Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39362e302f32302d3234203d3e2031323339.roa
File:                     3231362e3234372e39362e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          q0rKxYl+O7IeV7i1N0jZjRzfuK2pRlFHyZfCPyD0YvI=
Subject key identifier:   98:F2:39:6D:56:73:EB:90:7F:60:DA:67:45:11:0E:41:30:7C:8A:27
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       6887F0A3F5E5C429742E2F6387FDE33AF10AE68D
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39362e302f32302d3234203d3e2031323339.roa
Signing time:             Wed 22 Dec 2021 16:26:56 +0000
ROA not before:           Wed 22 Dec 2021 16:21:56 +0000
ROA not after:            Wed 21 Dec 2022 16:26:56 +0000
asID:                     1239
IP address blocks:        216.247.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:87:f0:a3:f5:e5:c4:29:74:2e:2f:63:87:fd:e3:3a:f1:0a:e6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Dec 22 16:21:56 2021 GMT
            Not After : Dec 21 16:26:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:aa:a4:53:2f:03:c4:a7:05:e6:e8:a1:8e:
                    7f:66:e3:b1:c3:1f:68:6a:bc:bb:1f:f4:67:47:0d:
                    ae:cf:7e:08:b9:1d:f7:76:17:d9:54:ed:2a:7f:fe:
                    b0:98:49:1e:db:4e:a1:95:c4:14:4f:f7:db:d0:8e:
                    18:70:f1:65:fc:0a:71:62:70:8b:52:cf:40:cf:74:
                    84:e5:cf:52:b0:3f:b5:91:d5:43:a8:fe:b5:72:cb:
                    8d:d5:a1:24:56:a0:1c:88:02:6b:7b:0a:ea:b0:1b:
                    be:38:8a:73:e9:b8:59:51:e1:70:8b:eb:48:d8:64:
                    1a:00:c7:fb:a0:4c:5d:39:85:63:9d:ed:d6:b6:a0:
                    02:e2:9a:1b:7c:a9:fb:59:c0:f1:0b:7c:0d:9f:bc:
                    dd:15:1a:8b:33:ca:b6:87:d9:21:1e:d7:ed:2c:48:
                    6a:65:8c:23:b7:ef:c2:4f:83:ec:6b:af:55:54:b1:
                    66:b0:86:c3:89:c6:80:15:66:e2:74:9b:4b:ab:e6:
                    f0:e6:a3:5e:32:74:e4:dd:60:d3:e3:e6:74:d6:3d:
                    fd:7e:2a:71:61:67:8d:d3:24:3c:ac:c1:14:23:e5:
                    74:9f:4c:9a:0d:fc:1e:c8:18:2a:e8:96:d3:37:de:
                    3a:7b:62:ab:58:11:2a:43:3c:97:01:79:d6:7a:d1:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F2:39:6D:56:73:EB:90:7F:60:DA:67:45:11:0E:41:30:7C:8A:27
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39362e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:c5:32:ef:22:fb:f4:5a:7c:9f:c0:64:a7:e3:4e:c3:c9:cd:
         9e:ea:a5:b7:70:3b:20:2c:13:43:a2:f6:99:0f:9b:c1:fc:75:
         f0:76:8a:05:2d:b0:d6:ba:40:77:9c:0f:0d:ad:25:14:1f:2e:
         c4:23:17:9b:d0:58:8a:bb:e9:43:21:3a:9c:47:d2:e3:53:44:
         e9:1f:c9:65:8d:c0:48:94:31:7f:13:4e:22:ca:56:53:5b:89:
         8a:d5:a1:1f:22:ed:21:83:80:26:c1:3a:9e:d4:1d:ca:d6:f6:
         ee:55:9e:d8:8b:fe:4d:6d:bd:d9:e4:94:e9:d4:7c:1b:0c:a9:
         94:1b:d2:6c:b0:51:45:92:1a:63:09:fe:07:08:12:ae:47:e6:
