Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS17819.roa
File:                     AS17819.roa (raw, json)
Hash identifier:          bR2rtMtW1i6WzaSuieE6naUGF8Y6cm+QHgFgF/ObTBk=
Subject key identifier:   85:55:F3:02:55:0E:45:94:AA:6C:A6:C7:BA:39:EB:0F:1C:0C:FB:40
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       0ED708352455C7C3F844BC67F080D3F4BC617BB3
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS17819.roa
Signing time:             Sat 27 Aug 2022 09:39:58 +0000
ROA not before:           Sat 27 Aug 2022 09:34:58 +0000
ROA not after:            Sat 26 Aug 2023 09:39:58 +0000
asID:                     17819
IP address blocks:        45.95.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d7:08:35:24:55:c7:c3:f8:44:bc:67:f0:80:d3:f4:bc:61:7b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:34:58 2022 GMT
            Not After : Aug 26 09:39:58 2023 GMT
        Subject: CN=8555F302550E4594AA6CA6C7BA39EB0F1C0CFB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:a1:48:15:dd:10:f1:a4:16:3b:b4:fc:fa:
                    61:e5:9a:90:16:e7:d3:cc:c4:4e:00:36:28:fa:3d:
                    76:51:a6:2a:a3:15:6c:99:dc:7b:9b:10:1f:27:18:
                    a1:c5:1a:c4:0d:59:24:6d:07:a8:6d:0d:21:40:04:
                    a6:e9:9c:10:5d:21:c9:ef:fe:a5:22:81:e5:bc:bd:
                    e7:be:76:38:97:f7:6a:ae:b2:6a:d9:91:b5:0d:1d:
                    f9:dd:9e:d3:3e:59:34:f9:68:f7:7c:8a:f0:5c:aa:
                    4c:e9:fd:00:2b:d0:69:d0:bc:72:35:19:88:fd:0c:
                    38:cb:d4:ed:7e:53:15:60:0b:22:b0:df:09:78:c0:
                    8f:61:60:ec:96:dc:a0:29:d9:2e:12:08:49:7f:d3:
                    9d:35:04:8e:76:df:22:a7:f0:7c:cf:0e:c3:9f:d3:
                    22:65:5b:eb:c1:6d:6f:93:ae:dd:73:a4:98:a3:7f:
                    d9:bd:d6:45:85:59:c6:dd:c4:d7:1f:5a:4f:6d:73:
                    8c:aa:82:ba:52:68:ad:34:b5:12:25:81:b5:d7:b3:
                    6e:f4:4b:95:c7:a8:bd:aa:2c:df:3c:13:21:e2:3e:
                    92:57:2b:6c:ed:4e:7a:e8:c8:bc:32:ca:44:ae:08:
                    8c:00:b2:fc:d2:54:6f:d2:50:f2:90:fe:d2:98:7a:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:55:F3:02:55:0E:45:94:AA:6C:A6:C7:BA:39:EB:0F:1C:0C:FB:40
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS17819.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:4f:10:d7:03:ff:d4:c2:a9:33:df:ce:f2:fd:47:ad:89:70:
         6e:cf:de:0c:79:26:e7:3f:4e:cb:f1:4a:ff:d7:d8:39:c6:7f:
         a8:c6:43:09:d6:08:8b:21:74:d6:eb:e4:21:82:cf:34:fa:0b:
         c0:34:7d:16:7c:30:68:b5:b4:bd:c9:ef:8e:1b:6e:02:fb:e9:
         67:8e:d6:df:e8:01:2e:b2:85:ab:32:b0:86:bb:1b:38:04:21:
         0e:d2:42:b5:26:f9:22:2e:e4:35:19:3a:09:40:fa:29:e5:7f:
         a8:9f:26:5b:51:62:71:0b:16:b0:33:c8:fe:95:d5:1f:a6:2f:
         0d:da:18:c5:1b:3f:bc:ee:53:86:ef:4a:f6:00:86:0a:61:90:
         08:e9:ce:0b:45:8a:d8:c3:21:03:b8:55:fb:a2:94:72:2b:a2:
         56:64:28:20:b9:9d:ea:d9:cb:7a:20:aa:4b:6e:c1:26:f5:d8:
         d8:d2:a5:9e:95:4d:fb:bc:8e:99:7e:8b:20:cc:30:e6:c1:1c:
         75:7b:7e:44:c1:2b:d5:8a:6c:71:ea:1a:14:2b:c8:23:07:5f:
         54:be:4b:1c:87:83:6f:cb:21:3b:eb:04:4f:6e:d3:1e:4d:17:
         94:5e:a3:c3:5c:b7:ad:32:17:1a:6c:0c:4d:d2:b9:04:c6:15:
         6a:20:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org