Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211585.roa
File:                     AS211585.roa (raw, json)
Hash identifier:          8QU3IFUvaNS7i0WUujdkhT/tl4T94aVncStieMq9+u0=
Subject key identifier:   34:44:6B:15:EA:AF:15:4A:DB:59:8A:14:31:F7:B3:1E:E1:29:FA:C6
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       786DA2117C954B9C5AC2FD033CEB58B077BF4337
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211585.roa
Signing time:             Wed 16 Nov 2022 10:18:57 +0000
ROA not before:           Wed 16 Nov 2022 10:13:57 +0000
ROA not after:            Wed 15 Nov 2023 10:18:57 +0000
asID:                     211585
IP address blocks:        181.215.141.0/24 maxlen: 24
                          191.96.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6d:a2:11:7c:95:4b:9c:5a:c2:fd:03:3c:eb:58:b0:77:bf:43:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 16 10:13:57 2022 GMT
            Not After : Nov 15 10:18:57 2023 GMT
        Subject: CN=34446B15EAAF154ADB598A1431F7B31EE129FAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:ce:d6:86:f6:2a:99:16:7f:ec:64:05:a1:
                    89:d0:1d:08:87:6c:b0:8b:b5:c8:53:17:a3:16:bd:
                    39:15:a8:d7:23:60:b8:18:e3:14:60:d4:e9:fa:d9:
                    e0:ae:a6:71:9b:23:8d:c4:f8:5d:3d:2b:eb:19:b7:
                    92:80:82:3a:53:be:72:d8:a6:24:2f:c5:6c:9f:bb:
                    06:ba:21:0f:34:d3:19:78:2f:a1:af:82:61:e8:47:
                    57:3d:cb:9e:39:f1:95:41:ff:4a:72:d1:6b:26:bc:
                    c2:03:57:20:d9:6a:33:44:0a:74:6e:c3:dd:e1:f2:
                    45:c2:e4:db:7c:c6:a2:2a:d6:53:b3:b4:5c:25:f3:
                    6e:bc:09:a3:b6:7f:a8:72:79:13:56:ae:ab:d3:4e:
                    13:2a:69:c8:b3:74:32:a1:a7:02:46:eb:ac:44:cd:
                    07:fc:db:b8:d7:3f:3f:c1:43:b4:e9:d6:31:00:e9:
                    f1:0d:d3:c7:0c:1e:c2:a0:7c:03:b0:a0:5f:19:be:
                    22:42:85:aa:69:71:b2:1d:f3:86:44:8d:9c:96:67:
                    58:c7:1a:57:5c:dc:9e:45:2c:a5:4d:e8:e4:dd:23:
                    df:ab:7a:e1:6e:86:85:f6:a7:57:0a:62:f8:9c:b7:
                    31:31:55:bc:5a:b2:0f:fe:25:7a:84:82:93:bc:4e:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:6B:15:EA:AF:15:4A:DB:59:8A:14:31:F7:B3:1E:E1:29:FA:C6
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS211585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.141.0/24
                  191.96.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:a2:b7:3a:5d:69:dd:00:ae:35:6a:24:b8:2f:37:e5:9c:17:
         37:27:ae:11:20:ba:9b:58:20:38:c1:19:d6:8b:9b:a7:cd:cc:
         94:5c:82:a0:8d:8d:e6:0e:ef:e6:66:c9:a8:1c:ca:f4:85:03:
         70:66:02:f6:06:55:2e:95:46:86:b7:92:65:58:1e:41:44:d7:
         e8:30:2c:0e:fe:fb:30:62:0b:26:22:8b:fd:34:a9:db:35:e1:
         2d:a1:60:b1:7b:1d:72:e5:c4:f5:d0:d9:e0:88:b1:96:ed:af:
         1b:2b:3f:f8:75:d6:ad:75:d1:90:51:9d:dd:89:8a:96:6e:de:
         53:dd:de:44:02:3a:37:23:df:f6:59:49:8f:8b:c4:c5:3e:76:
         d7:ff:2a:91:64:cb:e6:ea:d4:e1:3f:3c:bf:07:a7:06:b6:5a:
         2d:a3:f6:a2:a2:3b:84:1d:10:bb:b8:1e:7d:84:e7:a2:b8:af:
         4e:00:6b:e7:2c:66:36:c9:82:1d:b5:57:2b:44:1b:8e:83:07:
         cb:ba:c8:09:3b:18:65:bd:64:41:0e:b7:df:fb:7f:6f:65:88:
         67:12:31:58:de:de:be:7b:3c:81:f5:1b:45:dc:3d:7e:ec:fe:
         4b:c0:73:49:38:40:bd:6f:b2:2d:e2:41:c7:a0:8e:ae:f9:a7:
         d4:5d:7c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org