Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20343030353039.roa
File:                     3138352e3232392e3232312e302f32342d3234203d3e20343030353039.roa (raw, json)
Hash identifier:          zVCihuKT1oM/hLpmnSfAqv3bNY9Zrv455EqVhUCjuSQ=
Subject key identifier:   96:67:73:59:F8:0F:BF:D6:11:33:3D:1B:5C:0C:0C:16:14:86:EF:02
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       61C1D1DAE6A1EB8CA125271D37AE5A7D2B79E4EA
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20343030353039.roa
Signing time:             Mon 29 May 2023 16:16:21 +0000
ROA not before:           Mon 29 May 2023 16:11:21 +0000
ROA not after:            Mon 27 May 2024 16:16:21 +0000
asID:                     400509
IP address blocks:        185.229.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c1:d1:da:e6:a1:eb:8c:a1:25:27:1d:37:ae:5a:7d:2b:79:e4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: May 29 16:11:21 2023 GMT
            Not After : May 27 16:16:21 2024 GMT
        Subject: CN=96677359F80FBFD611333D1B5C0C0C161486EF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5c:32:af:89:cf:32:3f:89:08:cf:b8:2c:97:
                    2b:02:ea:fc:51:90:35:71:02:b4:56:29:61:23:40:
                    4b:eb:63:c5:03:34:e7:46:70:d8:1b:c0:1b:fb:09:
                    7f:58:a6:17:86:52:f1:26:c9:e8:1b:63:18:00:e6:
                    e9:3f:96:2c:0e:35:20:f1:bb:03:eb:8b:f6:6a:1c:
                    b5:f5:01:76:80:e6:b9:82:96:a2:96:e4:b6:d5:99:
                    06:65:ff:fb:8e:59:85:0a:e5:70:30:fe:2b:d6:6e:
                    29:f7:89:95:4e:d5:97:79:83:94:92:a0:4a:64:83:
                    48:1c:7a:37:7e:86:7a:d1:a8:d2:77:a1:c8:c4:13:
                    e0:b7:33:17:b3:50:50:c1:95:01:73:39:23:90:04:
                    82:36:8a:75:d0:c3:c7:17:42:e8:4a:1b:55:a8:83:
                    93:3b:fb:bb:d6:e5:9b:8e:51:25:7f:bd:2a:dc:29:
                    f5:c4:06:e3:41:14:bd:de:5a:8a:73:a3:0b:28:a7:
                    da:b4:2a:b2:26:2b:7b:79:2e:3f:c0:09:63:5a:9a:
                    62:d0:fd:5b:1e:29:e9:a2:3a:9a:63:d9:9d:10:1c:
                    56:00:fb:04:d5:44:c8:41:d0:f9:25:e8:40:81:2a:
                    81:ae:68:f0:aa:7a:6c:c2:87:6a:a8:15:1b:b3:df:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:73:59:F8:0F:BF:D6:11:33:3D:1B:5C:0C:0C:16:14:86:EF:02
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232312e302f32342d3234203d3e20343030353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:62:8e:31:dd:7d:3e:f9:7f:77:4f:f7:b6:f6:61:32:d8:ce:
         c6:06:0c:3e:b5:d3:a7:43:ab:c9:0f:30:77:7f:02:3c:d7:29:
         99:19:39:d9:6b:7e:42:e9:9b:1a:d8:78:4c:cf:dc:b9:05:8c:
         8d:90:4e:5d:6c:0a:4f:81:e6:5f:dd:4a:90:d6:ad:dd:03:77:
         11:cb:5e:be:88:2b:63:a4:a3:e4:3a:07:b4:1b:d6:3e:d0:72:
         d5:65:aa:8f:f6:19:38:33:5e:fd:47:5f:c7:7c:1d:c2:22:b4:
         a8:0a:d9:c3:d7:1f:5e:49:24:4d:22:51:08:7e:79:29:2e:93:
         2e:25:dd:d1:7d:f7:ab:b0:83:95:de:af:5c:db:48:f8:55:10:
         99:f8:1e:73:34:74:9b:76:65:98:eb:ce:02:8c:5b:ce:54:9d:
         5e:42:fe:be:9c:a0:cf:15:56:43:22:f3:00:93:29:93:6d:fb:
         ac:9b:7e:f8:98:01:69:32:57:37:db:77:c0:26:e7:dc:55:cb:
         4c:11:f0:80:fe:0b:e5:97:40:df:73:4d:91:74:66:ff:d5:47:
         b1:37:e5:b2:aa:7f:d2:5b:e0:33:01:53:31:c1:1b:2a:e4:5f:
         8b:bb:2a:84:af:67:a3:a6:95:ea:33:a7:94:56:33:75:e1:98:
         f9:15:b6:26
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUYcHR2uah64yhJScdN65afSt55OowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMzA1MjkxNjExMjFaFw0yNDA1MjcxNjE2MjFaMDMxMTAvBgNV
BAMTKDk2Njc3MzU5RjgwRkJGRDYxMTMzM0QxQjVDMEMwQzE2MTQ4NkVGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmXDKvic8yP4kIz7gslysC6vxR
kDVxArRWKWEjQEvrY8UDNOdGcNgbwBv7CX9YpheGUvEmyegbYxgA5uk/liwONSDx
uwPri/ZqHLX1AXaA5rmClqKW5LbVmQZl//uOWYUK5XAw/ivWbin3iZVO1Zd5g5SS
oEpkg0gcejd+hnrRqNJ3ocjEE+C3MxezUFDBlQFzOSOQBII2inXQw8cXQuhKG1Wo
g5M7+7vW5ZuOUSV/vSrcKfXEBuNBFL3eWopzowsop9q0KrImK3t5Lj/ACWNammLQ
/VseKemiOppj2Z0QHFYA+wTVRMhB0Pkl6ECBKoGuaPCqemzCh2qoFRuz30ALAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUlmdzWfgPv9YRMz0bXAwMFhSG7wIwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBqAYI
KwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zMTM4MzUyZTMyMzIzOTJlMzIzMjMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzQzMDMwMzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXdMA0GCSqGSIb3DQEBCwUA
A4IBAQDBYo4x3X0++X93T/e29mEy2M7GBgw+tdOnQ6vJDzB3fwI81ymZGTnZa35C
6Zsa2HhMz9y5BYyNkE5dbApPgeZf3UqQ1q3dA3cRy16+iCtjpKPkOge0G9Y+0HLV
ZaqP9hk4M179R1/HfB3CIrSoCtnD1x9eSSRNIlEIfnkpLpMuJd3RffersIOV3q9c
20j4VRCZ+B5zNHSbdmWY684CjFvOVJ1eQv6+nKDPFVZDIvMAkymTbfusm374mAFp
Mlc323fAJufcVctMEfCA/gvll0Dfc02RdGb/1UexN+Wyqn/SW+AzAVMxwRsq5F+L
uyqEr2ejppXqM6eUVjN14Zj5FbYm
-----END CERTIFICATE-----