Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS140641.roa
File:                     AS140641.roa (raw, json)
Hash identifier:          Oee8MSeEfm+Aipe3h1fApfk8vfJ5jMUUfelSk7F2UYM=
Subject key identifier:   71:ED:FA:8E:DD:06:A0:3D:27:26:D4:30:25:A5:76:3A:15:47:C3:71
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       7506E25422C26167C7051DACE0F39F055E6AD167
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS140641.roa
Signing time:             Tue 22 Nov 2022 15:42:00 +0000
ROA not before:           Tue 22 Nov 2022 15:37:00 +0000
ROA not after:            Tue 21 Nov 2023 15:42:00 +0000
asID:                     140641
IP address blocks:        191.96.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:06:e2:54:22:c2:61:67:c7:05:1d:ac:e0:f3:9f:05:5e:6a:d1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 22 15:37:00 2022 GMT
            Not After : Nov 21 15:42:00 2023 GMT
        Subject: CN=71EDFA8EDD06A03D2726D43025A5763A1547C371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:b6:8d:e4:f0:9c:38:f2:5d:75:23:77:f4:
                    ee:35:a5:8a:c7:01:c0:da:14:21:c6:e9:cf:86:83:
                    51:44:94:d7:e2:90:64:f2:f1:8f:0d:24:2d:04:45:
                    09:67:06:4f:79:3d:5c:01:23:4f:e4:46:92:88:d9:
                    f8:71:85:06:12:de:dc:bf:ff:b6:a9:a7:90:1f:34:
                    46:4a:a9:dd:ea:37:b3:bb:18:83:33:4c:95:93:06:
                    26:98:e8:54:de:41:ab:3c:01:d5:96:bb:0a:5a:87:
                    99:93:de:85:f2:1c:79:8d:34:4f:12:68:ed:58:59:
                    85:15:af:9f:2b:fc:28:5f:a5:78:c1:45:34:4e:2c:
                    93:d9:b3:fc:46:80:a0:7a:db:ca:f2:b2:fe:c9:5a:
                    5b:39:d0:f3:45:90:49:bd:f5:55:2a:97:51:cf:5f:
                    18:5d:83:45:62:f6:93:0f:c1:7c:fe:2d:cb:c0:b8:
                    42:5b:43:77:46:91:d9:2d:2c:5a:d9:93:ca:98:23:
                    19:ee:22:61:1c:80:10:43:8a:06:10:0f:8e:55:e9:
                    d2:b8:d4:5c:5e:ea:dd:9d:28:26:0f:d0:07:6f:0b:
                    44:0b:b3:9f:59:f4:e9:52:10:32:0b:a6:a9:c4:f3:
                    ac:8a:b8:3b:dd:80:cd:8f:a2:08:c4:bd:b2:21:da:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:ED:FA:8E:DD:06:A0:3D:27:26:D4:30:25:A5:76:3A:15:47:C3:71
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS140641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:37:e4:78:73:c4:c5:a4:14:c1:e7:a3:26:f2:a9:4b:08:50:
         bb:99:c7:8f:f4:45:e6:4d:66:5c:09:26:c5:ed:17:ea:01:7a:
         65:2e:a5:8f:31:07:80:fe:18:cc:70:d9:95:1c:2d:21:05:74:
         2e:d1:fc:3f:15:f0:19:7c:9e:85:85:43:a1:4d:14:71:d7:bc:
         40:5b:84:5e:54:37:8c:2e:3d:9c:e5:b4:87:92:c9:08:6f:b8:
         6b:83:8d:01:23:d4:0a:9b:a2:0a:38:a4:c3:45:4d:7f:bd:76:
         40:3f:a0:ec:c5:26:51:cc:06:ad:3d:97:61:3b:8b:c9:fb:47:
         1e:b6:52:a8:eb:85:33:af:fa:bf:7c:16:6f:13:3c:74:f5:2e:
         e0:14:06:b6:2e:db:4e:a9:7f:47:76:99:71:42:28:9c:8d:84:
         ce:2f:2c:41:fa:bb:fd:28:7f:31:ae:4e:0c:89:1d:c5:49:d6:
         e0:5d:4e:05:60:95:4b:8c:2a:b0:46:81:28:db:c6:10:68:91:
         fa:8b:c4:11:9d:37:aa:f6:e7:06:58:3b:34:e4:93:8e:04:12:
         f3:61:0b:b6:c1:53:a0:aa:55:ef:d0:fc:8c:12:57:be:cd:e3:
         7a:c7:77:b7:f3:91:e6:95:ff:d9:e4:28:fc:87:04:b0:0d:8d:
         ca:b2:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org