Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232382e302f32322d3234203d3e2037303239.roa
File:                     3230392e3230302e3232382e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          x/0GY2jX1qKxJjy5eDdmwO4woSLLPgsvQtwYtJednSA=
Subject key identifier:   2C:B9:3E:64:41:D6:07:95:7D:5C:65:F4:39:3E:69:49:0D:9C:5D:64
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       1A5D382670EFE1D4779B82B9408D1A63AF888697
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232382e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:57:38 +0000
ROA not before:           Mon 25 Oct 2021 12:52:38 +0000
ROA not after:            Mon 24 Oct 2022 12:57:38 +0000
asID:                     7029
IP address blocks:        209.200.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5d:38:26:70:ef:e1:d4:77:9b:82:b9:40:8d:1a:63:af:88:86:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:52:38 2021 GMT
            Not After : Oct 24 12:57:38 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:52:6a:a3:68:99:7e:9f:ef:73:f6:71:b2:c4:
                    c2:78:cd:ec:f2:42:cc:70:62:81:39:f9:33:ec:e4:
                    42:d0:32:ac:ac:3c:77:46:bc:2c:c9:cd:22:b5:9c:
                    71:cb:8d:59:c0:ec:30:ed:63:1a:01:73:57:66:6f:
                    ab:97:69:7b:2b:51:c5:61:2f:52:cc:ae:c2:13:af:
                    91:c4:f7:a4:59:7f:45:d3:82:a3:67:f7:23:21:93:
                    c5:5c:12:c1:4e:e4:ba:97:e8:e4:e4:72:66:c8:d1:
                    67:7c:5b:03:e9:aa:29:1b:5f:f6:32:f0:79:c4:b9:
                    36:98:0f:13:67:46:8b:7c:29:df:44:45:8c:8b:be:
                    de:b7:05:c5:04:27:c1:ce:43:3b:14:bb:09:65:0f:
                    32:41:68:70:ee:7f:2e:b0:4c:49:45:f6:4b:a0:6c:
                    33:f3:de:ec:ca:24:b6:38:62:b6:dc:25:53:e6:95:
                    61:71:a2:f7:7f:69:f5:35:12:bb:ef:2c:e3:b5:95:
                    23:b1:7a:e1:5f:ca:b2:71:ec:e4:fe:71:57:9f:8e:
                    02:ca:8e:63:24:8a:3b:ce:a0:68:36:74:a3:0e:56:
                    8c:b6:92:70:68:20:c1:8e:4f:bd:cd:8c:7f:61:c7:
                    87:41:6d:82:b2:4c:fd:fc:8f:f5:ae:56:00:82:ae:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B9:3E:64:41:D6:07:95:7D:5C:65:F4:39:3E:69:49:0D:9C:5D:64
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3232382e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:f6:5a:a7:d0:bb:33:2f:2a:6e:c7:53:72:6d:57:6d:43:09:
         9d:cf:9e:44:c1:1f:1a:33:df:a8:dd:20:47:f4:fa:33:e9:55:
         3b:e7:af:55:c7:e9:f0:d0:cf:fd:ec:77:31:1d:94:a9:39:17:
         a5:8d:5f:cb:cf:94:40:2f:e0:e8:7c:14:bc:e4:37:e7:9c:dc:
         d6:e3:e8:3b:c4:dc:63:71:32:57:d1:64:35:a4:f6:fb:fc:70:
         c7:08:52:fd:0a:f1:ae:e9:f5:f3:41:f2:62:73:da:5f:07:84:
         d6:f0:91:7b:55:bb:fd:bf:c0:96:07:8c:14:af:f7:57:28:97:
         17:ba:17:bb:78:ba:d2:d3:7f:d3:1f:09:3a:07:ae:72:d6:39:
         ea:81:a1:e8:32:0e:64:62:75:ee:cc:5c:ea:db:97:62:2d:2e:
         b8:8f:d2:b7:4d:1d:3b:f5:f0:a4:ce:01:f5:00:53:07:1b:84:
         be:0c:3e:16:c3:67:ef:52:cf:e8:4d:b4:e3:5d:ea:e9:73:dc:
         35:0d:a8:23:82:9e:91:a3:59:49:f3:2f:81:6a:d6:0f:57:db:
         a9:ee:d4:7b:e9:ad:c1:95:81:09:41:ab:4d:9a:78:27:3a:3a:
         47:81:eb:2e:43:1a:dc:f5:84:28:40:82:39:dd:01:37:d3:a0:
         dc:80:d5:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net