Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20860.roa
File:                     AS20860.roa (raw, json)
Hash identifier:          UisvCVxay3VGvL1i2FWsiEu2WnpqxdliBpT9ST4uajs=
Subject key identifier:   0A:26:2C:68:F8:D9:66:87:FF:12:84:80:26:AC:76:18:AF:CD:C5:D2
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       7843A0B4B2EF14A302CBAC98C68194C9BAEC86F7
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20860.roa
Signing time:             Sat 27 Aug 2022 09:48:55 +0000
ROA not before:           Sat 27 Aug 2022 09:43:55 +0000
ROA not after:            Sat 26 Aug 2023 09:48:55 +0000
asID:                     20860
IP address blocks:        5.252.81.0/24 maxlen: 24
                          179.61.169.0/24 maxlen: 24
                          191.96.208.0/24 maxlen: 24
                          191.101.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:43:a0:b4:b2:ef:14:a3:02:cb:ac:98:c6:81:94:c9:ba:ec:86:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:43:55 2022 GMT
            Not After : Aug 26 09:48:55 2023 GMT
        Subject: CN=0A262C68F8D96687FF12848026AC7618AFCDC5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fd:1d:02:84:98:68:c4:6d:8f:38:64:05:30:
                    b1:43:cd:15:1e:93:27:fb:15:6e:77:71:2e:de:f7:
                    5d:78:85:04:73:ed:3f:25:37:2e:83:d2:d8:26:76:
                    88:94:27:a3:a6:ff:b2:25:64:57:f0:a0:b2:70:7c:
                    0b:57:e1:66:42:b4:59:b8:2a:e2:6a:70:93:25:ac:
                    20:aa:8b:1a:b9:df:a3:08:eb:b0:d8:e2:65:b2:65:
                    b5:40:07:78:66:ec:c4:f4:8a:36:e8:75:45:46:1f:
                    37:07:72:48:9d:6f:c4:c6:81:9d:56:64:15:3a:0d:
                    d1:8d:c4:63:d3:b8:46:da:8e:7b:c7:19:e4:a2:ad:
                    c5:01:a5:68:93:9a:b8:32:d2:81:a3:34:30:af:6d:
                    5e:20:81:9d:ac:82:84:c7:32:19:65:5d:61:3a:a4:
                    ee:8e:25:fd:d7:b6:c7:f3:f5:97:e1:51:c3:a8:a9:
                    1a:56:65:03:dc:80:6d:2a:6f:9f:ff:cb:12:2f:8a:
                    9c:56:21:fb:c3:13:23:84:99:fb:46:17:22:3c:d3:
                    8c:ac:fc:45:fe:34:27:c2:9a:67:34:f4:e7:47:e5:
                    75:f8:ff:70:58:45:74:ff:8c:2b:ff:99:07:ed:e4:
                    9e:e2:fe:17:b1:c1:47:7f:88:82:4d:b4:10:81:39:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:26:2C:68:F8:D9:66:87:FF:12:84:80:26:AC:76:18:AF:CD:C5:D2
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS20860.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.81.0/24
                  179.61.169.0/24
                  191.96.208.0/24
                  191.101.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:3c:86:6e:fb:3c:09:b9:e6:0e:a9:13:d9:1d:93:07:e7:
         78:49:ee:6a:09:85:56:48:53:be:43:79:39:18:91:e1:ab:9e:
         0b:e7:59:01:25:4d:32:a9:e5:b6:94:fc:06:df:f4:c6:2f:2a:
         9c:59:fa:ca:86:69:b7:c1:b8:4f:95:5d:41:1d:76:19:ce:bf:
         79:da:d7:8a:d8:c5:cd:d8:73:43:27:e0:21:79:19:04:17:f6:
         a2:fd:3d:1c:48:34:e0:48:a8:0d:3e:bf:b1:46:ef:62:a9:00:
         a0:13:d4:cf:37:fd:10:55:e4:35:09:cf:8b:f6:8a:11:cb:d5:
         b4:79:b7:5a:1c:a9:0c:61:53:2b:e6:9b:a1:b5:b6:e1:27:4e:
         16:93:03:42:9e:c2:4c:74:75:94:39:fd:80:6c:02:a4:b2:a9:
         3f:62:5f:5d:05:60:1b:8a:7e:71:ba:bc:99:cf:d6:c5:19:b4:
         f8:67:76:0e:0e:7d:e5:77:0d:ad:7d:6e:87:da:a2:d2:64:fe:
         c2:c6:a6:5e:87:96:90:bb:41:91:7d:30:a0:c9:e6:60:4e:8e:
         a9:04:8e:22:ea:ec:e4:d6:81:be:2f:83:74:a5:99:eb:d0:5d:
         21:17:67:03:68:00:f9:0b:be:98:84:04:6d:ee:0a:a2:46:2e:
         e3:57:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org