Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS22773.roa
File:                     AS22773.roa (raw, json)
Hash identifier:          kenoyNakK1IfjMYLFbhDVq7LdGK0+yQlQPO4bqg1NO4=
Subject key identifier:   72:6F:9F:24:BC:17:40:A5:22:0B:7F:30:6C:38:76:E6:50:5E:98:30
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       060431695EA765B6CC312B14F9B0D09A92E0AB4B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS22773.roa
Signing time:             Fri 25 Nov 2022 00:14:02 +0000
ROA not before:           Fri 25 Nov 2022 00:09:02 +0000
ROA not after:            Fri 24 Nov 2023 00:14:02 +0000
asID:                     22773
IP address blocks:        181.214.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:04:31:69:5e:a7:65:b6:cc:31:2b:14:f9:b0:d0:9a:92:e0:ab:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 25 00:09:02 2022 GMT
            Not After : Nov 24 00:14:02 2023 GMT
        Subject: CN=726F9F24BC1740A5220B7F306C3876E6505E9830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:25:dc:41:bd:f4:c0:99:3d:e8:bb:6f:a9:
                    94:15:91:48:fd:c6:de:f0:62:fe:da:54:9f:d5:fe:
                    c2:0d:42:44:23:a0:08:73:e5:53:5c:d2:89:16:d8:
                    f9:0a:07:31:c3:df:9f:15:44:62:09:2e:a9:4c:c1:
                    3c:20:55:07:52:4a:66:c5:1b:7d:ed:06:d2:41:27:
                    b1:36:85:05:06:36:7e:bf:d2:99:b4:5d:43:15:4a:
                    f9:77:25:85:71:65:ed:65:d6:69:08:0b:6b:35:d3:
                    cc:ad:7e:99:06:9c:05:d6:4c:a5:c8:cc:7b:8f:af:
                    ec:c1:0c:78:2a:13:0b:75:74:9d:20:7b:a5:35:ed:
                    50:02:7b:4b:79:8e:63:c7:4f:a2:99:86:f7:b1:3b:
                    cf:92:7b:a7:4c:4c:1a:c8:46:01:b7:e7:7f:c6:b7:
                    74:0e:c6:f1:a8:6b:70:3e:b8:a8:0c:42:8d:59:b5:
                    c3:08:d5:73:c3:36:39:5d:e2:d8:07:1e:7e:f9:a1:
                    60:19:25:f9:0a:b1:ca:fd:98:df:9a:07:25:40:54:
                    14:4a:1c:97:61:06:38:c0:1a:82:3b:7a:4a:05:7d:
                    e0:7b:b4:7a:4c:2e:79:8a:08:3d:72:62:0a:38:ef:
                    19:9f:89:cf:6d:91:56:72:f6:45:86:2e:ed:dd:4f:
                    b1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:9F:24:BC:17:40:A5:22:0B:7F:30:6C:38:76:E6:50:5E:98:30
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS22773.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:cb:f6:53:0e:09:e4:67:07:48:a5:38:ef:9f:a8:71:22:45:
         2e:f2:40:10:51:af:8b:8a:59:70:9a:9f:fe:98:c0:a3:30:32:
         af:d4:cf:d4:4e:e9:c6:b8:5d:80:0c:32:b6:60:8f:b6:65:5a:
         45:50:f7:e8:44:b9:11:dc:9d:b9:9c:e4:f8:09:1d:d9:a1:0a:
         c0:5e:86:f3:67:6a:eb:e8:c4:94:02:95:92:c6:b9:d8:16:0f:
         32:de:e8:07:e4:1b:3e:29:04:d9:4d:cc:f6:d6:b1:c9:36:25:
         2f:b8:3e:7a:91:f8:d3:31:69:15:82:e4:02:79:be:10:8d:b9:
         76:91:a8:2d:93:79:3f:9a:ff:fd:3f:b8:65:63:1f:d8:78:30:
         4d:5d:0f:51:bd:a0:12:21:99:2c:a0:8a:82:af:3a:53:a6:f1:
         b3:bf:3b:7a:82:ac:7d:36:05:65:f9:6d:9a:58:29:5f:e3:c1:
         3f:29:be:d5:1f:cd:8a:4a:76:47:10:61:0d:e3:79:cd:48:55:
         a1:c6:55:33:a2:c1:36:3a:fe:ad:dd:e4:de:49:39:1c:e6:b7:
         bf:eb:4c:e2:a9:0c:18:4a:4d:c0:64:9e:b8:a5:d2:ac:b5:4b:
         85:ba:b0:d4:bd:20:3f:f4:3c:8a:62:f8:bf:50:26:04:18:91:
         45:6c:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org