Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30455.roa
File:                     AS30455.roa (raw, json)
Hash identifier:          0auXyKrixf6JLWmKZguIzYPTEziWvVN5bE5oDti7ZjE=
Subject key identifier:   55:CC:52:B5:F9:9B:B2:D8:7C:FB:20:F3:39:82:D5:C2:BA:37:1F:17
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       61A632149BC42C263B796D651E9B1F5CC526E2E8
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30455.roa
Signing time:             Thu 08 Sep 2022 08:42:16 +0000
ROA not before:           Thu 08 Sep 2022 08:37:16 +0000
ROA not after:            Thu 07 Sep 2023 08:42:16 +0000
asID:                     30455
IP address blocks:        181.215.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a6:32:14:9b:c4:2c:26:3b:79:6d:65:1e:9b:1f:5c:c5:26:e2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Sep  8 08:37:16 2022 GMT
            Not After : Sep  7 08:42:16 2023 GMT
        Subject: CN=55CC52B5F99BB2D87CFB20F33982D5C2BA371F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:6d:c6:0c:de:ed:bf:90:e5:b2:75:db:93:
                    2b:13:db:39:ee:61:ec:6f:a6:8c:78:a9:36:c2:28:
                    6f:1b:7b:a9:4f:e7:41:46:76:76:91:cc:23:be:33:
                    e2:1b:24:90:1b:1d:9a:06:db:e6:6a:b4:b4:e4:44:
                    1a:e7:57:8c:a4:7f:0a:fd:99:c8:43:2d:e1:b4:59:
                    a9:30:b1:b9:5f:3e:6a:82:02:7c:5f:0a:d8:62:9f:
                    8c:ae:d8:6a:17:43:c9:cb:b5:bd:f3:47:87:a5:1a:
                    27:b0:08:ab:7b:11:61:19:83:2c:dd:6e:c1:70:bd:
                    c7:60:d5:2f:b9:3a:d1:0e:cb:d5:a4:ff:8d:12:77:
                    f0:6d:03:d1:83:ee:9f:69:9e:fd:ae:6c:bb:ee:80:
                    c6:21:ab:d3:d5:24:19:80:ee:e4:f2:a9:76:6a:27:
                    55:6b:37:5d:a4:65:83:2d:97:f1:66:a1:56:b4:60:
                    9a:35:f3:cc:0e:d2:19:df:f8:a1:53:da:4c:da:98:
                    c2:76:54:fc:cd:5b:98:7b:09:c9:0f:2f:15:f8:6e:
                    33:d2:df:83:b5:b7:b2:46:34:ef:c3:4f:29:e4:08:
                    e5:1a:e0:e1:c1:05:af:ce:0c:26:66:24:a6:44:c8:
                    08:b1:38:d1:15:78:3e:3c:00:4d:c6:f4:1e:33:be:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CC:52:B5:F9:9B:B2:D8:7C:FB:20:F3:39:82:D5:C2:BA:37:1F:17
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS30455.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:fa:74:c0:2c:6c:0e:31:24:05:71:06:d5:65:22:d9:13:f1:
         13:e1:33:89:e3:4a:d3:3b:b8:1d:73:aa:b3:8e:de:80:a2:6c:
         4a:ec:37:3f:5c:8a:f5:24:32:19:5c:b7:b0:7d:09:4d:cf:c1:
         7d:76:bb:e9:5c:04:db:46:ff:f9:9c:10:08:c2:5c:f4:ec:0d:
         d6:f3:c7:0d:73:ca:12:a2:dc:17:b9:03:8b:40:77:b8:79:1e:
         22:2a:84:83:ef:ea:82:f2:95:d4:38:d4:82:c1:ee:4f:7e:62:
         db:84:1a:d2:7b:f8:11:ec:08:47:a4:b3:35:9a:41:74:89:1c:
         4f:93:82:20:be:e1:56:f0:de:dd:20:22:82:19:e4:3d:10:e6:
         1c:97:fb:c8:15:f8:a4:18:25:c7:42:9d:e0:c4:71:f6:2a:99:
         40:70:8c:d3:3f:99:a1:55:06:0d:03:83:0a:a2:fe:3b:83:0d:
         96:aa:d9:08:8f:81:61:54:96:54:02:10:f3:dd:a9:ef:68:9d:
         10:65:be:3b:b7:06:a2:2a:73:40:8c:b9:cf:33:a4:c1:e3:57:
         c7:cc:d6:a5:18:22:e6:27:84:77:97:16:0f:2a:13:45:b6:9c:
         9e:b3:ca:7b:c2:43:7a:a4:9f:14:2a:f6:6d:70:19:15:23:f6:
         c4:b3:aa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org