Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS35758.roa
File:                     AS35758.roa (raw, json)
Hash identifier:          OjokMyIJ5BLIWMUrTw869O9FZBmyKS0vlivWlqWOPjc=
Subject key identifier:   73:54:EE:95:86:CF:F0:56:E7:B8:71:99:18:F9:65:E8:E0:0F:E4:BB
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       12BE7556B2A11A7C80F35C2D5B0B835C10741E49
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS35758.roa
Signing time:             Sat 27 Aug 2022 09:43:09 +0000
ROA not before:           Sat 27 Aug 2022 09:38:09 +0000
ROA not after:            Sat 26 Aug 2023 09:43:09 +0000
asID:                     35758
IP address blocks:        181.214.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:be:75:56:b2:a1:1a:7c:80:f3:5c:2d:5b:0b:83:5c:10:74:1e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:38:09 2022 GMT
            Not After : Aug 26 09:43:09 2023 GMT
        Subject: CN=7354EE9586CFF056E7B8719918F965E8E00FE4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:7c:ea:b0:1e:96:44:c8:06:11:e8:4f:e4:
                    7b:ca:62:5a:1e:7b:96:a8:dc:c8:d9:ca:d5:65:41:
                    05:0c:c5:57:27:73:00:c2:5d:0e:64:67:62:36:a9:
                    55:b0:57:ce:9d:c3:f6:fa:cf:a5:ff:84:3f:45:79:
                    62:4c:cd:30:fb:79:20:68:7f:b4:8b:ad:27:0e:6d:
                    1c:68:83:e9:62:d9:04:55:de:4c:3a:ca:0a:7b:87:
                    93:7d:21:d5:db:2e:9a:5f:77:af:2d:f2:ba:7c:4a:
                    d8:8a:86:b1:ed:59:bc:81:8f:0b:2a:db:94:b5:d4:
                    90:12:71:65:9d:2c:8d:fd:9c:c2:61:34:f2:8d:05:
                    8d:37:7c:bc:f9:cd:d9:c8:2a:9b:60:51:b9:8b:e8:
                    9f:7d:0f:01:64:f7:90:ab:cd:50:dd:62:08:4e:c8:
                    25:70:99:02:a7:24:34:ac:fc:71:c8:86:c3:7e:0e:
                    ef:34:a6:42:c2:ba:43:f6:12:0a:94:3e:1b:a0:f9:
                    71:ad:16:79:7b:ce:0b:43:81:df:5a:1c:37:48:20:
                    2e:bc:14:1d:a5:90:ac:4b:43:ac:13:ed:38:22:a5:
                    5a:eb:eb:75:7f:aa:3f:bc:df:cd:68:8a:9b:de:44:
                    39:da:8a:8e:00:57:2c:39:d3:98:36:47:30:4a:76:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:54:EE:95:86:CF:F0:56:E7:B8:71:99:18:F9:65:E8:E0:0F:E4:BB
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS35758.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:0a:20:32:97:29:16:68:be:93:e9:83:1a:13:5d:8e:c0:a5:
         e8:c4:3c:78:1d:5d:19:de:68:b9:08:bd:e2:21:19:86:6e:0c:
         d8:ba:44:74:af:57:36:04:ba:96:1f:3f:39:d4:43:7d:d2:b6:
         e7:e9:f3:5f:c9:87:ac:05:02:7e:c6:9c:d3:0e:30:4d:ab:e2:
         54:98:25:2c:33:58:45:7c:ce:c3:06:a2:32:46:8c:7b:42:95:
         d7:ee:f3:af:23:c2:a6:93:d1:f7:92:26:61:bb:0a:60:58:65:
         de:c5:eb:b7:f8:b5:30:18:34:2e:a4:d5:4d:4a:94:cf:73:1c:
         59:26:87:bd:ad:36:0b:40:db:f1:d6:3b:e0:a7:16:ef:f9:35:
         37:b3:d1:e2:b9:3d:e6:e2:0e:92:ea:50:1a:81:e4:36:d2:3a:
         d9:09:16:8f:76:00:5f:cc:55:42:69:c0:05:45:5a:24:95:59:
         8b:48:7e:2c:e7:7a:58:dd:80:1b:ac:36:b0:bb:6f:ff:c2:f9:
         21:00:d7:99:f8:2a:07:80:85:44:bb:ce:21:85:5b:d7:4a:34:
         7c:9b:96:dc:8b:87:98:b8:e8:1f:79:ac:7c:ea:a9:b0:aa:b4:
         b5:12:09:f7:eb:cc:18:f2:c4:22:bf:e4:d7:a6:e6:da:99:4d:
         bf:59:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org