Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209466.roa
File:                     AS209466.roa (raw, json)
Hash identifier:          WkUf2qC2gzkUH/0zCk1ZhDjqZWSpX0aKnFaIiSCw/f4=
Subject key identifier:   55:DD:96:B9:AF:CD:FF:0C:B9:58:3C:18:02:40:6C:B1:DD:65:86:23
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       654A024AD6315D29F1A2E7973095DEE35628F50D
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209466.roa
Signing time:             Sat 27 Aug 2022 09:51:03 +0000
ROA not before:           Sat 27 Aug 2022 09:46:03 +0000
ROA not after:            Sat 26 Aug 2023 09:51:03 +0000
asID:                     209466
IP address blocks:        185.174.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4a:02:4a:d6:31:5d:29:f1:a2:e7:97:30:95:de:e3:56:28:f5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:46:03 2022 GMT
            Not After : Aug 26 09:51:03 2023 GMT
        Subject: CN=55DD96B9AFCDFF0CB9583C1802406CB1DD658623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:94:2c:21:b9:24:d9:1f:35:bf:8b:d3:56:
                    4a:03:c5:9e:4a:2c:57:d8:17:61:95:2e:35:66:27:
                    bd:d0:5f:68:bb:1b:a1:82:9c:2a:7f:c8:1e:ad:4c:
                    c0:99:f0:2e:3a:62:29:01:8d:b0:be:e3:90:a8:04:
                    65:3e:71:73:4e:29:43:9c:57:06:e9:40:25:31:d6:
                    7c:f3:4e:0b:11:9c:be:d4:fd:aa:fb:31:c4:c6:db:
                    5f:a1:19:6b:db:68:67:4d:1a:ae:99:f0:16:12:1e:
                    f8:c0:d4:ee:86:17:68:e4:43:fb:15:f6:d9:21:52:
                    5b:f8:19:34:63:59:5d:1f:47:39:84:53:51:b0:fa:
                    93:c3:a6:24:85:f9:4d:90:97:70:d6:80:7b:d6:dc:
                    78:f2:5b:16:1f:2f:bf:6b:bb:2d:ca:84:0f:ea:ab:
                    42:92:cb:81:29:d8:c5:22:d1:f6:10:10:b9:c9:a3:
                    75:df:51:ce:1a:33:d0:ea:8a:50:df:46:39:ef:48:
                    85:25:d3:33:87:47:6f:ad:3f:6e:e3:ca:e4:5b:3e:
                    76:47:1f:08:24:b9:1c:82:7b:7e:68:9d:fe:b9:21:
                    35:3b:a2:cb:50:c3:df:f3:00:07:d0:39:0f:a8:17:
                    12:26:97:2e:dd:19:78:27:54:c2:fd:db:b2:28:99:
                    80:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DD:96:B9:AF:CD:FF:0C:B9:58:3C:18:02:40:6C:B1:DD:65:86:23
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS209466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:1a:43:22:9a:64:c9:d4:95:06:9b:3e:79:c2:33:2c:d9:c9:
         c6:40:f2:ca:cb:31:b6:09:94:e9:d3:69:c6:ec:c3:66:0c:06:
         57:de:65:c1:76:68:b8:4e:4b:9a:85:38:1e:b6:92:63:db:40:
         0f:0b:20:f5:e1:f6:0b:99:29:81:ef:0a:f4:9f:bd:c0:a0:34:
         00:68:9c:98:ff:b3:24:bd:72:02:d0:8c:93:34:60:da:cf:2e:
         c5:c3:c1:27:96:92:7f:94:3d:75:e3:39:56:bb:1e:87:e5:ba:
         2b:b4:2e:f4:a1:71:5a:ba:26:21:4b:46:a6:06:ca:cb:ec:fd:
         da:5d:65:a7:13:7c:17:86:6d:3f:dc:59:28:9d:25:3f:76:12:
         be:e1:95:4c:10:7f:32:18:b6:4c:f4:69:a3:b4:90:31:ff:fe:
         83:7e:13:a1:aa:56:0f:22:57:10:31:61:13:14:4e:27:e1:51:
         41:8a:0d:83:03:b1:39:59:c6:80:c2:5c:b6:f4:dd:d6:41:4c:
         e3:ed:ee:04:bf:0d:b2:9d:b8:54:ca:f7:56:25:cc:a7:e7:30:
         38:3a:82:4c:ae:3c:f3:d1:cc:f7:cc:e0:02:0f:a5:49:7d:73:
         4b:91:2b:1e:e2:0c:25:aa:b2:fb:f1:35:8f:b1:bb:d7:a4:ca:
         15:98:7e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org