Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS141376.roa
File:                     AS141376.roa (raw, json)
Hash identifier:          fGA7I77jyGd4T6wGSrBTRkZo1SBdfwnKr8JIUoI9t6c=
Subject key identifier:   74:2B:CC:AA:19:51:03:67:20:6E:66:D7:89:78:E2:D9:BE:AB:82:C1
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       69CA9C0E510178CDFD442285AA6D5FD780BD964D
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS141376.roa
Signing time:             Sat 27 Aug 2022 09:50:05 +0000
ROA not before:           Sat 27 Aug 2022 09:45:05 +0000
ROA not after:            Sat 26 Aug 2023 09:50:05 +0000
asID:                     141376
IP address blocks:        181.214.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ca:9c:0e:51:01:78:cd:fd:44:22:85:aa:6d:5f:d7:80:bd:96:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:45:05 2022 GMT
            Not After : Aug 26 09:50:05 2023 GMT
        Subject: CN=742BCCAA19510367206E66D78978E2D9BEAB82C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:0b:26:57:a1:b8:61:82:15:14:fe:4a:06:
                    c8:74:43:25:76:ed:28:0a:d0:19:85:e0:35:44:5e:
                    40:9a:17:85:79:06:d6:1f:77:f4:c7:60:83:61:8d:
                    62:dd:b7:e0:78:40:f0:76:c3:a9:df:bd:84:71:43:
                    6a:26:30:74:18:a2:6e:2b:45:79:a4:b9:5f:83:61:
                    8c:a8:6a:a7:7c:7d:a7:4f:8c:3d:19:f9:f1:d1:99:
                    33:20:07:02:48:58:be:2e:18:3f:8b:55:e5:8a:43:
                    5a:39:a3:46:95:e0:a3:63:15:cd:97:d2:93:4d:75:
                    c4:b5:81:48:07:5b:26:ad:df:1d:e0:92:1b:9f:4a:
                    bc:80:6a:e4:fd:41:e6:ce:8b:46:d4:9c:5f:2b:4d:
                    e8:ae:68:bc:6c:40:25:d8:30:77:8c:5d:42:2d:dc:
                    16:a7:1e:1b:e4:ea:bc:61:6e:de:b7:a1:1d:31:af:
                    70:04:81:b2:bf:b3:c9:34:7e:9c:a3:ad:c1:f3:93:
                    69:89:bb:f8:05:b4:87:33:35:58:d6:c1:99:d8:42:
                    a2:2c:93:ea:3e:6f:aa:cc:be:b8:12:16:e8:e8:2f:
                    16:72:ec:7a:da:fa:bf:1d:27:1c:be:fa:63:7b:87:
                    46:aa:8c:42:c2:ce:e2:fd:4c:03:4d:f5:79:66:ff:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2B:CC:AA:19:51:03:67:20:6E:66:D7:89:78:E2:D9:BE:AB:82:C1
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS141376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:f8:00:53:e7:6d:86:03:62:7b:de:7f:42:86:de:32:a6:
         dd:1c:8c:4a:51:23:a8:c0:98:26:34:60:ac:1e:e7:6a:e3:59:
         14:8a:28:89:d6:44:8b:61:f4:72:76:1f:4e:4d:8a:5e:98:67:
         9c:99:c5:3c:f6:94:95:d6:70:59:86:4d:c9:0b:25:c8:68:b9:
         ea:ee:d1:d8:94:2c:da:96:aa:05:2a:39:28:19:a2:1b:77:0a:
         21:0c:4d:02:da:ac:ed:9a:95:eb:c8:f3:c2:9a:a4:91:45:83:
         f2:37:79:43:0d:73:05:25:bd:d9:d1:a8:40:9d:8a:98:b4:cb:
         83:2c:d1:a2:04:3d:54:50:1f:97:1d:69:8a:ea:27:50:1a:e9:
         0f:59:d5:ff:22:85:4e:46:91:86:3c:3d:d4:dd:8c:34:96:90:
         98:0d:cf:51:63:50:45:e3:3c:12:17:68:ee:57:04:ce:fa:19:
         d3:1f:ee:49:19:ea:d2:5e:3b:00:d1:a2:85:a4:fb:91:24:bb:
         ab:b3:18:b0:68:e8:aa:5f:7c:65:b4:4a:e6:19:b0:a1:df:e7:
         23:59:72:76:a4:aa:10:16:39:47:84:b4:60:71:eb:5e:6d:1e:
         d6:c8:0d:0d:3e:92:24:4e:c0:90:16:a1:98:e5:51:ab:77:fb:
         92:6c:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org