Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS26388.roa
File:                     AS26388.roa (raw, json)
Hash identifier:          KLQOGbZipt4TYnDFWMw4EEtTkyen9o8EMWcxtxrDYEg=
Subject key identifier:   05:80:D5:B1:23:E2:10:E3:CF:91:64:81:26:AA:54:A6:2A:1A:46:79
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       013F92D93B2CB522AA603476DC9FC7E5148578CF
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS26388.roa
Signing time:             Sat 27 Aug 2022 09:44:13 +0000
ROA not before:           Sat 27 Aug 2022 09:39:13 +0000
ROA not after:            Sat 26 Aug 2023 09:44:13 +0000
asID:                     26388
IP address blocks:        45.133.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:3f:92:d9:3b:2c:b5:22:aa:60:34:76:dc:9f:c7:e5:14:85:78:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:39:13 2022 GMT
            Not After : Aug 26 09:44:13 2023 GMT
        Subject: CN=0580D5B123E210E3CF91648126AA54A62A1A4679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:33:a8:d7:2b:5e:9e:bf:fd:82:8e:31:cc:
                    5a:ae:38:2f:57:3c:2f:ce:cd:bd:7c:5f:be:d1:30:
                    40:10:4f:2d:fa:3b:bc:1c:ef:2a:bb:37:26:1e:10:
                    fa:a2:f8:37:4b:d3:2d:dc:8b:6e:0d:5c:d5:70:9c:
                    80:db:44:89:53:35:28:7d:5a:6e:c7:84:29:73:44:
                    1f:a8:ff:54:48:18:ec:90:06:7d:fa:d8:82:e7:6a:
                    13:27:83:68:db:61:3b:c7:49:d6:84:38:ef:f0:8f:
                    58:5b:f8:2e:da:66:3e:2e:f9:f4:74:84:93:10:eb:
                    df:72:c4:e2:20:8b:f3:2b:5d:85:f9:6e:6a:71:95:
                    6b:84:65:96:f0:b6:60:51:54:28:ae:08:da:6e:4a:
                    34:b8:b2:ae:a1:c6:82:a7:ce:78:e9:31:3e:e3:61:
                    a7:9e:c8:a3:bf:27:e6:f6:63:b8:9d:58:db:67:25:
                    d5:15:61:75:0b:d2:c1:9e:d6:84:c1:9a:d6:aa:4a:
                    53:9c:65:aa:ef:2d:26:7c:b6:ed:74:e2:77:e7:9d:
                    73:2e:5a:1a:c7:3b:b7:8c:83:92:48:fe:f4:94:86:
                    7f:cb:aa:d3:48:79:d2:df:46:dd:8c:6a:bc:9d:05:
                    47:3f:a3:93:22:6d:7d:00:8a:bf:a1:a3:e4:d7:b1:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:80:D5:B1:23:E2:10:E3:CF:91:64:81:26:AA:54:A6:2A:1A:46:79
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS26388.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:18:2e:89:f0:16:1e:57:94:d8:5f:b8:ef:e1:72:8d:bc:fa:
         94:78:c4:6d:d8:13:53:f0:0a:c3:3d:f8:6b:5a:ec:47:f7:8c:
         bb:a0:be:bf:e0:1b:c5:ce:d3:21:e0:cc:2d:54:e8:34:be:2e:
         37:54:5f:1b:5f:9e:f7:37:88:69:3a:51:a2:a3:7c:ac:a0:13:
         6e:15:2a:ae:e3:9e:41:80:90:61:64:87:02:e1:d1:88:73:d6:
         43:aa:b1:c6:0b:be:e6:b3:85:cc:8f:90:2b:b3:f3:ee:a8:9e:
         f7:9c:9b:6e:08:bb:12:fd:bf:3a:43:cb:bb:7c:85:0f:51:26:
         e8:b8:43:97:46:0a:01:22:bc:fd:ac:8c:e9:b3:c3:c8:33:e3:
         c6:a4:e4:42:28:04:80:69:4e:5c:a0:06:78:cd:7a:61:a0:9a:
         61:f5:52:16:d7:1b:8d:de:d3:70:90:b0:f0:16:2e:8b:32:f0:
         5f:80:27:2f:64:23:96:85:f9:1f:96:68:e1:06:89:c6:d7:c0:
         a1:b3:df:4c:cc:73:f1:f6:42:4b:3b:8f:61:24:33:0f:b0:7c:
         67:3b:95:dd:b6:b5:9a:e9:5b:5e:69:d6:a9:66:32:ad:fb:40:
         0c:bf:eb:5f:a0:49:45:b2:1b:90:b7:23:a9:62:f6:32:b6:e8:
         19:0a:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org