Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20323037343539.roa
File:                     3138352e3232392e3232312e302f32342d3234203d3e20323037343539.roa (raw, json)
Hash identifier:          ukJ+LbZBYw5bR76G5Hcro7e2Oj2cxdc4uMSe2RPjCHQ=
Subject key identifier:   DA:CB:30:88:3F:F2:05:F4:5B:8B:85:A5:86:44:E9:56:78:32:10:87
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       06437F6A9DEB397657DC285F10C99DF90672D684
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20323037343539.roa
Signing time:             Mon 17 Oct 2022 21:31:42 +0000
ROA not before:           Mon 17 Oct 2022 21:26:42 +0000
ROA not after:            Mon 16 Oct 2023 21:31:42 +0000
asID:                     207459
IP address blocks:        185.229.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:43:7f:6a:9d:eb:39:76:57:dc:28:5f:10:c9:9d:f9:06:72:d6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Oct 17 21:26:42 2022 GMT
            Not After : Oct 16 21:31:42 2023 GMT
        Subject: CN=DACB30883FF205F45B8B85A58644E95678321087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:4d:0f:0f:a5:7b:f9:d3:b4:02:9d:70:34:
                    bb:ea:e0:61:f9:e2:58:9b:b3:05:d0:98:b8:c0:c1:
                    a1:ee:af:03:07:b4:c1:fd:a2:03:8b:7a:bd:72:83:
                    07:c8:82:03:b6:44:ee:f1:92:52:f1:2d:37:6c:a0:
                    6b:b6:35:cd:fd:bc:90:56:07:72:25:be:a4:72:54:
                    bb:12:ba:6e:61:f3:15:7e:49:8e:68:87:b0:20:9c:
                    4a:f7:9f:68:c7:cc:46:27:1b:18:05:41:c7:1d:7c:
                    80:f9:b1:1a:21:e8:67:d9:08:cc:2e:29:0b:17:0b:
                    1c:4b:5b:54:89:4c:65:e9:af:b1:1c:f0:b7:d3:ce:
                    3f:3d:a6:c7:a3:b4:9e:eb:86:52:c9:8b:8d:6f:5c:
                    9a:fd:b4:a9:32:55:84:19:7b:fb:de:b2:b2:18:9d:
                    ba:0b:27:ff:b9:bc:59:8b:ab:20:78:12:d4:1d:8e:
                    4b:d9:34:0c:4d:56:e8:98:f3:16:80:76:92:f8:ff:
                    10:cc:8d:43:70:33:65:48:d5:01:67:14:20:13:43:
                    55:4d:9e:ce:80:ef:25:2f:1a:c4:ba:25:ef:5e:bf:
                    54:b8:45:97:08:36:4b:61:50:27:8d:2a:bb:2f:cc:
                    1b:dc:f9:1b:3e:67:d7:d2:f0:2d:c3:c2:1d:ce:2f:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CB:30:88:3F:F2:05:F4:5B:8B:85:A5:86:44:E9:56:78:32:10:87
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20323037343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:fe:df:26:65:e0:6b:ad:ea:bb:7c:e3:bd:a9:28:6e:35:48:
         f3:c7:62:6e:9a:43:1b:d7:3b:ca:1f:5f:d9:15:59:7a:cb:f8:
         ce:25:08:d7:71:f5:20:09:df:bb:94:7f:b7:b0:9d:46:3f:a3:
         49:65:3a:88:6c:57:24:e8:10:6f:cd:91:17:2e:ad:77:d5:65:
         25:6b:eb:72:80:c4:db:e9:ab:55:66:29:d2:1a:f3:c5:21:dd:
         eb:8d:aa:23:87:7b:9b:92:de:29:4a:a3:94:48:db:c7:3a:3c:
         c1:a4:58:7a:51:4d:7d:30:44:bc:50:e0:6b:9d:c1:2f:a9:f1:
         19:75:d0:97:5f:14:b7:ca:64:64:b5:6c:e3:29:9e:20:ab:f2:
         9d:24:9b:05:39:06:8c:cf:82:34:f5:2d:ec:41:23:bd:78:3a:
         52:7d:01:06:b7:ea:e1:8e:b9:66:af:5f:ad:bb:05:f0:d1:52:
         a9:e1:19:cb:d7:72:10:26:cf:bb:5a:2f:70:13:cc:d5:87:0f:
         22:16:b6:4e:fe:e4:2a:5c:c3:0f:84:9d:be:e0:98:b3:55:c7:
         be:4e:ba:1d:96:45:33:db:9a:8e:72:ac:cf:c2:03:b1:c9:06:
         ab:27:05:c8:a9:67:b9:97:81:a2:77:6a:99:7b:4b:9b:f6:f5:
         41:66:2e:85
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUBkN/ap3rOXZX3ChfEMmd+QZy1oQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMjEwMTcyMTI2NDJaFw0yMzEwMTYyMTMxNDJaMDMxMTAvBgNV
BAMTKERBQ0IzMDg4M0ZGMjA1RjQ1QjhCODVBNTg2NDRFOTU2NzgzMjEwODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKB00PD6V7+dO0Ap1wNLvq4GH5
4libswXQmLjAwaHurwMHtMH9ogOLer1ygwfIggO2RO7xklLxLTdsoGu2Nc39vJBW
B3IlvqRyVLsSum5h8xV+SY5oh7AgnEr3n2jHzEYnGxgFQccdfID5sRoh6GfZCMwu
KQsXCxxLW1SJTGXpr7Ec8LfTzj89psejtJ7rhlLJi41vXJr9tKkyVYQZe/vesrIY
nboLJ/+5vFmLqyB4EtQdjkvZNAxNVuiY8xaAdpL4/xDMjUNwM2VI1QFnFCATQ1VN
ns6A7yUvGsS6Je9ev1S4RZcINkthUCeNKrsvzBvc+Rs+Z9fS8C3Dwh3OL3DPAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQU2sswiD/yBfRbi4WlhkTpVngyEIcwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBqAYI
KwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zMTM4MzUyZTMyMzIzOTJlMzIzMjMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzIzMDM3MzQzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXdMA0GCSqGSIb3DQEBCwUA
A4IBAQAx/t8mZeBrreq7fOO9qShuNUjzx2JumkMb1zvKH1/ZFVl6y/jOJQjXcfUg
Cd+7lH+3sJ1GP6NJZTqIbFck6BBvzZEXLq131WUla+tygMTb6atVZinSGvPFId3r
jaojh3ubkt4pSqOUSNvHOjzBpFh6UU19MES8UOBrncEvqfEZddCXXxS3ymRktWzj
KZ4gq/KdJJsFOQaMz4I09S3sQSO9eDpSfQEGt+rhjrlmr1+tuwXw0VKp4RnL13IQ
Js+7Wi9wE8zVhw8iFrZO/uQqXMMPhJ2+4JizVce+TrodlkUz25qOcqzPwgOxyQar
JwXIqWe5l4Gid2qZe0ub9vVBZi6F
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org