         60:87:a3:4d:d0:e0:c0:46:a9:f3:ee:27:ad:94:b4:00:f1:ce:
         f1:ec:8a:db:81:b1:81:37:96:31:af:15:85:8b:89:77:a2:50:
         06:3e:52:e8:bf:63:70:20:1d:fc:3f:06:db:f5:33:aa:07:9e:
         e2:d9:b1:05:f3:4e:4e:6f:2c:c5:b5:6f:5a:1c:5a:44:a7:dc:
         b4:f0:e8:77:f9:57:b3:d4:d7:dc:ce:44:69:88:57:47:79:98:
         d2:9f:ff:66:d1:7b:e7:26:63:00:6e:79:a3:44:1b:eb:3d:eb:
         9b:57:c6:b4
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUaIfwo/XlxCl0Li9jh/3jOvEK5o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRCMjUwMUMxNTExMzRBMjAxRkQ4NzE0NURBNTZBMjA3
QkZEMTlGRDAeFw0yMTEyMjIxNjIxNTZaFw0yMjEyMjExNjI2NTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTlEQUFBQTQ1MzJGMDNDNEE3
MDVFNkU4QTE4RTdGNjZFM0IxQzMxRjY4NkFCQ0JCMUZGNDY3NDcwREFFQ0Y3RTA4
QjkxREY3NzYxN0Q5NTRFRDJBN0ZGRUIwOTg0OTFFREI0RUExOTVDNDE0NEZGN0RC
RDA4RTE4NzBGMTY1RkMwQTcxNjI3MDhCNTJDRjQwQ0Y3NDg0RTVDRjUyQjAzRkI1
OTFENTQzQThGRUI1NzJDQjhERDVBMTI0NTZBMDFDODgwMjZCN0IwQUVBQjAxQkJF
Mzg4QTczRTlCODU5NTFFMTcwOEJFQjQ4RDg2NDFBMDBDN0ZCQTA0QzVEMzk4NTYz
OURFREQ2QjZBMDAyRTI5QTFCN0NBOUZCNTlDMEYxMEI3QzBEOUZCQ0REMTUxQThC
MzNDQUI2ODdEOTIxMUVEN0VEMkM0ODZBNjU4QzIzQjdFRkMyNEY4M0VDNkJBRjU1
NTRCMTY2QjA4NkMzODlDNjgwMTU2NkUyNzQ5QjRCQUJFNkYwRTZBMzVFMzI3NEU0
REQ2MEQzRTNFNjc0RDYzREZEN0UyQTcxNjE2NzhERDMyNDNDQUNDMTE0MjNFNTc0
OUY0QzlBMERGQzFFQzgxODJBRTg5NkQzMzdERTNBN0I2MkFCNTgxMTJBNDMzQzk3
MDE3OUQ2N0FEMTU4QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmdqqpFMvA8SnBebooY5/ZuOxwx9oary7H/RnRw2uz34IuR33dhfZ
VO0qf/6wmEke206hlcQUT/fb0I4YcPFl/ApxYnCLUs9Az3SE5c9SsD+1kdVDqP61
csuN1aEkVqAciAJrewrqsBu+OIpz6bhZUeFwi+tI2GQaAMf7oExdOYVjne3WtqAC
4pobfKn7WcDxC3wNn7zdFRqLM8q2h9khHtftLEhqZYwjt+/CT4Psa69VVLFmsIbD
icaAFWbidJtLq+bw5qNeMnTk3WDT4+Z01j39fipxYWeN0yQ8rMEUI+V0n0yaDfwe
yBgq6JbTN946e2KrWBEqQzyXAXnWetFYqwIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FJjyOW1Wc+uQf2DaZ0URDkEwfIonMB8GA1UdIwQYMBaAFJSyUBwVETSiAf2HFF2l
aiB7/Rn9MA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvL2RhZWUxOGE0LTg0NzQtNGMwMi05
YWMzLTUxODgzNjdmZGExNi02LzEvOTRCMjUwMUMxNTExMzRBMjAxRkQ4NzE0NURB
NTZBMjA3QkZEMTlGRC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGFlZTE4YTQtODQ3
NC00YzAyLTlhYzMtNTE4ODM2N2ZkYTE2LTkvMC85NEIyNTAxQzE1MTEzNEEyMDFG
RDg3MTQ1REE1NkEyMDdCRkQxOUZELmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vZGFl
ZTE4YTQtODQ3NC00YzAyLTlhYzMtNTE4ODM2N2ZkYTE2LTYvMS8zMjMxMzYyZTMy
MzQzNzJlMzkzNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzIzMzM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQE2PdgMA0GCSqGSIb3DQEBCwUAA4IBAQBNxTLvIvv0WnyfwGSn407Dyc2e
6qW3cDsgLBNDovaZD5vB/HXwdooFLbDWukB3nA8NrSUUHy7EIxeb0FiKu+lDITqc
R9LjU0TpH8lljcBIlDF/E04iylZTW4mK1aEfIu0hg4AmwTqe1B3K1vbuVZ7Yi/5N
bb3Z5JTp1HwbDKmUG9JssFFFkhpjCf4HCBKuR+Zgh6NN0ODARqnz7ietlLQA8c7x
7IrbgbGBN5YxrxWFi4l3olAGPlLov2NwIB38Pwbb9TOqB57i2bEF805ObyzFtW9a
HFpEp9y08Oh3+Vez1NfczkRpiFdHeZjSn/9m0XvnJmMAbnmjRBvrPeubV8a0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org