Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234382e302f32322d3232203d3e2031323339.roa
File:                     3230392e3230302e3234382e302f32322d3232203d3e2031323339.roa (raw, json)
Hash identifier:          Fh2LGXpgCIRwPpdL7ZdIbAW++hahsppv4MG1S5qq5Wc=
Subject key identifier:   57:05:2F:A8:13:B5:9F:70:35:FA:FF:F6:20:15:56:C0:78:6D:2F:43
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       23547F89DFF845108726714CD4D21685E680D0DC
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234382e302f32322d3232203d3e2031323339.roa
Signing time:             Mon 28 Feb 2022 17:51:48 +0000
ROA not before:           Mon 28 Feb 2022 17:46:48 +0000
ROA not after:            Mon 27 Feb 2023 17:51:48 +0000
asID:                     1239
IP address blocks:        209.200.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:54:7f:89:df:f8:45:10:87:26:71:4c:d4:d2:16:85:e6:80:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Feb 28 17:46:48 2022 GMT
            Not After : Feb 27 17:51:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:d4:6b:5b:b7:0e:04:d6:f3:67:9b:aa:44:
                    60:23:66:a7:6b:10:f6:79:ff:99:76:16:d4:b7:7b:
                    72:86:62:5e:80:55:d2:40:8c:45:e0:d3:cc:9d:56:
                    2c:ae:13:7f:2f:e2:ce:f9:66:19:f6:f5:5f:cd:2e:
                    99:c2:74:1d:66:5d:f5:d3:7f:bf:0a:0b:cc:6c:49:
                    5d:2b:f2:ba:c3:c4:c1:d8:f4:07:f4:3d:79:d3:70:
                    28:47:50:a7:47:20:99:b1:b6:8e:8c:bb:7d:9a:63:
                    59:72:5c:b5:54:43:64:3e:d2:ee:47:d3:43:08:95:
                    57:98:c7:fe:95:b2:23:24:ea:84:b3:8f:e7:a6:98:
                    32:a7:74:f5:c9:87:e0:b4:e6:57:07:77:62:e1:39:
                    53:d0:ed:93:c3:df:47:41:aa:7e:2f:3f:55:7e:52:
                    2e:3d:34:45:27:c8:f1:2a:90:b9:40:66:7c:9b:f8:
                    c5:de:de:1d:29:e9:67:a6:66:c6:c2:93:b1:d9:1c:
                    ac:97:d0:db:b0:2a:10:0a:d7:c0:54:71:9b:42:87:
                    23:60:41:04:4a:14:93:eb:03:30:c1:ac:1b:f9:f4:
                    99:41:87:b5:51:32:16:82:dc:6d:7f:cd:46:60:14:
                    9e:b0:76:ff:81:c8:61:ce:20:4d:fb:b8:bf:16:45:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:05:2F:A8:13:B5:9F:70:35:FA:FF:F6:20:15:56:C0:78:6D:2F:43
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234382e302f32322d3232203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:5e:04:f4:00:4f:c3:2e:16:25:aa:34:87:e3:1a:62:3e:c0:
         94:38:87:12:73:3d:cf:75:19:1f:f0:61:22:69:fe:b4:25:44:
         97:33:89:2a:1f:90:7a:a8:81:00:90:b9:5b:21:21:ea:33:76:
         52:87:18:32:e5:80:38:88:a3:d2:f2:1c:aa:21:44:c8:14:02:
