Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e203434353437.roa
File:                     3138352e3232392e3232322e302f32342d3234203d3e203434353437.roa (raw, json)
Hash identifier:          4+hNxswu73hbyAsCysR6xKhd8Qq5HeTPAEJz3r9VxRw=
Subject key identifier:   22:76:C4:A2:EF:55:F2:92:3C:87:34:E8:7B:2E:7F:EA:A9:DB:CF:2F
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       5C780DDB29B5D52DD15DDE5B34BCCB6C90927007
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e203434353437.roa
Signing time:             Fri 24 Feb 2023 12:18:42 +0000
ROA not before:           Fri 24 Feb 2023 12:13:42 +0000
ROA not after:            Fri 23 Feb 2024 12:18:42 +0000
asID:                     44547
IP address blocks:        185.229.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:78:0d:db:29:b5:d5:2d:d1:5d:de:5b:34:bc:cb:6c:90:92:70:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Feb 24 12:13:42 2023 GMT
            Not After : Feb 23 12:18:42 2024 GMT
        Subject: CN=2276C4A2EF55F2923C8734E87B2E7FEAA9DBCF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c0:f3:05:ee:e8:a8:e3:54:c6:65:c2:0f:fc:
                    0e:92:1c:36:cc:bd:1b:bd:78:3e:64:ca:94:c3:9e:
                    65:c8:9b:56:9a:74:c6:91:02:f5:ff:1c:b5:a1:7b:
                    5c:d7:18:87:28:5c:c2:08:ee:c2:08:b7:de:1d:20:
                    df:14:fc:9d:e9:5a:c5:83:44:34:2d:94:27:f9:b8:
                    1e:2f:ed:65:c6:a9:f9:f9:81:5c:43:2f:60:12:1b:
                    8d:da:1f:1d:6b:66:cd:63:69:ea:57:7e:1c:13:f5:
                    7d:84:55:45:b6:0c:4c:82:9e:6c:cd:f7:14:a5:e2:
                    08:63:b5:52:29:4b:24:da:04:14:44:91:62:4b:35:
                    9c:54:30:de:98:19:ed:81:69:45:c0:8f:32:48:e3:
                    3f:1f:4d:8d:f0:c0:05:b8:35:85:12:d7:1a:28:ef:
                    c8:30:54:94:9a:6e:c5:7b:a4:eb:8e:45:c5:b6:d5:
                    19:52:42:d9:5d:a5:f8:f3:58:b8:31:27:99:95:37:
                    0a:54:1a:57:6e:d3:2a:c2:06:6c:f1:5f:9d:83:d4:
                    55:af:09:55:e4:5f:7e:0d:53:59:fc:09:05:81:24:
                    93:16:8b:72:18:b5:2f:cd:39:8d:b7:ed:2f:27:51:
                    54:00:61:f0:da:df:82:7d:db:dc:13:69:87:42:08:
                    c8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:C4:A2:EF:55:F2:92:3C:87:34:E8:7B:2E:7F:EA:A9:DB:CF:2F
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e203434353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:65:7c:e5:b0:a3:57:2c:54:46:98:4c:d9:db:c5:1c:6e:0b:
         4a:de:84:dd:db:2a:b1:8d:78:3b:bf:db:b4:8c:25:70:02:c3:
         02:24:68:9c:53:f1:a1:18:68:f6:b4:8f:b1:ca:4e:0b:5c:fd:
         3d:a6:4d:80:f0:c7:f1:9e:b0:0b:8d:c8:4a:f3:31:64:d6:4a:
         6c:35:7a:29:76:9d:48:04:65:91:88:59:ed:ea:7c:c9:19:09:
         7a:21:d2:ac:61:ee:d3:03:5c:00:07:41:bc:4d:3d:5c:5b:39:
         73:51:29:c5:08:85:1a:45:4c:29:37:11:1c:4d:f6:6b:b3:8f:
         89:47:78:86:de:9e:1d:5b:19:6a:52:2c:48:46:dd:d0:82:3f:
         d2:a6:c9:76:88:c7:f9:62:f2:73:c6:f4:1c:95:a4:74:3c:34:
         d3:4b:11:af:1a:08:bb:ab:ad:01:48:fd:55:38:e1:53:c4:f1:
         34:96:01:4f:ff:fe:49:d0:97:b0:4b:f9:5b:92:9a:7c:f1:d9:
         cb:af:e5:bb:db:74:72:c4:d9:8e:4a:9f:8e:cf:a8:87:26:04:
         c7:4d:ac:79:36:b7:14:ae:12:10:39:27:fe:69:74:40:10:bb:
         e9:96:c3:9f:55:06:72:60:18:a0:e3:d9:2c:18:84:f0:2f:df:
         8f:67:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org