Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30058.roa
File:                     AS30058.roa (raw, json)
Hash identifier:          sw7pWT/aQCRZG9eptMRellcUy2EEaXlwMu8jyuJyvYo=
Subject key identifier:   AA:34:ED:39:8A:E1:4B:57:17:A3:AA:B2:D2:0B:FE:65:95:8E:C5:F8
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       4532EE200A37180BF14A148332DE9E14A12FB84B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30058.roa
Signing time:             Sat 27 Aug 2022 09:42:48 +0000
ROA not before:           Sat 27 Aug 2022 09:37:48 +0000
ROA not after:            Sat 26 Aug 2023 09:42:48 +0000
asID:                     30058
IP address blocks:        179.61.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:32:ee:20:0a:37:18:0b:f1:4a:14:83:32:de:9e:14:a1:2f:b8:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:37:48 2022 GMT
            Not After : Aug 26 09:42:48 2023 GMT
        Subject: CN=AA34ED398AE14B5717A3AAB2D20BFE65958EC5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:08:77:b5:61:8f:f7:af:c8:7b:42:70:58:
                    d3:62:7d:ef:1e:5b:34:4c:84:92:03:62:9e:9e:f1:
                    c2:71:d7:21:9b:24:2b:c3:74:a5:3d:bb:6c:24:d8:
                    80:f4:95:b8:c0:a1:5a:93:30:52:63:e9:99:d1:07:
                    0f:50:6b:b2:56:a6:88:ad:9a:fd:49:bf:11:0f:2c:
                    44:4b:b7:62:3c:78:8a:d3:f4:10:1c:db:f1:76:d8:
                    b2:46:24:32:4d:62:82:e4:23:a7:39:4a:95:bd:d6:
                    dd:e7:0a:b9:a8:77:1e:29:db:6b:b2:74:94:cb:ab:
                    25:37:f3:c6:df:5b:b1:ac:43:f0:09:e0:82:4e:1c:
                    11:25:7b:92:98:89:aa:40:5b:b3:0d:3a:1f:f6:e2:
                    43:9c:46:d4:04:b0:11:a4:45:2b:af:46:bc:c9:55:
                    b6:69:2a:c4:a5:4e:d6:ce:e3:86:35:d1:58:b8:bb:
                    f4:21:e8:e1:b7:8f:4e:43:5b:20:07:ef:8b:58:33:
                    3b:03:03:1c:48:d2:44:41:b4:83:6f:91:0a:94:ab:
                    53:3d:e5:02:77:7a:db:ae:59:16:8c:16:ad:56:2d:
                    06:8a:53:2c:a8:36:f3:6f:bb:26:ce:c1:83:f9:0b:
                    d6:b5:e3:75:19:f7:a1:8d:f6:b1:db:33:b1:22:b9:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:34:ED:39:8A:E1:4B:57:17:A3:AA:B2:D2:0B:FE:65:95:8E:C5:F8
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30058.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:61:ed:b1:17:a5:6a:7f:cb:3b:ca:60:29:66:42:c9:81:ae:
         e6:15:4c:45:dd:fa:1d:6b:3e:83:4d:c3:68:5b:6b:fa:91:ca:
         ee:25:83:98:8a:49:77:05:cd:e7:a7:8d:37:32:78:e2:bf:ef:
         77:d1:e6:f4:52:c6:88:68:a7:db:4c:67:d2:cd:7c:20:fa:24:
         9e:2d:33:a3:fa:32:38:dc:ba:e1:86:10:cd:28:38:77:e5:62:
         e6:c0:fc:cf:75:20:e4:bc:42:3a:1f:2c:52:98:97:3e:a9:c7:
         31:e8:1a:4e:fd:02:5b:28:5a:df:c6:90:85:af:95:40:56:12:
         48:6c:20:aa:80:eb:01:2b:f1:c5:00:e8:2f:1e:46:4c:5c:2d:
         05:00:a7:c7:cd:3b:f2:14:fd:be:46:2b:3f:51:7c:4c:30:6b:
         5a:e9:ff:59:8e:dc:6b:e9:13:21:aa:a7:95:7b:0f:de:f2:34:
         97:34:b4:ab:72:a4:ac:15:e6:ff:27:a5:ef:67:99:95:1b:46:
         42:a4:4d:d9:da:87:67:ed:04:14:f2:3b:35:cd:3c:54:f8:04:
         03:a2:5d:54:69:c6:26:55:3c:2a:aa:42:eb:98:d5:68:d7:b4:
         53:fb:43:8b:29:92:d3:0a:7b:c8:c4:db:c5:e7:b1:fb:5d:00:
         34:38:21:a0
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIURTLuIAo3GAvxShSDMt6eFKEvuEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjA4MjcwOTM3NDhaFw0yMzA4MjYwOTQyNDhaMDMxMTAvBgNV
BAMTKEFBMzRFRDM5OEFFMTRCNTcxN0EzQUFCMkQyMEJGRTY1OTU4RUM1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEoQh3tWGP96/Ie0JwWNNife8e
WzRMhJIDYp6e8cJx1yGbJCvDdKU9u2wk2ID0lbjAoVqTMFJj6ZnRBw9Qa7JWpoit
mv1JvxEPLERLt2I8eIrT9BAc2/F22LJGJDJNYoLkI6c5SpW91t3nCrmodx4p22uy
dJTLqyU388bfW7GsQ/AJ4IJOHBEle5KYiapAW7MNOh/24kOcRtQEsBGkRSuvRrzJ
VbZpKsSlTtbO44Y10Vi4u/Qh6OG3j05DWyAH74tYMzsDAxxI0kRBtINvkQqUq1M9
5QJ3etuuWRaMFq1WLQaKUyyoNvNvuybOwYP5C9a143UZ96GN9rHbM7EiuWLpAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUqjTtOYrhS1cXo6qy0gv+ZZWOxfgwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMzMDA1OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALM97zANBgkqhkiG9w0BAQsFAAOCAQEAh2Ht
sRelan/LO8pgKWZCyYGu5hVMRd36HWs+g03DaFtr+pHK7iWDmIpJdwXN56eNNzJ4
4r/vd9Hm9FLGiGin20xn0s18IPokni0zo/oyONy64YYQzSg4d+Vi5sD8z3Ug5LxC
Oh8sUpiXPqnHMegaTv0CWyha38aQha+VQFYSSGwgqoDrASvxxQDoLx5GTFwtBQCn
x8078hT9vkYrP1F8TDBrWun/WY7ca+kTIaqnlXsP3vI0lzS0q3KkrBXm/yel72eZ
lRtGQqRN2dqHZ+0EFPI7Nc08VPgEA6JdVGnGJlU8KqpC65jVaNe0U/tDiymS0wp7
yMTbxeex+10ANDghoA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org