Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39392e302f32342d3234203d3e203430363736.roa
File:                     3231362e3234372e39392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          4jVkAF9pPzbhiHhpYXNjL/xfDO4yy7qWmpHEmGFJQhY=
Subject key identifier:   54:B2:EE:5C:5A:B1:86:46:65:4D:7B:97:4B:7E:98:7C:47:16:06:A3
Certificate issuer:       /CN=94B2501C151134A201FD87145DA56A207BFD19FD
Certificate serial:       4826761202BAEBB3B05BBB90880C288A1C7ECCD9
Authority key identifier: 94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD
Authority info access:    rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39392e302f32342d3234203d3e203430363736.roa
Signing time:             Thu 09 Jun 2022 18:12:40 +0000
ROA not before:           Thu 09 Jun 2022 18:07:40 +0000
ROA not after:            Thu 08 Jun 2023 18:12:40 +0000
asID:                     40676
IP address blocks:        216.247.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:26:76:12:02:ba:eb:b3:b0:5b:bb:90:88:0c:28:8a:1c:7e:cc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94B2501C151134A201FD87145DA56A207BFD19FD
        Validity
            Not Before: Jun  9 18:07:40 2022 GMT
            Not After : Jun  8 18:12:40 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:34:55:29:36:d2:f7:93:28:fc:8d:80:4c:
                    93:ac:14:32:87:f0:7d:e1:71:7b:2e:3b:d6:21:c2:
                    87:80:07:b1:96:8b:65:0d:73:4e:e6:db:b1:d6:a0:
                    24:e7:26:e4:cf:78:02:03:c5:7f:19:c6:51:6b:4e:
                    5d:9a:a2:b8:c3:bf:3e:b6:1e:e3:cb:43:ec:c5:66:
                    1d:40:a8:28:df:12:3f:67:15:5c:33:ca:fb:05:22:
                    fa:12:53:22:61:a9:1d:a2:58:56:cc:cb:d6:0a:f5:
                    cf:21:95:6b:e2:57:ac:8b:92:95:6b:43:a2:f9:71:
                    04:05:05:96:ed:4a:6e:07:bd:a9:53:45:b1:c8:13:
                    97:07:d0:cd:82:d5:36:38:be:53:94:27:75:ef:f2:
                    4e:33:cc:0f:49:66:09:ee:2a:a8:50:43:39:0d:61:
                    c3:28:93:a0:2e:ca:b5:11:a5:2d:7a:c4:e0:64:e4:
                    48:f0:9d:59:e5:69:ba:f3:09:8a:9d:74:52:fa:10:
                    0d:00:3f:f8:7c:b2:50:46:a8:a1:fd:46:d4:59:20:
                    70:8b:11:ce:1f:df:0d:7c:64:87:8c:bc:38:76:5b:
                    a2:12:c3:55:9f:a6:6b:3a:48:2a:8f:4e:65:6c:40:
                    15:17:45:ee:11:24:47:ce:52:f8:46:cd:7a:75:13:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B2:EE:5C:5A:B1:86:46:65:4D:7B:97:4B:7E:98:7C:47:16:06:A3
            X509v3 Authority Key Identifier:
                keyid:94:B2:50:1C:15:11:34:A2:01:FD:87:14:5D:A5:6A:20:7B:FD:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/94B2501C151134A201FD87145DA56A207BFD19FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-9/0/94B2501C151134A201FD87145DA56A207BFD19FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/daee18a4-8474-4c02-9ac3-5188367fda16-6/1/3231362e3234372e39392e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:ba:42:b9:4e:e1:29:ec:32:ca:1a:f3:3a:d0:d6:01:5f:76:
         c3:bc:d9:04:4f:a4:67:c4:e4:37:a4:25:aa:16:39:61:7b:2f:
         26:07:06:af:9b:84:68:ed:3d:dc:b5:ba:f2:f8:17:f6:84:86:
         aa:f0:44:3f:24:7b:ff:7c:e4:71:49:e0:e5:57:0a:85:28:d9:
         30:cd:63:d3:31:54:f3:1f:18:f7:f6:d7:40:1e:4a:c7:13:15:
         2a:8b:24:5d:32:11:41:e9:75:53:3f:b1:81:2a:61:37:f6:37:
         fb:a4:c9:b5:58:6e:ac:92:ca:38:92:16:1e:8c:52:df:97:34:
         cc:a0:1d:1b:e6:96:ce:47:5e:d2:4c:1d:3e:b8:c1:8f:79:db:
         6f:6e:79:92:29:b9:45:68:f0:c8:90:84:ee:94:49:07:74:38:
         35:c9:02:ee:9f:59:a8:be:6c:8c:de:88:92:3a:ba:80:06:7b:
         2c:f9:71:b1:86:83:55:5c:1c:f7:58:20:c4:17:d8:93:ee:91:
         27:4e:21:db:9c:59:62:7c:ae:4d:32:60:ee:db:50:d4:4f:df:
         a2:83:1a:8f:d9:b0:6d:7c:89:b9:75:47:a2:dc:7c:44:de:bf:
         52:5e:8a:d7:d1:f6:ab:d4:c4:31:e2:2d:66:bd:d0:c2:fc:93:
         21:49:f9:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org