Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396073.roa
File:                     AS396073.roa (raw, json)
Hash identifier:          z4TE9RJtDEvWb4Dkq5OjBYKsDrsfgnOiyC3o2glVWTo=
Subject key identifier:   57:A9:9D:89:B4:C5:D3:47:8E:D2:25:FE:8A:59:2A:FD:BB:B3:33:9B
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       40DB007083329680FDCAAD5DE843C5D6A6715EBE
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396073.roa
Signing time:             Sat 27 Aug 2022 09:39:41 +0000
ROA not before:           Sat 27 Aug 2022 09:34:41 +0000
ROA not after:            Sat 26 Aug 2023 09:39:41 +0000
asID:                     396073
IP address blocks:        191.101.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:db:00:70:83:32:96:80:fd:ca:ad:5d:e8:43:c5:d6:a6:71:5e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:34:41 2022 GMT
            Not After : Aug 26 09:39:41 2023 GMT
        Subject: CN=57A99D89B4C5D3478ED225FE8A592AFDBBB3339B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:ad:e9:63:79:7e:e1:0c:21:e4:25:af:5a:
                    be:ef:f1:ff:3f:9b:60:ef:8e:a3:2c:a9:d7:6e:b1:
                    ce:93:30:60:01:4a:38:37:22:ed:36:d7:39:9c:fe:
                    b2:88:8f:19:76:40:63:da:34:92:43:a0:63:19:90:
                    8b:4c:13:71:62:c6:42:fd:a2:f0:1d:15:7d:13:e4:
                    ed:01:b7:00:58:7b:50:ca:81:8c:50:60:c8:44:3d:
                    79:93:a2:90:9f:31:33:34:92:ef:db:b1:66:20:ba:
                    f8:f1:d0:f4:0a:f1:3d:83:a8:9c:8a:ef:39:1a:04:
                    8e:9b:e7:b2:79:1f:e3:e6:ac:b8:23:95:94:d9:50:
                    09:31:0a:9e:93:02:37:68:e2:98:f9:bc:42:63:cb:
                    b7:03:17:1e:03:8d:2c:28:70:24:d2:29:4c:0a:53:
                    df:77:0e:a3:19:54:5e:e9:f0:fd:a7:9f:45:f0:4d:
                    52:a6:2c:c0:fe:af:0a:bb:83:5f:9a:8a:37:0f:df:
                    30:51:78:01:37:34:1a:c9:7d:53:e3:4d:37:5a:1a:
                    05:e1:d9:b6:2b:1a:e8:ab:5b:f7:10:e2:0b:6d:ae:
                    c4:94:6a:d4:90:7f:ec:72:45:60:d5:e8:91:cd:43:
                    70:06:60:fe:f8:d5:d0:87:66:19:ff:e9:e9:00:7a:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:9D:89:B4:C5:D3:47:8E:D2:25:FE:8A:59:2A:FD:BB:B3:33:9B
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396073.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:bd:d1:3c:a0:8c:d6:65:93:9a:b1:0b:38:00:9f:b5:e4:d3:
         65:31:cc:bc:c2:8b:24:05:e1:9b:fe:cb:ef:32:76:d3:34:54:
         9a:b0:bf:a8:47:9f:cf:36:9f:8c:34:0d:d0:1a:8f:cd:15:95:
         c3:a5:5d:c8:70:65:5d:f6:7b:09:d7:3a:93:52:41:b6:bf:cf:
         96:18:d6:2e:7b:3b:ca:64:fe:5d:6f:9c:10:58:77:6d:cb:a3:
         07:c1:2d:32:a9:38:04:da:b5:16:a0:41:77:69:0f:da:76:2e:
         05:ac:37:5c:51:10:5a:65:82:b4:fc:68:f8:bb:dc:f2:e9:00:
         c5:49:95:57:24:13:5d:66:c9:ef:2b:c4:37:bb:88:a7:1c:a1:
         9b:bb:13:45:23:15:c2:3a:f9:e8:3c:88:1d:9f:52:0f:67:44:
         43:cf:4f:94:2d:1f:02:d8:e0:45:2f:bb:f0:62:68:45:f4:42:
         f4:43:0a:4c:4e:60:76:af:06:51:ec:ce:0c:f3:8f:59:97:31:
         e2:38:09:a8:d1:90:82:fb:88:3a:5d:6d:a4:0e:19:ba:7c:f2:
         59:83:39:a2:95:85:21:b7:82:79:89:c4:e8:e7:6d:f7:51:21:
         f1:0f:83:14:25:a2:17:78:73:b4:5a:76:ca:26:6b:1b:dd:8d:
         5f:07:be:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org