         4f:00:6f:4e:34:43:2d:42:5c:94:c9:41:8b:9e:0e:9d:a1:dd:
         a8:38:f5:58:9b:49:f2:d2:2e:1a:56:68:a7:86:fb:fb:b1:c5:
         5f:40:4c:06:a1:ff:03:29:e1:35:1e:76:8e:ef:6a:d0:ae:5c:
         c3:35:57:93:71:25:13:5b:96:d9:46:4c:d7:ec:dc:41:80:ee:
         2c:dd:a6:6f:c2:8a:f8:17:06:34:ff:7e:02:5e:1d:a9:2f:63:
         f9:75:c2:d0:79:0c:32:90:85:83:e0:95:84:1c:9f:8c:92:ae:
         6e:95:9d:ea:bf:a4:dc:bb:f5:79:f1:97:88:80:81:5f:f0:b2:
         34:9e:93:a2:53:0d:17:a5:59:94:4f:16:0c:f8:c1:c3:4e:9d:
         7a:a7:82:45:8c:b6:6c:d2:1f:74:ea:a7:d8:4b:5f:a4:fe:71:
         41:25:bc:dc:9f:d0:5e:11:7b:93:c9:2c:6b:8f:f8:8c:0d:73:
         8e:92:33:fc
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUI1R/id/4RRCHJnFM1NIWheaA0NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjAyMjgxNzQ2NDhaFw0yMzAyMjcxNzUxNDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzU3NUQ0NkI1QkI3MEUwNEQ2
RjM2NzlCQUE0NDYwMjM2NkE3NkIxMEY2NzlGRjk5NzYxNkQ0Qjc3QjcyODY2MjVF
ODA1NUQyNDA4QzQ1RTBEM0NDOUQ1NjJDQUUxMzdGMkZFMkNFRjk2NjE5RjZGNTVG
Q0QyRTk5QzI3NDFENjY1REY1RDM3RkJGMEEwQkNDNkM0OTVEMkJGMkJBQzNDNEMx
RDhGNDA3RjQzRDc5RDM3MDI4NDc1MEE3NDcyMDk5QjFCNjhFOENCQjdEOUE2MzU5
NzI1Q0I1NTQ0MzY0M0VEMkVFNDdEMzQzMDg5NTU3OThDN0ZFOTVCMjIzMjRFQTg0
QjM4RkU3QTY5ODMyQTc3NEY1Qzk4N0UwQjRFNjU3MDc3NzYyRTEzOTUzRDBFRDkz
QzNERjQ3NDFBQTdFMkYzRjU1N0U1MjJFM0QzNDQ1MjdDOEYxMkE5MEI5NDA2NjdD
OUJGOEM1REVERTFEMjlFOTY3QTY2NkM2QzI5M0IxRDkxQ0FDOTdEMERCQjAyQTEw
MEFEN0MwNTQ3MTlCNDI4NzIzNjA0MTA0NEExNDkzRUIwMzMwQzFBQzFCRjlGNDk5
NDE4N0I1NTEzMjE2ODJEQzZEN0ZDRDQ2NjAxNDlFQjA3NkZGODFDODYxQ0UyMDRE
RkJCOEJGMTY0NUJCMzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxXXUa1u3DgTW82ebqkRgI2anaxD2ef+ZdhbUt3tyhmJegFXSQIxF
4NPMnVYsrhN/L+LO+WYZ9vVfzS6ZwnQdZl3103+/CgvMbEldK/K6w8TB2PQH9D15
03AoR1CnRyCZsbaOjLt9mmNZcly1VENkPtLuR9NDCJVXmMf+lbIjJOqEs4/nppgy
p3T1yYfgtOZXB3di4TlT0O2Tw99HQap+Lz9VflIuPTRFJ8jxKpC5QGZ8m/jF3t4d
KelnpmbGwpOx2Rysl9DbsCoQCtfAVHGbQocjYEEEShST6wMwwawb+fSZQYe1UTIW
gtxtf81GYBSesHb/gchhziBN+7i/FkW7NQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FFcFL6gTtZ9wNfr/9iAVVsB4bS9DMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMwMzkyZTMy
MzAzMDJlMzIzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzMjMzMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALRyPgwDQYJKoZIhvcNAQELBQADggEBAAVeBPQAT8MuFiWqNIfjGmI+
wJQ4hxJzPc91GR/wYSJp/rQlRJcziSofkHqogQCQuVshIeozdlKHGDLlgDiIo9Ly
HKohRMgUAk8Ab040Qy1CXJTJQYueDp2h3ag49VibSfLSLhpWaKeG+/uxxV9ATAah
/wMp4TUedo7vatCuXMM1V5NxJRNbltlGTNfs3EGA7izdpm/CivgXBjT/fgJeHakv
Y/l1wtB5DDKQhYPglYQcn4ySrm6Vneq/pNy79Xnxl4iAgV/wsjSek6JTDRelWZRP
Fgz4wcNOnXqngkWMtmzSH3Tqp9hLX6T+cUElvNyf0F4Re5PJLGuP+IwNc46SM/w=
-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net