Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234342e302f32322d3234203d3e2037303239.roa
File:                     3230392e3230302e3234342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          nezQAwUuOkTAjZo6VQv/NGrH1SJrRyV0HICRtypkH30=
Subject key identifier:   8C:9A:FE:60:67:61:C6:A8:0A:ED:3F:ED:E2:86:18:EE:4E:C1:C9:B4
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       302BEBCB16581326DD04B502223B85C54849A464
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234342e302f32322d3234203d3e2037303239.roa
Signing time:             Mon 25 Oct 2021 12:58:00 +0000
ROA not before:           Mon 25 Oct 2021 12:53:00 +0000
ROA not after:            Mon 24 Oct 2022 12:58:00 +0000
asID:                     7029
IP address blocks:        209.200.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2b:eb:cb:16:58:13:26:dd:04:b5:02:22:3b:85:c5:48:49:a4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Oct 25 12:53:00 2021 GMT
            Not After : Oct 24 12:58:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:4f:eb:a6:85:9c:d3:dd:75:92:d5:af:69:
                    fd:36:c5:d4:41:02:21:22:f5:9c:af:44:b1:4c:55:
                    fe:fc:fb:58:61:87:26:4e:c6:62:46:28:86:52:63:
                    de:8f:bb:1c:48:0b:95:11:f5:72:ac:7f:b0:5f:02:
                    de:08:42:43:6e:18:61:1d:ce:2e:37:c5:4b:e9:02:
                    05:72:a5:72:06:08:47:08:95:70:d9:2e:af:ad:c5:
                    55:ac:a6:c1:98:d4:cc:41:d7:2c:79:da:f4:77:b9:
                    bd:6a:f7:7d:d8:fc:dd:37:77:8b:b4:e1:f0:1c:d5:
                    e0:21:91:a8:0f:b5:7b:c3:cf:a0:22:51:b1:b7:62:
                    ab:d7:30:c7:94:fb:51:63:19:56:fd:ab:73:c9:fd:
                    2d:d5:3a:03:32:e2:22:c7:c4:48:98:ff:11:11:dd:
                    04:be:38:5c:41:72:c4:35:fe:b3:d7:85:0f:74:7d:
                    5d:a6:ea:48:e9:45:43:43:5e:f7:61:40:fd:3c:bb:
                    4e:02:64:61:a0:b9:5f:f8:95:6c:02:5e:ea:f2:71:
                    d4:78:f0:fd:bc:31:7d:d5:a4:aa:c4:4f:dc:45:e3:
                    f3:cc:ec:db:43:49:c8:a0:b4:9e:9e:07:e7:da:af:
                    c7:b4:52:a0:1d:64:b1:9c:b4:47:7f:5d:57:97:9c:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9A:FE:60:67:61:C6:A8:0A:ED:3F:ED:E2:86:18:EE:4E:C1:C9:B4
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/3230392e3230302e3234342e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:38:06:ea:f3:c6:3b:d2:2f:ab:8e:e1:81:51:70:ec:9d:da:
         65:84:1d:01:50:fa:a2:30:bc:52:20:62:34:34:cf:ec:42:01:
         f9:34:a9:d6:f0:b3:fd:4a:95:03:98:30:e3:12:88:86:2b:9f:
         59:8c:17:1c:be:07:f5:bf:7d:12:ef:8a:80:f3:63:31:2e:d0:
         e6:07:22:29:92:20:24:06:45:24:b8:7e:2c:a3:ca:38:81:15:
