Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS12129.roa
File:                     AS12129.roa (raw, json)
Hash identifier:          E36SHUFpz7TsjLoDXNOuUO2D7Mi/eFWM66tsbUgMI4o=
Subject key identifier:   91:21:D4:05:31:69:16:0F:75:7D:79:21:BC:51:EF:8A:29:6A:18:F9
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       DBDCE51D7A388C6B6DAEE1BF1782744E95A96C
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS12129.roa
Signing time:             Sat 27 Aug 2022 09:42:41 +0000
ROA not before:           Sat 27 Aug 2022 09:37:41 +0000
ROA not after:            Sat 26 Aug 2023 09:42:41 +0000
asID:                     12129
IP address blocks:        181.214.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            db:dc:e5:1d:7a:38:8c:6b:6d:ae:e1:bf:17:82:74:4e:95:a9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:37:41 2022 GMT
            Not After : Aug 26 09:42:41 2023 GMT
        Subject: CN=9121D4053169160F757D7921BC51EF8A296A18F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:7f:58:e4:2a:29:6b:0f:be:90:cd:8d:aa:
                    ea:c7:b7:13:56:f9:a8:9d:d0:1a:de:4b:2d:3c:7d:
                    dc:6c:a8:19:74:a2:58:46:51:72:f0:c1:17:bc:d3:
                    d1:49:43:7a:9c:bb:25:dc:be:ca:29:ef:52:6a:eb:
                    fe:1f:f2:c3:e1:8a:f9:b2:9e:b4:63:ba:9e:86:d0:
                    34:bb:aa:7a:cf:6e:7f:e4:d1:60:b1:28:3e:80:9a:
                    96:a6:aa:29:cd:26:63:28:fc:09:eb:79:2e:eb:1a:
                    d5:f1:22:44:73:b7:78:50:b5:e1:10:35:0c:f9:f5:
                    d1:d0:e2:8d:54:23:06:78:5c:71:d6:12:77:b8:a5:
                    d4:ab:a6:76:32:39:16:70:51:09:af:12:4a:1e:55:
                    7b:de:8a:00:33:d2:62:b7:39:84:52:82:90:52:90:
                    9d:63:6b:ab:aa:45:55:ad:d5:98:27:2d:7d:c1:78:
                    3f:8c:63:d6:36:9d:fc:ce:0c:f5:e8:ce:06:19:95:
                    b0:b8:81:02:46:6f:2f:a4:98:24:79:c8:dc:65:53:
                    9d:39:c8:0e:63:ab:fa:69:f0:ee:50:af:38:6c:e7:
                    cf:01:ab:32:23:db:a3:44:3e:37:10:bf:bb:6d:53:
                    86:32:08:78:93:f8:fd:58:a0:c1:d0:10:8f:ae:13:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:21:D4:05:31:69:16:0F:75:7D:79:21:BC:51:EF:8A:29:6A:18:F9
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS12129.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:f4:67:c0:6e:9d:13:cb:60:f1:16:41:41:a3:f6:19:b2:8d:
         12:4c:ac:95:dc:78:45:a8:bd:c5:36:03:88:38:2f:12:26:f3:
         b8:df:9a:02:1c:15:1e:6a:96:4a:d7:6f:b5:8e:ab:0e:8e:83:
         fa:31:f8:32:1c:c5:20:a6:65:f4:40:4a:50:8e:64:2d:11:cc:
         a1:f7:dc:91:69:98:3f:be:ba:33:5a:86:68:41:8d:6d:42:b1:
         42:af:e4:16:fa:9e:1e:56:38:20:c0:06:00:0b:8e:d4:3e:6b:
         52:e9:dd:67:21:6b:23:f4:c3:e7:77:1d:d4:66:81:fb:7f:ff:
         ea:05:83:c5:ad:eb:fd:cc:57:86:85:5a:87:5c:fb:ac:09:a7:
         09:05:ad:f5:14:b2:39:72:74:ee:7e:9d:22:da:84:36:af:8c:
         13:e9:4e:02:d3:74:61:9e:0c:83:90:19:21:f5:10:0f:a0:67:
         75:2c:09:9b:b9:29:d3:02:82:e9:9f:38:65:21:ed:ae:a5:c6:
         07:cc:f2:01:53:88:b9:11:3a:70:c2:da:6b:45:eb:a2:4d:3e:
         82:59:93:20:91:4c:5d:3b:d6:a9:e7:0f:18:ee:e0:6d:94:25:
         09:cd:3f:26:44:8d:cd:e8:15:29:67:e0:de:c6:10:d5:7d:7a:
         b6:7b:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org