Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205474.roa
File:                     AS205474.roa (raw, json)
Hash identifier:          uF7dcB9AfppdEuMz95RSyn0h7bM6n7BWNG45+BGRNKM=
Subject key identifier:   C5:A2:09:A6:84:AE:2F:86:83:BA:53:56:5D:CD:36:1D:BB:43:A6:C9
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       2123461525FE81C108DF68C456175B4A8DC327BD
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205474.roa
Signing time:             Sat 27 Aug 2022 09:48:12 +0000
ROA not before:           Sat 27 Aug 2022 09:43:12 +0000
ROA not after:            Sat 26 Aug 2023 09:48:12 +0000
asID:                     205474
IP address blocks:        181.214.170.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:23:46:15:25:fe:81:c1:08:df:68:c4:56:17:5b:4a:8d:c3:27:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:43:12 2022 GMT
            Not After : Aug 26 09:48:12 2023 GMT
        Subject: CN=C5A209A684AE2F8683BA53565DCD361DBB43A6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:12:84:a8:4b:f5:82:69:d2:56:73:7c:25:
                    85:ba:c0:70:0d:b1:94:e2:92:29:52:67:dc:28:1f:
                    4e:be:d3:2a:b3:3b:b1:a8:bb:21:e2:aa:87:40:75:
                    88:e4:18:24:d0:b1:e9:e7:63:cf:aa:73:65:24:d4:
                    72:9d:a5:d9:6b:dd:72:e6:0c:68:70:3e:31:7a:89:
                    8d:64:0d:55:ff:72:dc:8a:74:78:39:16:b2:ae:79:
                    ff:df:76:5f:7b:da:3f:40:b5:5d:23:7b:85:be:10:
                    c5:a8:94:f3:d6:dc:08:6e:f8:00:29:34:db:03:6f:
                    e9:15:ae:7c:e1:b8:38:db:57:92:16:56:53:3a:96:
                    0a:d6:41:26:76:29:73:40:48:58:56:30:fc:74:ad:
                    9f:45:0f:89:cd:1d:6f:d5:f0:97:af:8c:9f:99:cd:
                    87:bb:7d:b0:47:c9:3c:90:b1:57:1b:6f:38:4e:ac:
                    69:ab:20:8c:0a:3c:67:6b:b4:16:15:08:2e:1f:3c:
                    54:13:37:6f:e4:14:a6:8e:ed:f1:d9:3b:3a:4d:42:
                    b9:30:42:2a:37:90:8b:44:c3:3c:87:ef:67:7a:c2:
                    c0:76:12:7d:fe:34:48:eb:0a:f0:17:95:de:42:de:
                    d8:c1:6f:d2:b9:a6:38:2e:8e:d9:ce:ff:df:ca:32:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:09:A6:84:AE:2F:86:83:BA:53:56:5D:CD:36:1D:BB:43:A6:C9
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS205474.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:44:0e:7f:aa:6a:17:b1:a0:4a:62:61:7d:4e:a0:81:30:
         75:7b:d1:e6:0f:5c:4f:a0:18:2f:24:0c:9f:fe:a9:82:c5:f7:
         57:f1:24:95:5f:77:0b:ee:cc:d6:88:67:ba:db:3c:36:4a:60:
         00:cd:30:2c:33:94:07:cb:4f:21:9f:e3:c7:62:53:39:04:1e:
         9a:9a:9e:2a:a2:1f:57:f7:1e:0c:97:5d:73:f4:53:18:20:99:
         4c:b9:12:00:72:a5:3a:30:91:b3:31:e5:22:ff:96:bc:fd:58:
         2c:6c:78:00:70:67:0f:7b:d4:53:fa:54:8d:d2:61:e5:fa:0a:
         9d:b1:8e:12:00:56:bd:ab:7e:5e:14:36:07:b6:b5:57:66:cf:
         7d:59:18:52:00:5b:30:ba:34:81:a1:da:82:f5:fe:fa:94:12:
         31:f7:da:dd:32:c2:1d:59:24:f4:5f:58:29:02:ca:66:91:c1:
         4f:a5:60:7e:3a:2b:9a:83:67:95:f6:46:ee:0e:57:88:c0:a1:
         48:f8:93:73:2f:2a:2a:8b:f6:38:47:cf:9c:2b:b9:e6:40:e2:
         67:ac:77:9b:08:55:c7:74:5a:96:04:cd:9c:77:08:94:3c:41:
         93:0e:10:16:0f:26:29:2d:4b:89:22:f3:80:b1:4b:d2:bb:0e:
         90:64:52:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org