM0ExRUFGNTgyMzRDRDUyMDQ3NEMwNEM0RDUw
RUYyOTBFNEZBQjlERTYyNjI3MENCMzgxMjY1NjhCNkZDRjc0ODRCNzIyMEVEMUM0
MkVBNzBFQjc5MTJDMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsw9q5+ER9Udja2NL4fQsvdfGW7igRLVpGPKFIb4TL2DctAQ1O41Z
7srSgdw59Y3Nhrp8ecd55xLZW0d3suMakXwxoBLJ1X7tnC+Jn/XbVxU5fqY/9O+V
ortgueXBRKbLPsdl8m5G0wx9xV2qxILVhhbD6hYzUOVPKF5w2t7YDuHFoshteE1T
e9YILejUzIIW3vIb7fVFJq8d3wRS2/i8SMebz8MB0H0FDdO2/DQfnO6qdAx0aZlk
ZYGaHwar4gAcnN2iiMc65zyQwWnj2H89OeCZiKOh6vWCNM1SBHTATE1Q7ykOT6ud
5iYnDLOBJlaLb890hLciDtHELqcOt5EsGwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FHGSp+y5ZlB7jAjChyze8GHAScZhMB8GA1UdIwQYMBaAFJSyUBwVETSiAf2HFF2l
aiB7/Rn9MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RhZWUxOGE0LTg0NzQtNGMwMi05
YWMzLTUxODgzNjdmZGExNi02LzEvOTRCMjUwMUMxNTExMzRBMjAxRkQ4NzE0NURB
NTZBMjA3QkZEMTlGRC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGFlZTE4YTQtODQ3
NC00YzAyLTlhYzMtNTE4ODM2N2ZkYTE2LTkvMC85NEIyNTAxQzE1MTEzNEEyMDFG
RDg3MTQ1REE1NkEyMDdCRkQxOUZELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMG
CCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGFl
ZTE4YTQtODQ3NC00YzAyLTlhYzMtNTE4ODM2N2ZkYTE2LTYvMS8zMjMxMzYyZTMy
MzQzNzJlMzEzMDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjM1MzczMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANj3aTANBgkqhkiG9w0BAQsFAAOCAQEAEnqDKt1kUVK7MKnBJUL6
Mmw92eHbKYV1K8iM3hbMa0EK/jOyIRr6DZ1pTTcoIiRPEYIwFhmapxGvKR5B6xV7
OYOYDspS8Jbgj5qgVjEeI/kkQ0x5aqOohbwQ8yT3/2pP5EnTQAb6kDIX8GRAHksc
G0sF0Z24GJCcJh8H8L0SNGIjC2FEIQrTGHS+VhG9agKLBE3sITQHMeKVgci+419D
Cp/SOKRDk9+FztpBG9K4E9g19X3nrCRG52Yqdi4k4SOgyt8SyfsOoncE6M+Sc4IF
nkgazq+dyDaze+EIhZa+4qW7FDfjwt7sMxfrZ2OYgmX/X5iOkNoXSsDD67CP4/GK
OQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org