Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          Fei1GFOY9kBd2CZIeKoYIFhZwXboFtGhZ4Pm3aFr5gY=
Subject key identifier:   64:F2:EC:9D:A0:4B:B1:07:5D:95:7D:A2:DC:13:9A:D8:FF:D2:24:7B
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       1544A9239B1784F7DC54D8AB10A6D5F953B575C3
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
Signing time:             Tue 07 Jun 2022 09:10:18 +0000
ROA not before:           Tue 07 Jun 2022 09:05:18 +0000
ROA not after:            Tue 06 Jun 2023 09:10:18 +0000
asID:                     398465
IP address blocks:        216.247.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:44:a9:23:9b:17:84:f7:dc:54:d8:ab:10:a6:d5:f9:53:b5:75:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun  7 09:05:18 2022 GMT
            Not After : Jun  6 09:10:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:5e:9c:61:81:1c:2b:2c:c7:59:3e:92:d1:
                    b7:7d:41:97:87:40:a4:a8:5e:4b:b7:7c:59:8b:05:
                    9c:d9:b6:5a:7f:ee:32:c3:68:b9:06:ad:ed:94:c4:
                    88:fc:bc:13:18:2e:d0:94:32:eb:3c:8f:7f:56:85:
                    55:84:39:26:2d:69:34:6a:01:64:47:6e:17:98:ea:
                    95:4d:e7:72:3e:60:b1:74:b1:36:bf:c8:bc:b6:55:
                    1e:94:74:57:b1:37:2e:63:3c:2a:2f:ed:d5:7f:6a:
                    70:68:c7:e7:c5:3d:7e:28:c5:bb:11:eb:1d:6d:dc:
                    c6:ee:3d:5a:7f:d5:3d:ef:8a:c8:06:70:0e:b9:b9:
                    f5:dc:06:37:0d:8c:09:63:c2:0b:a2:47:a3:31:d1:
                    65:8a:4a:8f:94:9e:6b:02:72:05:95:f9:fa:d9:81:
                    7c:cd:c5:5c:01:69:ee:8d:1f:53:f5:d5:c7:b4:9e:
                    6b:13:7b:84:6a:7b:09:77:62:87:bc:07:ab:e6:fe:
                    cb:12:1d:fa:5a:a1:33:2f:10:67:e8:8d:74:f8:f2:
                    03:e4:4c:50:6e:70:2e:32:1b:1f:6b:8d:40:ce:6e:
                    0f:a6:0e:45:3f:1a:f9:66:8a:56:6e:99:bf:64:5a:
                    68:8e:00:31:f4:14:bd:65:f4:04:e7:09:83:9a:53:
                    57:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:EC:9D:A0:4B:B1:07:5D:95:7D:A2:DC:13:9A:D8:FF:D2:24:7B
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:68:ce:6d:31:a6:49:73:f6:06:01:26:b4:11:39:6f:1b:21:
         cd:74:54:99:64:a9:9b:e0:39:f2:86:f3:c5:69:f3:31:26:e4:
         97:d5:cb:a6:4a:76:2a:2d:77:6c:a6:fb:d2:d1:18:5f:ce:52:
         67:93:a2:01:17:05:e1:7d:62:f9:fb:0f:db:84:ae:71:6b:46:
         87:4d:41:2b:49:27:12:18:20:27:42:63:28:3c:58:f8:91:50:
         45:da:e5:9a:ba:d0:39:8d:1b:fe:85:3b:2c:84:7c:10:2a:8f:
         cb:c9:6d:be:0a:7f:d5:a1:a6:2d:70:0d:19:28:37:57:a1:16:
         58:51:af:db:2b:aa:64:fd:bb:17:7a:c4:20:da:dc:57:e4:e5:
         76:28:f4:97:c8:ff:a2:d5:3d:48:9d:ab:16:e8:01:7b:e1:45:
         39:85:5d:f0:be:0b:fc:8b:ac:36:95:96:24:53:22:28:fa:e1:
         18:31:8d:2b:65:90:fb:c8:29:a6:37:81:b6:7c:ed:e1:5a:36:
         b3:25:61:28:9a:6e:e9:6b:fb:75:e0:eb:7d:93:ac:3a:6c:d4:
         01:b6:11:3c:ee:f2:dd:a9:99:fe:d2:d2:02:7f:da:81:bb:3b:
         ed:06:f3:a6:64:63:c9:32:b8:0b:f7:e1:2a:a4:97:01:db:cc:
         63:1b:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org