Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS399709.roa
File:                     AS399709.roa (raw, json)
Hash identifier:          +lCK6EcCcdGdUjs+Ds2+ps9Wm52yIKLAEhY1Q5mY3Is=
Subject key identifier:   62:05:AC:38:7D:33:CD:3B:8D:1A:FA:CC:BC:B6:E1:48:F0:91:57:1E
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       44434C28596E7688DDF4655AF23BEF872ED8DFB0
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS399709.roa
Signing time:             Sat 27 Aug 2022 09:44:55 +0000
ROA not before:           Sat 27 Aug 2022 09:39:55 +0000
ROA not after:            Sat 26 Aug 2023 09:44:55 +0000
asID:                     399709
IP address blocks:        181.215.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:43:4c:28:59:6e:76:88:dd:f4:65:5a:f2:3b:ef:87:2e:d8:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:39:55 2022 GMT
            Not After : Aug 26 09:44:55 2023 GMT
        Subject: CN=6205AC387D33CD3B8D1AFACCBCB6E148F091571E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b7:00:a5:31:48:8b:27:6e:e9:5d:69:28:7f:
                    e8:ae:73:63:ec:de:94:50:d5:b3:21:34:54:d3:ac:
                    d0:4c:d5:00:e0:1f:70:e8:46:db:8c:ef:8f:b4:90:
                    90:97:29:56:58:95:2a:24:3b:8d:fe:16:ab:3c:de:
                    72:b8:04:36:1d:aa:06:69:93:0b:c6:81:f6:51:cd:
                    72:dc:e7:79:17:07:62:65:75:0a:34:3b:22:69:9e:
                    76:c2:78:0c:bc:f7:73:f3:4d:bd:45:da:30:45:7b:
                    e1:a6:92:b4:7d:09:c2:20:a2:8e:c4:dd:b8:a6:63:
                    08:97:1d:3e:87:a5:8f:fb:c1:95:fa:0d:78:e9:cd:
                    22:93:45:c2:9c:7d:28:25:9c:68:87:4e:64:cf:0d:
                    0e:a1:34:3a:8e:98:51:dd:a8:19:5d:92:08:1a:f6:
                    18:42:46:f1:a8:3c:e6:11:23:b0:bf:21:f6:44:af:
                    28:c4:25:07:3e:7d:f8:73:e9:70:04:78:32:4d:46:
                    12:3a:f3:90:0a:3d:5b:45:6f:38:dd:dd:a2:df:87:
                    1b:e3:58:b8:8b:6d:3b:5b:d5:47:10:be:d4:8b:2e:
                    5e:7a:5e:86:05:61:3e:33:aa:df:b6:ac:ff:f3:cd:
                    1e:5c:5e:ce:d4:5b:97:f4:89:70:22:4a:04:f9:3a:
                    5e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:05:AC:38:7D:33:CD:3B:8D:1A:FA:CC:BC:B6:E1:48:F0:91:57:1E
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS399709.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:2e:70:82:6d:17:3f:b0:e9:96:47:60:61:5a:2c:3f:25:92:
         0d:3b:fd:19:62:68:13:8b:0e:30:d4:1e:67:67:4b:f1:9e:6b:
         97:82:a6:28:13:a5:6f:33:9d:a9:57:b7:02:8a:1e:c8:33:6f:
         3d:a6:86:e7:9e:6f:9b:64:e3:18:53:ce:0c:a2:ba:dc:6d:19:
         87:3d:61:46:ca:a5:fe:76:13:71:b7:3d:e8:c3:8c:b1:71:3f:
         14:b2:e5:a7:3e:a1:13:52:a4:48:51:18:2d:79:f8:c4:1f:47:
         2e:51:1a:c9:85:c4:66:9d:55:ba:2b:37:95:96:5c:b1:c2:5b:
         88:93:18:3a:06:64:2f:9f:77:2a:0d:95:35:e2:42:77:da:95:
         1b:0f:99:38:72:f0:e3:25:50:4b:b0:c1:73:61:65:7e:8b:ff:
         4d:26:c0:1e:58:32:74:27:32:d9:92:b0:9c:34:aa:9f:0b:0d:
         af:83:8b:c4:71:61:9a:29:55:a3:99:7c:16:7d:d6:ee:ee:3e:
         df:09:88:4a:c8:86:90:64:08:48:6c:44:f4:93:38:01:b7:a6:
         ba:f1:12:83:c5:03:3b:94:6e:64:bd:5d:50:3d:a5:28:6f:e6:
         58:09:b5:38:fb:a4:21:f6:a1:37:c8:ba:b5:8f:98:01:9f:d0:
         e8:df:19:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org