Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130362e302f32332d3234203d3e2037303239.roa
File:                     3231362e3234372e3130362e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier:          AtnyzDAWzWoNEpQXbbAwt2PDovXkAwqdiSXnCW/SdSo=
Subject key identifier:   BA:A2:A3:CA:8F:7B:DC:BD:CC:63:9F:75:EB:D9:3F:FC:3B:27:59:A2
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       61351E4ACCC41069883FE73FC71B25CB43CEFA6E
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130362e302f32332d3234203d3e2037303239.roa
Signing time:             Thu 09 Jun 2022 12:05:26 +0000
ROA not before:           Thu 09 Jun 2022 12:00:26 +0000
ROA not after:            Thu 08 Jun 2023 12:05:26 +0000
asID:                     7029
IP address blocks:        216.247.106.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:35:1e:4a:cc:c4:10:69:88:3f:e7:3f:c7:1b:25:cb:43:ce:fa:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun  9 12:00:26 2022 GMT
            Not After : Jun  8 12:05:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:d5:0c:b0:64:0b:b8:e1:bd:97:06:47:8f:
                    af:6d:30:ad:b8:79:5c:be:56:f1:be:79:be:a7:20:
                    41:6a:fb:2d:1e:c9:9b:2d:6b:e2:14:a7:d6:e6:8e:
                    d2:1b:96:df:10:ec:4f:fb:28:55:f9:b9:22:59:01:
                    c7:7a:b6:61:51:e3:0f:79:a9:6a:5d:62:5e:53:8c:
                    b0:33:88:a9:bf:3b:5f:43:56:e9:8d:9a:20:a4:e7:
                    99:d9:4e:72:a3:51:0b:2c:b4:77:95:70:20:44:d1:
                    c7:45:74:70:1c:b9:7a:b5:35:f7:7f:3b:56:d0:e3:
                    6f:2d:a5:54:2c:a9:16:43:97:57:98:6c:31:ae:a2:
                    8f:e6:9f:48:76:d6:1a:61:f3:60:18:19:01:2b:51:
                    bb:c0:bb:3c:73:02:60:2b:6b:2f:a1:2d:25:7a:5e:
                    f2:b8:43:6d:cb:2e:8c:fc:a8:d4:a4:26:70:51:5d:
                    8b:8d:30:44:5e:8c:31:28:00:bf:3c:8f:8b:8b:78:
                    2d:a3:1c:a0:69:a0:be:e6:9b:d1:1c:15:b8:e3:c1:
                    88:3c:26:23:72:48:07:11:99:b8:ff:34:a9:15:aa:
                    be:72:a4:91:a4:2d:9e:15:c5:80:fe:5b:0f:77:8f:
                    f4:b4:53:c6:7f:93:e6:0e:8c:4f:e1:a0:a8:a0:1c:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A2:A3:CA:8F:7B:DC:BD:CC:63:9F:75:EB:D9:3F:FC:3B:27:59:A2
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130362e302f32332d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:13:b2:da:d5:b5:3b:56:59:16:82:c9:73:eb:39:b1:78:
         77:03:90:55:50:47:3f:9f:85:d7:8b:14:7a:00:68:67:0e:79:
         92:fc:fd:df:b4:c3:2a:a2:c3:2b:80:26:35:f1:60:5f:2c:e2:
         cb:77:74:04:71:be:0e:32:c3:40:32:c8:99:ae:ae:ae:c0:14:
         f8:13:ec:d5:e1:ea:6e:e5:91:81:ad:02:50:93:f6:14:b2:7d:
         d7:83:c1:d8:98:78:b7:77:77:7d:86:90:50:ee:4c:4c:7a:bf:
         be:7f:2b:59:de:7d:65:88:41:46:7f:65:fb:a9:47:86:85:53:
         8e:d8:c6:1a:af:72:8b:65:51:ef:5e:fd:31:06:9c:94:b0:72:
         4f:62:0f:72:f2:aa:5d:57:6c:81:0b:85:ae:06:73:87:53:b8:
         ad:04:ca:b9:a0:b5:ac:b9:2e:ed:99:ed:35:21:43:22:71:08:
         0f:f2:c9:a1:78:e3:2c:87:36:74:48:5e:d7:50:c2:aa:0e:ed:
         e0:a9:19:0e:a6:a8:41:c3:c1:03:a2:e9:de:77:9f:b0:be:ca:
         1d:09:c5:c3:68:ef:aa:af:ca:9b:3e:20:42:34:11:b4:72:12:
         9b:b3:fe:d6:68:92:cb:8a:f4:84:71:c5:87:fa:58:60:76:86:
         9d:28:30:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org