Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32342d3234203d3e2031323339.roa
File:                     3138352e3231362e3130342e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          DZvxc0VSTuFVFqDsVbOG2GWm0jjdKRgsA8WRK0GeYWs=
Subject key identifier:   F7:7F:63:15:54:47:6F:FF:62:10:A1:8A:01:1C:9F:59:5F:58:F7:D9
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       43B8B3A47CC8F347CB7817F5E7650C95EEF56AB8
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32342d3234203d3e2031323339.roa
Signing time:             Mon 26 Sep 2022 14:51:03 +0000
ROA not before:           Mon 26 Sep 2022 14:46:03 +0000
ROA not after:            Mon 25 Sep 2023 14:51:03 +0000
asID:                     1239
IP address blocks:        185.216.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b8:b3:a4:7c:c8:f3:47:cb:78:17:f5:e7:65:0c:95:ee:f5:6a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Sep 26 14:46:03 2022 GMT
            Not After : Sep 25 14:51:03 2023 GMT
        Subject: CN=F77F631554476FFF6210A18A011C9F595F58F7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:82:8c:a6:83:8d:cf:68:bd:aa:f3:ae:81:9d:
                    ed:2e:d7:88:d0:df:d4:d1:8a:85:42:ab:8e:c1:3d:
                    ff:14:5e:ee:b8:8c:f1:a7:9e:5c:9e:db:2c:87:a2:
                    31:46:9b:e9:83:3f:83:7c:b7:66:18:69:3b:f3:99:
                    ca:1e:bc:de:c2:0c:8d:f1:44:a3:95:4b:3d:9e:df:
                    34:75:3e:1c:84:dc:fb:22:3a:21:8b:29:62:ba:ad:
                    01:8b:72:68:a8:e1:61:8e:88:7e:96:55:a9:72:fe:
                    f5:41:1f:04:ed:90:58:cf:7c:ff:d9:3b:9e:a1:30:
                    fe:0f:da:89:59:a1:9c:eb:46:80:a7:fc:9c:78:f1:
                    cc:96:99:ee:42:8f:cb:46:bc:63:ea:67:6a:33:a4:
                    54:d1:90:e8:ec:8d:70:6b:44:8c:ff:62:2a:f1:82:
                    4e:9c:5f:e0:7d:f4:45:46:4f:aa:b1:21:9a:26:dc:
                    81:90:6d:cf:9f:73:ec:82:ad:b6:ea:82:4d:6c:18:
                    02:76:21:f7:80:49:09:55:93:36:57:49:48:c2:80:
                    d3:1b:5e:4b:7c:3b:40:f5:d8:da:31:1b:d9:29:a1:
                    d6:b9:db:cf:40:1b:96:29:29:22:e4:b4:f9:35:78:
                    24:7a:19:11:4c:27:0c:31:d1:63:98:c1:41:bf:0f:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7F:63:15:54:47:6F:FF:62:10:A1:8A:01:1C:9F:59:5F:58:F7:D9
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3231362e3130342e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a0:91:eb:00:ac:f0:fe:34:07:70:2b:1a:e9:9f:4a:2a:84:
         93:3c:08:7c:b6:e4:aa:48:8e:5a:e1:1e:8d:7f:b9:91:fd:90:
         b4:57:89:bb:72:56:cc:99:8e:03:47:04:d9:d7:af:94:de:be:
         ff:88:5f:c9:09:3d:ac:de:a6:0d:7d:e8:98:8b:8e:13:34:af:
         a8:e8:0b:dc:ec:6d:d7:f0:f5:5b:ba:82:86:3a:33:81:1c:92:
         d0:c6:16:38:f2:2d:f6:9a:9d:88:27:de:7d:a3:25:f9:b4:f9:
         71:19:e4:0d:62:d6:20:30:ec:15:54:91:2a:c8:b5:b3:b7:68:
         f3:02:0f:b0:7f:c8:a9:2d:49:60:0d:d0:d6:6f:29:5a:11:59:
         0a:77:b4:bc:ab:2a:dc:4e:bc:f3:02:bf:35:12:7a:b8:ab:cf:
         d5:cd:27:cb:44:ad:c7:d6:80:10:c4:a3:8f:51:5b:5a:ff:77:
         97:10:69:9b:ec:3a:55:a9:5c:15:69:62:02:a5:44:f1:6f:1c:
         1d:da:5e:1f:48:f1:97:b9:90:6a:c3:1c:df:b6:55:50:56:fe:
         8a:b7:4e:48:be:91:67:3c:71:88:a2:cf:82:d8:85:40:37:ec:
         91:e0:a8:22:1d:40:e2:61:33:9b:3a:9a:1a:42:f4:60:9f:96:
         64:e9:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org