         fa:09:47:98:0d:f9:7c:08:c3:40:7c:bc:73:dd:4c:dc:1e:bf:
         c9:50:66:63:f1:51:05:58:3f:9e:4a:da:b5:d5:87:99:bf:85:
         0d:69:4f:cc:f3:a0:45:1d:74:11:70:bb:63:f8:e2:fb:3a:b1:
         27:18:05:53:53:e4:46:2b:43:b8:ba:7a:e0:d2:4e:32:0f:99:
         0b:3b:eb:c9:c1:a1:48:65:27:10:e0:0d:9d:3c:09:94:ea:d7:
         10:d3:7c:ab:95:03:30:cf:42:52:85:30:a2:85:c1:c4:8b:10:
         4c:6e:ee:ff:7a:bd:45:c5:7f:23:b2:88:f8:c4:29:c3:40:7f:
         f3:50:4f:1e:8b:eb:0a:8b:da:97:3d:1d:64:f2:72:00:df:59:
         ee:83:99:9b:84:2c:5c:c8:a8:38:2a:ec:6f:36:16:d8:4a:c8:
         57:46:f4:f2
-----BEGIN CERTIFICATE-----
MIIHSzCCBjOgAwIBAgIUMCvryxZYEybdBLUCIjuFxUhJpGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMTEwMjUxMjUzMDBaFw0yMjEwMjQxMjU4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjlDOTRGRUJBNjg1OUNEM0RE
NzU5MkQ1QUY2OUZEMzZDNUQ0NDEwMjIxMjJGNTlDQUY0NEIxNEM1NUZFRkNGQjU4
NjE4NzI2NEVDNjYyNDYyODg2NTI2M0RFOEZCQjFDNDgwQjk1MTFGNTcyQUM3RkIw
NUYwMkRFMDg0MjQzNkUxODYxMURDRTJFMzdDNTRCRTkwMjA1NzJBNTcyMDYwODQ3
MDg5NTcwRDkyRUFGQURDNTU1QUNBNkMxOThENENDNDFENzJDNzlEQUY0NzdCOUJE
NkFGNzdERDhGQ0REMzc3NzhCQjRFMUYwMUNENUUwMjE5MUE4MEZCNTdCQzNDRkEw
MjI1MUIxQjc2MkFCRDczMEM3OTRGQjUxNjMxOTU2RkRBQjczQzlGRDJERDUzQTAz
MzJFMjIyQzdDNDQ4OThGRjExMTFERDA0QkUzODVDNDE3MkM0MzVGRUIzRDc4NTBG
NzQ3RDVEQTZFQTQ4RTk0NTQzNDM1RUY3NjE0MEZEM0NCQjRFMDI2NDYxQTBCOTVG
Rjg5NTZDMDI1RUVBRjI3MUQ0NzhGMEZEQkMzMTdERDVBNEFBQzQ0RkRDNDVFM0Yz
Q0NFQ0RCNDM0OUM4QTBCNDlFOUUwN0U3REFBRkM3QjQ1MkEwMUQ2NEIxOUNCNDQ3
N0Y1RDU3OTc5QzIzQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuclP66aFnNPddZLVr2n9NsXUQQIhIvWcr0SxTFX+/PtYYYcmTsZi
RiiGUmPej7scSAuVEfVyrH+wXwLeCEJDbhhhHc4uN8VL6QIFcqVyBghHCJVw2S6v
rcVVrKbBmNTMQdcsedr0d7m9avd92PzdN3eLtOHwHNXgIZGoD7V7w8+gIlGxt2Kr
1zDHlPtRYxlW/atzyf0t1ToDMuIix8RImP8REd0EvjhcQXLENf6z14UPdH1dpupI
6UVDQ173YUD9PLtOAmRhoLlf+JVsAl7q8nHUePD9vDF91aSqxE/cRePzzOzbQ0nI
oLSengfn2q/HtFKgHWSxnLRHf11Xl5wjtQIDAQABo4ICWTCCAlUwHQYDVR0OBBYE
FIya/mBnYcaoCu0/7eKGGO5Owcm0MB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEG
CCsGAQUFBzALhoGEcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zMjMwMzkyZTMy
MzAzMDJlMzIzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzczMDMyMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALRyPQwDQYJKoZIhvcNAQELBQADggEBAL44BurzxjvSL6uO4YFRcOyd
2mWEHQFQ+qIwvFIgYjQ0z+xCAfk0qdbws/1KlQOYMOMSiIYrn1mMFxy+B/W/fRLv
ioDzYzEu0OYHIimSICQGRSS4fiyjyjiBFfoJR5gN+XwIw0B8vHPdTNwev8lQZmPx
UQVYP55K2rXVh5m/hQ1pT8zzoEUddBFwu2P44vs6sScYBVNT5EYrQ7i6euDSTjIP
mQs768nBoUhlJxDgDZ08CZTq1xDTfKuVAzDPQlKFMKKFwcSLEExu7v96vUXFfyOy
iPjEKcNAf/NQTx6L6wqL2pc9HWTycgDfWe6DmZuELFzIqDgq7G82FthKyFdG9PI=
-----END CERTIFICATE-----
Generated at Mon May 5 01:32:25 2025 by rpki-client