Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396362.roa
File:                     AS396362.roa (raw, json)
Hash identifier:          5IWOBGKI7RoGV7u4uRyDNy9FlCA5HSw3fX9x/A8QwBk=
Subject key identifier:   79:BF:B0:9F:84:8E:6E:4D:80:07:4E:57:55:36:F8:F8:32:6D:37:73
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       44628C03AC6060517DD087B6F2B4CCC227109752
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396362.roa
Signing time:             Fri 21 Oct 2022 15:24:46 +0000
ROA not before:           Fri 21 Oct 2022 15:19:46 +0000
ROA not after:            Fri 20 Oct 2023 15:24:46 +0000
asID:                     396362
IP address blocks:        185.141.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:62:8c:03:ac:60:60:51:7d:d0:87:b6:f2:b4:cc:c2:27:10:97:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 21 15:19:46 2022 GMT
            Not After : Oct 20 15:24:46 2023 GMT
        Subject: CN=79BFB09F848E6E4D80074E575536F8F8326D3773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:d9:db:4e:63:9e:2f:87:51:65:67:41:22:
                    44:e5:2d:e3:15:19:4d:2f:d4:6a:9e:d6:4d:f1:d0:
                    2c:81:b1:36:f4:8d:75:41:09:67:df:0f:9a:c4:82:
                    83:cd:76:a1:ef:48:e0:6f:4a:54:5f:6a:bf:3b:af:
                    aa:36:f8:f8:71:2e:52:f1:04:59:84:40:ae:02:20:
                    dc:01:fd:55:f7:c1:ca:b0:ec:44:41:20:c2:6b:a9:
                    b9:d9:45:40:f4:b4:dc:78:5a:92:bd:6c:a3:53:94:
                    f0:2f:0e:e9:4d:9f:77:b4:9b:0b:c1:fb:0f:4a:61:
                    59:f6:7d:f5:7f:c9:4f:ed:d6:62:05:01:39:30:99:
                    19:96:2f:78:04:3a:96:f5:92:2c:5a:6e:0f:d1:43:
                    f8:54:b0:58:ef:3e:3b:58:2b:8d:21:84:81:f9:83:
                    48:d0:45:b8:a9:48:67:c6:26:1f:16:80:5e:73:1c:
                    07:0c:15:a2:7a:b6:87:35:a0:6c:37:63:4b:9e:36:
                    93:b9:56:e9:77:bb:f7:a5:58:b4:d3:a5:c3:05:22:
                    1f:39:ee:76:ff:b7:91:19:19:46:cc:91:a9:30:c3:
                    dd:8e:dc:14:d2:65:79:ed:9a:dc:69:e0:3a:0e:53:
                    1d:d9:18:60:91:2a:c2:f0:dc:da:5e:7f:3f:a9:fa:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:B0:9F:84:8E:6E:4D:80:07:4E:57:55:36:F8:F8:32:6D:37:73
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS396362.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:ac:41:14:a5:e9:e2:df:25:2a:a3:cd:8b:e0:ab:d7:36:
         76:75:df:f5:6e:4d:f6:10:bd:43:96:56:f7:b5:b7:fd:01:ab:
         02:e9:67:d0:c3:ad:0d:f4:a1:90:24:6c:ef:03:aa:64:7b:e5:
         01:b0:7e:d1:93:3a:86:f1:0b:ba:26:0f:46:7e:c7:28:01:ec:
         ba:41:5d:63:66:11:04:27:ab:e6:8b:cb:60:75:31:f4:bf:f6:
         06:32:40:f3:f8:e3:f6:9d:11:91:de:cd:f5:f0:11:46:ad:cb:
         59:c1:f3:f2:fc:3a:b8:73:9a:8b:b6:83:a2:0c:a4:b8:4b:83:
         c2:1d:85:5d:cc:e1:c5:81:85:cb:f8:94:3b:5e:09:a2:0f:0b:
         a0:d2:90:7c:bd:34:62:71:ca:60:02:91:65:4e:67:55:27:08:
         d5:02:90:9d:cd:51:16:39:79:26:61:3d:e3:de:38:30:7f:d1:
         e0:87:3d:86:e3:e0:20:fb:c3:76:dd:b0:77:a2:6c:08:ee:c0:
         60:75:eb:36:6f:a9:02:53:1c:0c:cb:94:ca:c3:d1:c2:a0:78:
         58:78:3e:3f:07:21:97:e8:93:97:2e:b1:69:65:d9:a6:f4:3a:
         f1:37:ed:98:90:88:f6:5d:2e:f2:1c:c5:d6:43:58:f5:36:f8:
         a1:5b:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org