Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131372e302f32342d3234203d3e203631333137.roa
File:                     34352e3135362e3131372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          7j4XTHWhhRhGSOItMbOOnrvSS7qyik6cgcdl17xH3VE=
Subject key identifier:   D4:17:72:4E:D7:53:0F:A0:F3:4E:F4:C7:32:B4:E3:29:16:25:34:5D
Certificate issuer:       /CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
Certificate serial:       12901905950FD07F667C5C5EA8752203B3DA31B3
Authority key identifier: 2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131372e302f32342d3234203d3e203631333137.roa
Signing time:             Fri 21 Oct 2022 06:35:20 +0000
ROA not before:           Fri 21 Oct 2022 06:30:20 +0000
ROA not after:            Fri 20 Oct 2023 06:35:20 +0000
asID:                     61317
IP address blocks:        45.156.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:90:19:05:95:0f:d0:7f:66:7c:5c:5e:a8:75:22:03:b3:da:31:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c7a75fc351bfd249e61cb99aca4a2f63f706333
        Validity
            Not Before: Oct 21 06:30:20 2022 GMT
            Not After : Oct 20 06:35:20 2023 GMT
        Subject: CN=D417724ED7530FA0F34EF4C732B4E3291625345D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:da:74:2a:fb:c0:6c:e6:19:46:05:88:e7:99:
                    d4:74:b4:17:25:77:2c:7b:fe:56:83:5b:e2:45:51:
                    36:ee:39:40:e7:3f:7b:75:b6:86:15:0f:e6:e4:80:
                    14:3b:07:f9:2b:2f:0f:22:1e:7b:71:94:25:2e:a6:
                    2f:60:4f:5f:84:c9:09:94:e0:65:f9:9d:46:81:49:
                    af:fc:b0:10:02:9c:1b:77:6f:9a:d5:32:a3:92:88:
                    fd:c3:f8:59:23:72:84:7c:d4:d6:f0:48:50:b9:f0:
                    a5:be:58:c9:7e:64:a0:39:d3:99:59:4a:9a:a8:20:
                    48:eb:b8:6d:28:c1:a0:a9:d5:2a:ab:b2:f9:25:d8:
                    e6:58:a5:a7:5a:5d:92:b3:44:27:c2:00:2d:a9:9e:
                    96:fc:43:b4:89:c7:be:61:4e:25:98:da:06:8a:94:
                    d4:05:74:51:e8:6a:ca:8d:a8:0f:69:7e:e1:69:de:
                    a3:ae:61:a3:9e:c0:7b:ed:13:09:6c:b0:8c:6f:b3:
                    ae:b0:47:89:52:65:9d:8e:60:b4:f8:a2:1d:e6:13:
                    c6:6b:a4:a5:90:32:37:41:c3:49:f6:b8:bb:db:0e:
                    46:b7:b4:44:72:20:fb:d5:65:27:33:c7:b5:e6:c8:
                    12:e6:ab:48:51:b7:53:a9:ca:a0:4c:cc:fa:4e:28:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:17:72:4E:D7:53:0F:A0:F3:4E:F4:C7:32:B4:E3:29:16:25:34:5D
            X509v3 Authority Key Identifier:
                keyid:2C:7A:75:FC:35:1B:FD:24:9E:61:CB:99:AC:A4:A2:F6:3F:70:63:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/2C7A75FC351BFD249E61CB99ACA4A2F63F706333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHp1_DUb_SSeYcuZrKSi9j9wYzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db0eb802-9041-4a81-8afd-856c59c039a7-0/1/34352e3135362e3131372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:17:bb:2b:d6:d9:84:f2:0a:dc:fa:7c:91:b2:9f:ed:f9:df:
         db:68:85:d9:c6:cd:b5:5d:84:cc:2f:77:5f:d1:a8:4a:79:92:
         94:b7:88:06:49:41:bf:5d:92:9e:d6:75:68:50:38:c4:69:67:
         07:a0:f2:33:e5:76:22:51:d4:c3:dd:6b:3c:0c:59:c9:72:25:
         d1:a8:5b:91:e9:8a:fb:36:1e:33:f9:af:88:fa:a8:bf:58:36:
         ce:42:45:83:a0:8b:28:03:f3:a5:40:ec:33:95:a3:e9:5d:86:
         87:65:fd:68:e5:6a:d4:15:38:e2:57:f6:2c:8d:5f:28:e7:b1:
         a7:f0:91:98:49:4d:8f:4b:df:a0:58:ab:4e:12:4d:ee:b6:3a:
         a3:0b:6c:d6:8b:9d:c3:01:40:36:15:45:fa:66:5a:fc:14:1c:
         8b:45:5e:34:30:90:48:54:25:15:95:23:f1:eb:97:87:37:95:
         76:d3:73:08:4f:fe:87:80:cd:cc:46:b1:52:27:8c:95:59:e1:
         b3:a8:52:1c:77:70:83:65:19:79:5a:bd:23:e9:b8:4b:c6:c4:
         da:1a:e9:fe:76:cf:b6:74:e0:38:36:42:a2:f2:42:18:e0:f4:
         67:a7:56:75:88:72:88:d6:35:9c:31:9e:03:e6:d9:07:0f:17:
         eb:79:74:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org