Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232332e302f32342d3234203d3e203631333137.roa
File:                     3138352e3232392e3232332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          /K9jP1ghf7s67BSdjjoe8EyjFHy7J9svKKHvFA2+ZVQ=
Subject key identifier:   B6:FE:2D:A1:EA:E5:9C:9F:C4:F4:B7:61:5B:45:16:C9:CC:E0:AB:93
Certificate issuer:       /CN=2329bd27416183c501e673bbf29a71a698b41c47
Certificate serial:       12FB06D49851B07501AC20299F80E35239E8B3DA
Authority key identifier: 23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232332e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 21 Nov 2022 18:37:27 +0000
ROA not before:           Mon 21 Nov 2022 18:32:27 +0000
ROA not after:            Mon 20 Nov 2023 18:37:27 +0000
asID:                     61317
IP address blocks:        185.229.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fb:06:d4:98:51:b0:75:01:ac:20:29:9f:80:e3:52:39:e8:b3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2329bd27416183c501e673bbf29a71a698b41c47
        Validity
            Not Before: Nov 21 18:32:27 2022 GMT
            Not After : Nov 20 18:37:27 2023 GMT
        Subject: CN=B6FE2DA1EAE59C9FC4F4B7615B4516C9CCE0AB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:a6:11:e4:17:33:42:3b:ea:7c:b1:8f:7b:
                    78:02:45:76:fe:47:f0:3f:70:65:e5:ff:9d:64:f2:
                    2c:5b:0f:48:01:3a:e8:28:3c:7c:69:16:be:dc:1a:
                    9a:fc:c3:ee:b4:91:c4:4a:ff:27:93:a7:0d:22:f0:
                    4c:49:00:13:5f:a1:4c:28:cc:f1:87:71:15:4a:88:
                    6b:2c:69:ee:23:ec:36:07:70:9f:76:5c:ca:81:d6:
                    bd:62:d4:db:4f:b0:6e:68:0c:f6:4f:02:89:c0:d0:
                    56:42:9d:8a:61:29:e5:b2:f5:ad:33:db:6a:ba:00:
                    92:fb:f0:36:4a:55:65:cb:a3:20:f7:48:ee:e7:73:
                    10:5e:f9:80:f0:d9:f1:44:ae:01:e7:66:38:4a:23:
                    f1:48:cc:c9:0b:2f:a4:08:88:3c:1e:93:59:71:3f:
                    88:45:e0:88:be:0a:b1:03:20:ea:57:f0:72:92:5b:
                    1e:29:e9:dc:a8:27:93:d7:dc:d0:1d:87:c2:18:92:
                    f5:08:29:4b:b0:bd:67:cd:26:cf:c3:c6:6f:13:5a:
                    dc:d4:a7:94:ef:48:ac:9b:29:62:1a:b8:07:51:e1:
                    49:4a:86:d7:71:67:ec:3b:db:b3:e3:2c:e3:cf:1a:
                    d6:4f:01:cf:86:4e:3a:1e:84:3b:32:2c:1b:d8:3d:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FE:2D:A1:EA:E5:9C:9F:C4:F4:B7:61:5B:45:16:C9:CC:E0:AB:93
            X509v3 Authority Key Identifier:
                keyid:23:29:BD:27:41:61:83:C5:01:E6:73:BB:F2:9A:71:A6:98:B4:1C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/2329BD27416183C501E673BBF29A71A698B41C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iym9J0Fhg8UB5nO78ppxppi0HEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/e85e3348-30c7-45bb-9f86-6285dfe96efa-0/0/3138352e3232392e3232332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:55:19:63:eb:ea:4f:de:47:f8:d2:b3:b9:ed:eb:bf:e4:81:
         41:19:2e:90:22:26:0d:58:42:a8:9b:a0:41:9c:68:f1:cf:1a:
         3e:84:9c:65:91:1c:4c:e2:80:7b:5e:3b:96:4e:3b:2a:2c:54:
         eb:2e:8b:36:6a:bc:9d:bd:a9:b0:28:f4:f2:9d:0f:b6:be:e9:
         92:b7:dc:dc:99:73:d5:d2:ba:1d:a5:fc:b9:d0:b4:41:d0:fa:
         50:48:9c:4a:77:72:7e:e9:ca:37:cb:2c:93:ad:2e:ed:90:af:
         6a:15:e7:04:5d:57:f1:98:86:7b:da:71:15:df:46:7a:ef:b2:
         8c:e7:4b:a8:18:98:10:37:cd:08:6f:68:dd:8d:46:75:ff:1e:
         fe:fa:f8:f7:65:d3:b2:59:4d:07:0c:d7:02:13:38:23:31:5d:
         94:c4:4a:4f:ce:d1:d9:7a:21:77:d6:22:38:a2:a9:c5:b6:c8:
         47:35:e2:e9:87:e4:bd:4d:ee:2f:46:9f:bc:02:53:d7:84:3b:
         04:74:04:9d:c1:41:57:d0:70:52:72:70:a0:ba:60:13:c7:dd:
         c7:3a:35:ed:de:51:1e:4f:fb:f7:8c:0c:24:6b:37:a2:6f:0b:
         d5:9a:8c:5d:a0:21:23:83:30:7e:9e:33:32:09:14:34:5a:80:
         86:4a:6d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:43 2023 by rpki-client on console-fra.rpki-client.org