Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130392e302f32342d3234203d3e20323037333236.roa
File:                     3231362e3234372e3130392e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          gltJtH0RXgx/CdbG9EGpBM9FDieWp3SAvDdKTIzSLQI=
Subject key identifier:   7C:CE:DB:0E:39:81:31:0B:BF:D3:FB:E0:75:2F:5D:9D:DA:58:A4:29
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       374067B3DEBC1E7BB7C1290A135098119DF9D3E2
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130392e302f32342d3234203d3e20323037333236.roa
Signing time:             Thu 09 Jun 2022 07:00:10 +0000
ROA not before:           Thu 09 Jun 2022 06:55:10 +0000
ROA not after:            Thu 08 Jun 2023 07:00:10 +0000
asID:                     207326
IP address blocks:        216.247.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:40:67:b3:de:bc:1e:7b:b7:c1:29:0a:13:50:98:11:9d:f9:d3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun  9 06:55:10 2022 GMT
            Not After : Jun  8 07:00:10 2023 GMT
        Subject: CN=3082010A0282010100BB19B1B7BEB998139D56A0B3588A34D8AE13D3A5429BBB78BAF908A198C9A46ABBE7D837C415A570974B879754341009662CDF67D426691E43CA89B3A178AE631DB22D4A219C4B0998A50DB71A06F9E415D707E0012A851B581AF25653BCDC755F71E92C6F168E2105EF328CA1AE63E5A336FA16D4C461F33A0FF189B5789E7886E6B2876AC1FB600A9B1CFAD45EDF3EFCFEFA785BF2502E665192400031D734F86E33C97ACF221E8D1944AC1C049E0213167790253ABA8364FE55BF521C4D409CCDDDBA492450FEA884A1EE81A2789F9DAE26E4A69C256BBD7FA2F6C727832BE46AF32B58B7C92AE1E9FAD77E4B672FCB1F3243E01346A635A4CABCF609283D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:b1:b7:be:b9:98:13:9d:56:a0:b3:58:8a:
                    34:d8:ae:13:d3:a5:42:9b:bb:78:ba:f9:08:a1:98:
                    c9:a4:6a:bb:e7:d8:37:c4:15:a5:70:97:4b:87:97:
                    54:34:10:09:66:2c:df:67:d4:26:69:1e:43:ca:89:
                    b3:a1:78:ae:63:1d:b2:2d:4a:21:9c:4b:09:98:a5:
                    0d:b7:1a:06:f9:e4:15:d7:07:e0:01:2a:85:1b:58:
                    1a:f2:56:53:bc:dc:75:5f:71:e9:2c:6f:16:8e:21:
                    05:ef:32:8c:a1:ae:63:e5:a3:36:fa:16:d4:c4:61:
                    f3:3a:0f:f1:89:b5:78:9e:78:86:e6:b2:87:6a:c1:
                    fb:60:0a:9b:1c:fa:d4:5e:df:3e:fc:fe:fa:78:5b:
                    f2:50:2e:66:51:92:40:00:31:d7:34:f8:6e:33:c9:
                    7a:cf:22:1e:8d:19:44:ac:1c:04:9e:02:13:16:77:
                    90:25:3a:ba:83:64:fe:55:bf:52:1c:4d:40:9c:cd:
                    dd:ba:49:24:50:fe:a8:84:a1:ee:81:a2:78:9f:9d:
                    ae:26:e4:a6:9c:25:6b:bd:7f:a2:f6:c7:27:83:2b:
                    e4:6a:f3:2b:58:b7:c9:2a:e1:e9:fa:d7:7e:4b:67:
                    2f:cb:1f:32:43:e0:13:46:a6:35:a4:ca:bc:f6:09:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CE:DB:0E:39:81:31:0B:BF:D3:FB:E0:75:2F:5D:9D:DA:58:A4:29
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e3130392e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:99:20:67:34:50:ea:13:f8:26:00:a0:da:6f:a0:c1:52:39:
         39:d6:b1:3c:63:75:28:a4:d5:37:61:51:79:df:14:41:16:31:
         5b:1e:b3:ab:21:7f:7d:f1:50:56:93:b7:5b:06:da:5e:e5:f6:
         08:96:92:ba:56:aa:7a:07:da:c7:d0:98:9b:ac:60:5f:b5:b6:
         c4:44:d7:ba:08:9a:66:8c:ee:4c:1b:6d:de:f2:0c:41:be:55:
         fb:43:ba:f4:d3:ff:31:5f:2a:b3:b4:53:50:2e:c8:0e:e2:9b:
         66:77:55:e1:8a:4a:17:ca:68:94:5b:c4:a1:c7:c0:f4:7a:14:
         f1:0d:18:b1:9f:8d:47:21:2f:86:30:ef:30:59:f1:46:53:f6:
         27:3c:3d:17:20:0d:6f:06:8b:f8:27:c7:74:38:53:40:7f:bc:
         27:cd:94:e7:b4:d7:da:ff:8a:d5:47:ff:fa:1d:7b:e1:78:70:
         9e:82:bd:38:6f:72:8a:13:87:48:f7:2e:66:f0:da:56:dc:db:
         ee:79:af:13:c4:1e:b6:5b:03:a4:03:11:b7:ed:81:11:56:4f:
         bd:32:1d:74:76:89:4b:76:00:38:d7:aa:29:d1:f4:6d:dc:23:
         b0:2a:90:b2:1b:6d:84:7f:ee:a1:81:18:33:cc:c1:f3:2e:29:
         1f:4c:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org