Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e203631333137.roa
File:                     3138352e3232392e3232322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          HyCuQXaRo6W+QOaEu8jcf5PUjpB5tzkHRiw3oXzW4Aw=
Subject key identifier:   A2:80:50:69:22:DE:A5:EC:78:87:B2:BE:AB:65:A3:8A:25:AA:D4:14
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       520DFE902CDAA039C9955649D89A24B93B0D333B
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e203631333137.roa
Signing time:             Sat 22 Oct 2022 01:32:14 +0000
ROA not before:           Sat 22 Oct 2022 01:27:14 +0000
ROA not after:            Sat 21 Oct 2023 01:32:14 +0000
asID:                     61317
IP address blocks:        185.229.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0d:fe:90:2c:da:a0:39:c9:95:56:49:d8:9a:24:b9:3b:0d:33:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Oct 22 01:27:14 2022 GMT
            Not After : Oct 21 01:32:14 2023 GMT
        Subject: CN=A280506922DEA5EC7887B2BEAB65A38A25AAD414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:2c:cd:69:3e:08:48:c4:b7:0a:5a:9e:dd:
                    d3:ab:8d:8b:84:d4:76:ac:bb:d3:90:57:e3:01:fd:
                    81:43:ca:19:ee:a8:7e:00:62:2f:01:c8:4f:44:6e:
                    37:23:bf:3f:29:6e:77:d8:25:01:c4:f3:18:68:ff:
                    fc:18:3a:1f:d0:b1:c4:3a:15:a4:f4:14:fd:64:c1:
                    e1:29:a4:8c:bf:b0:a1:38:c3:48:e0:6d:36:4a:1f:
                    38:c7:31:f7:a7:dd:a8:dc:09:67:d4:2e:ad:f2:71:
                    52:ae:46:f8:b1:62:8b:ce:0d:53:b0:06:a4:76:b8:
                    9a:bc:ac:07:f8:a1:3b:02:6b:9e:12:aa:1b:6f:ef:
                    db:ff:00:44:c0:9f:57:0a:93:30:51:78:ad:41:80:
                    22:36:22:3f:e9:92:55:20:bb:de:12:f4:07:5c:1a:
                    a1:96:be:ab:94:ca:34:4b:de:8e:49:df:0c:83:c7:
                    4e:fe:1b:f4:bf:e2:2d:34:0a:1d:96:03:38:16:a5:
                    09:f0:05:7c:1d:c4:9c:01:49:67:76:5c:32:fa:4c:
                    99:8c:5c:18:f5:c7:88:d9:45:e0:b3:9b:68:a3:6b:
                    4f:ff:69:aa:92:d9:f3:5a:9a:3d:8b:f9:ae:f9:f0:
                    c0:3b:0a:80:32:f1:11:05:03:fb:ad:61:64:60:32:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:80:50:69:22:DE:A5:EC:78:87:B2:BE:AB:65:A3:8A:25:AA:D4:14
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:6f:17:83:e1:c2:04:8a:88:9f:cf:a6:1b:66:c5:98:2e:
         25:90:34:bb:d1:17:43:02:c9:04:14:02:b7:c9:64:74:76:ce:
         40:30:dc:75:eb:a1:ff:9e:a5:c7:db:79:5d:51:76:01:75:fd:
         d6:19:1c:41:2e:4a:94:4e:b6:44:4d:a4:bc:fe:27:30:57:fb:
         8f:db:4a:c3:09:f4:a2:40:26:28:f7:65:04:8b:ce:df:f1:33:
         90:e5:23:ee:e2:f3:3b:20:63:d1:39:1d:85:1b:dc:76:52:2b:
         a6:6f:9c:83:57:cf:ff:2f:db:5d:f1:7d:58:ce:8e:a0:3b:a7:
         b3:b6:35:cc:cb:71:f5:95:50:81:3a:2f:8e:0f:a8:36:8e:2a:
         67:83:e4:d1:65:d6:ae:fc:0b:53:1f:ea:5a:e5:d2:71:01:60:
         ff:f5:15:07:93:59:2b:20:6b:5c:21:ee:d2:ff:35:53:45:3a:
         77:da:60:05:c9:d6:3d:80:98:da:b2:f5:2f:50:fe:ee:67:60:
         d3:7e:8a:90:db:be:08:ac:43:5d:cb:63:1c:a0:33:62:6c:17:
         75:3a:65:6c:d8:6f:5f:56:c4:16:eb:b6:68:67:54:4d:96:3e:
         de:bb:d7:59:00:79:c0:bc:6a:89:9d:47:0d:17:9a:bd:c4:a7:
         60:af:89:5a
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUUg3+kCzaoDnJlVZJ2JokuTsNMzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjMyOWJkMjc0MTYxODNjNTAxZTY3M2JiZjI5YTcxYTY5
OGI0MWM0NzAeFw0yMjEwMjIwMTI3MTRaFw0yMzEwMjEwMTMyMTRaMDMxMTAvBgNV
BAMTKEEyODA1MDY5MjJERUE1RUM3ODg3QjJCRUFCNjVBMzhBMjVBQUQ0MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRizNaT4ISMS3Clqe3dOrjYuE
1Hasu9OQV+MB/YFDyhnuqH4AYi8ByE9Ebjcjvz8pbnfYJQHE8xho//wYOh/QscQ6
FaT0FP1kweEppIy/sKE4w0jgbTZKHzjHMfen3ajcCWfULq3ycVKuRvixYovODVOw
BqR2uJq8rAf4oTsCa54Sqhtv79v/AETAn1cKkzBReK1BgCI2Ij/pklUgu94S9Adc
GqGWvquUyjRL3o5J3wyDx07+G/S/4i00Ch2WAzgWpQnwBXwdxJwBSWd2XDL6TJmM
XBj1x4jZReCzm2ija0//aaqS2fNamj2L+a758MA7CoAy8REFA/utYWRgMk2VAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUooBQaSLepex4h7K+q2WjiiWq1BQwHwYDVR0j
BBgwFoAUIym9J0Fhg8UB5nO78ppxppi0HEcwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2ZWZhLTAvMC8yMzI5QkQy
NzQxNjE4M0M1MDFFNjczQkJGMjlBNzFBNjk4QjQxQzQ3LmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvSXltOUowRmhnOFVCNW5PNzhwcHhwcGkwSEVjLmNlcjCBpgYI
KwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9yLm1hZ2VsbGFu
LmlweG8uY29tL3JlcG8vZTg1ZTMzNDgtMzBjNy00NWJiLTlmODYtNjI4NWRmZTk2
ZWZhLTAvMC8zMTM4MzUyZTMyMzIzOTJlMzIzMjMyMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnl3jANBgkqhkiG9w0BAQsFAAOC
AQEADMdvF4PhwgSKiJ/PphtmxZguJZA0u9EXQwLJBBQCt8lkdHbOQDDcdeuh/56l
x9t5XVF2AXX91hkcQS5KlE62RE2kvP4nMFf7j9tKwwn0okAmKPdlBIvO3/EzkOUj
7uLzOyBj0TkdhRvcdlIrpm+cg1fP/y/bXfF9WM6OoDuns7Y1zMtx9ZVQgTovjg+o
No4qZ4Pk0WXWrvwLUx/qWuXScQFg//UVB5NZKyBrXCHu0v81U0U6d9pgBcnWPYCY
2rL1L1D+7mdg036KkNu+CKxDXctjHKAzYmwXdTplbNhvX1bEFuu2aGdUTZY+3rvX
WQB5wLxqiZ1HDReavcSnYK+JWg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:58 2023 by rpki-client on console-ams.rpki-client.org