Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213382.roa
File:                     AS213382.roa (raw, json)
Hash identifier:          fb2PkN1tN63q9EDjNUkBHE9gVwPhYQu1mFO6nGMhOLU=
Subject key identifier:   85:4A:68:21:E1:4E:54:77:8B:34:9C:2D:BC:BE:D9:B4:DA:B5:69:1B
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       624CB4CD48A71B9787B034C8691C3110CBC6F70A
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213382.roa
Signing time:             Sat 27 Aug 2022 09:46:54 +0000
ROA not before:           Sat 27 Aug 2022 09:41:54 +0000
ROA not after:            Sat 26 Aug 2023 09:46:54 +0000
asID:                     213382
IP address blocks:        185.170.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4c:b4:cd:48:a7:1b:97:87:b0:34:c8:69:1c:31:10:cb:c6:f7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:41:54 2022 GMT
            Not After : Aug 26 09:46:54 2023 GMT
        Subject: CN=854A6821E14E54778B349C2DBCBED9B4DAB5691B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:02:0a:b6:16:76:3e:0b:29:70:ca:bf:78:
                    8e:0b:55:85:45:bc:1e:3b:1b:0f:2e:10:2f:7a:d4:
                    53:59:30:49:47:75:62:87:fa:a9:2a:d7:67:98:0b:
                    00:2f:b4:76:10:11:46:c3:a1:b2:2e:27:28:7d:da:
                    dd:47:51:e7:fc:00:6e:9c:a7:9c:ac:bd:ab:bc:7f:
                    35:d9:3b:86:f5:d8:73:44:df:1f:b5:a9:cf:cd:f9:
                    a3:ea:13:ba:0c:10:61:9b:dd:bd:ba:71:9b:33:1f:
                    14:63:f9:f9:91:8f:3d:6d:d9:b0:02:72:e2:a3:09:
                    49:43:c0:82:6a:a9:dd:f9:51:cb:d2:4a:70:86:7c:
                    23:59:0e:82:d2:c8:8b:00:7b:01:2f:f2:3d:3d:95:
                    dd:b0:b5:fb:4d:4b:dd:54:fc:a8:a3:66:80:ab:bc:
                    b6:c3:e4:26:d5:a7:0a:b3:55:25:1b:ce:2f:5f:c7:
                    e6:92:1d:50:ab:3e:1b:6a:73:2b:67:5e:22:bd:b8:
                    c7:fd:34:0b:9b:05:e1:c3:cc:c8:11:01:eb:dd:6e:
                    22:4c:fa:03:7b:04:2b:15:60:bd:d2:77:1a:8c:f8:
                    85:c7:fd:43:c1:7b:63:af:38:93:29:bd:b3:4d:82:
                    bc:fd:f9:36:38:50:42:7d:c2:1c:9e:8e:df:f7:0d:
                    5b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4A:68:21:E1:4E:54:77:8B:34:9C:2D:BC:BE:D9:B4:DA:B5:69:1B
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS213382.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:cc:4c:71:1e:81:bc:10:5a:7a:f5:43:6b:d5:1a:a6:b9:aa:
         31:2c:f2:d7:e5:20:46:d7:ae:20:31:f4:ca:66:20:3f:f6:a4:
         d4:14:99:49:df:81:ee:58:9a:20:c2:bc:a6:75:ce:69:84:87:
         49:45:c4:90:06:18:8e:6e:47:50:20:7c:70:84:53:45:86:43:
         7b:53:59:26:2e:ad:85:89:29:76:39:4c:84:f7:06:50:09:d7:
         06:85:09:22:b6:03:17:9b:1f:7d:2d:a1:e5:31:f8:96:e1:b7:
         77:e9:e9:5a:d0:8e:03:83:b9:f6:db:bc:03:b8:65:eb:44:72:
         98:0f:74:e9:eb:0d:df:9a:5c:0b:4f:fd:33:b2:28:25:37:60:
         71:a7:11:bb:8b:05:20:3b:5f:41:3a:24:c5:03:19:a6:0b:d6:
         00:f6:25:1f:ae:08:e9:48:cc:e0:be:64:0d:37:bd:36:bd:5c:
         49:46:42:1c:a2:3f:0b:b1:ba:12:42:3e:78:e5:77:49:14:e1:
         40:90:cd:c6:94:80:d6:4d:0f:33:3c:89:2b:b9:fe:d8:84:7a:
         60:1c:59:68:bd:3c:2b:45:54:9f:29:6b:45:fd:5b:1e:fb:b2:
         25:0a:90:bf:cc:00:40:69:ba:8a:cd:ec:c6:df:ac:97:c0:20:
         fa:c6:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org