Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          dPV9bL5++CiWRr/AItZs9sfEjMvXLNt1idtkBizoCuc=
Subject key identifier:   E7:C7:EB:7A:57:92:C2:38:03:FD:15:25:60:56:15:C5:F8:0F:E6:51
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       2A9F199D6DA87CAD15B32C637BEE7A21DE4253BD
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 14 Jun 2022 10:28:36 +0000
ROA not before:           Tue 14 Jun 2022 10:23:36 +0000
ROA not after:            Tue 13 Jun 2023 10:28:36 +0000
asID:                     22773
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9f:19:9d:6d:a8:7c:ad:15:b3:2c:63:7b:ee:7a:21:de:42:53:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun 14 10:23:36 2022 GMT
            Not After : Jun 13 10:28:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f8:e8:89:ee:fc:8d:61:54:86:84:c3:e4:63:
                    5a:e6:66:21:12:86:03:59:4b:a3:c8:4a:d5:72:3d:
                    07:12:dc:b5:d0:fc:d4:73:31:a8:60:b8:4b:ae:9f:
                    5d:85:9d:20:23:4f:11:c2:7a:c8:e0:a1:e1:2f:ab:
                    d1:29:9a:dd:34:23:07:68:5c:e6:78:1f:5d:17:9d:
                    db:e8:ed:24:05:fc:90:c0:32:49:2c:c4:90:76:65:
                    22:6c:0f:e3:45:4e:cd:f9:c5:a7:50:0e:5e:ed:2d:
                    ae:dd:d4:23:88:26:6e:08:a0:7c:95:e7:43:93:bf:
                    1b:f3:94:7f:75:44:60:04:02:4e:2d:d5:74:6f:af:
                    7f:ba:f5:cb:f4:22:7e:56:c9:84:b8:1a:86:2a:18:
                    5f:81:ec:d3:ed:74:4c:3f:92:a2:9b:84:77:63:3e:
                    19:fc:c6:75:e7:c8:dc:d6:93:06:fe:63:01:d9:67:
                    dc:94:5f:03:25:b3:42:c0:44:2b:89:26:c4:b9:ef:
                    88:e8:08:46:9d:bb:49:24:d9:6c:60:93:6c:0d:d2:
                    a9:b7:a4:bc:91:52:fa:67:36:f0:e4:a3:55:db:fa:
                    12:55:0f:2d:f9:5a:da:85:9f:88:d8:4f:df:40:d7:
                    4e:f5:37:cc:d6:9b:a7:28:ef:85:54:af:4f:a5:73:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C7:EB:7A:57:92:C2:38:03:FD:15:25:60:56:15:C5:F8:0F:E6:51
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:4e:aa:b3:8d:c9:0e:df:65:c4:78:ae:b2:8d:c8:61:18:02:
         5b:31:9d:ba:92:5a:f1:93:a9:c2:a0:53:29:15:30:20:5d:23:
         52:4f:ea:26:65:07:7b:c0:44:fa:cd:54:fa:ef:3c:90:c9:e7:
         48:7c:2e:6c:2c:b8:54:f0:d8:77:67:47:14:38:89:60:bc:08:
         31:f5:15:62:a3:f7:b9:22:27:bf:be:2e:71:9c:91:a1:cb:c7:
         b2:2a:e2:8e:9f:eb:ba:50:40:af:a2:ed:0f:73:02:5c:d6:81:
         c5:eb:43:30:a9:91:b0:ed:13:98:26:a3:73:bb:2a:a7:a6:e4:
         26:a6:24:53:c5:a9:7f:c6:87:81:66:51:f1:e7:96:60:6d:c6:
         9c:c9:1d:2f:04:d5:86:0b:23:a2:48:a3:87:67:16:51:b8:32:
         7a:9e:49:c9:64:9d:2f:1e:81:b0:c6:f3:35:ab:1f:50:75:c7:
         0e:30:26:b9:c0:98:24:ad:f6:1f:f4:54:78:da:db:8f:de:62:
         22:d2:62:56:4e:92:71:71:84:66:da:5d:7a:b7:e8:f7:8b:bb:
         36:5d:a0:b5:21:ea:5e:ac:eb:af:38:00:45:02:c3:67:fe:6a:
         5d:e4:45:8e:36:d3:48:40:f2:3f:88:4b:dc:80:05:d4:fb:52:
         8c:75:70:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org