Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS44092.roa
File:                     AS44092.roa (raw, json)
Hash identifier:          hbi2joXQCSwE7sHwiW60N2tkBHsmHXUdo+IXsd5vvgU=
Subject key identifier:   9B:A2:3A:29:81:09:1E:69:81:EB:EC:26:D8:91:EF:FB:C5:73:96:9E
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       1498854DBD2019D43BFF09559F8EEF0FB0914F3B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS44092.roa
Signing time:             Sat 27 Aug 2022 09:49:40 +0000
ROA not before:           Sat 27 Aug 2022 09:44:40 +0000
ROA not after:            Sat 26 Aug 2023 09:49:40 +0000
asID:                     44092
IP address blocks:        194.110.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:98:85:4d:bd:20:19:d4:3b:ff:09:55:9f:8e:ef:0f:b0:91:4f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:44:40 2022 GMT
            Not After : Aug 26 09:49:40 2023 GMT
        Subject: CN=9BA23A2981091E6981EBEC26D891EFFBC573969E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:64:47:87:ae:5c:75:6a:38:f0:de:00:a2:
                    29:20:f7:82:14:fe:43:00:25:2c:ed:19:c5:c0:a5:
                    08:7f:27:2a:ad:32:b9:f4:d4:cc:8d:16:96:20:5e:
                    81:dc:cd:18:76:0f:76:5d:16:9d:bd:73:c6:e0:d5:
                    e8:af:e6:59:9f:0c:e7:07:d5:de:57:d2:41:4d:77:
                    9b:d6:bd:ea:0c:de:34:07:99:dc:7e:fe:56:76:42:
                    67:66:85:0f:5c:d9:2c:c2:eb:61:32:2d:04:67:14:
                    da:07:e8:fc:0e:44:54:b6:78:92:c4:f7:49:d8:d7:
                    a5:85:0c:5b:4e:d8:c7:82:c3:e9:a5:48:47:90:33:
                    be:f5:5a:84:26:5e:a6:41:96:8f:1f:dd:dc:62:51:
                    75:6c:58:4d:50:61:12:80:62:81:83:43:0c:07:cc:
                    07:54:68:7c:da:99:5d:20:19:69:56:e0:49:b8:3f:
                    68:fc:d4:7c:ff:3f:07:cf:ff:e2:73:d9:86:23:50:
                    fb:56:05:81:ae:11:97:0a:37:d8:3d:eb:3a:f9:7d:
                    f2:cd:a5:c7:3d:10:70:71:ca:92:49:5d:c5:f2:27:
                    21:b0:3d:f9:a9:1e:9b:cb:30:22:fa:8d:66:5e:bd:
                    57:80:b4:bf:4a:69:65:27:aa:1c:72:19:4a:fe:95:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A2:3A:29:81:09:1E:69:81:EB:EC:26:D8:91:EF:FB:C5:73:96:9E
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS44092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:0a:66:8f:3b:91:27:b8:c1:88:72:0b:2c:8d:da:15:be:86:
         76:20:73:cb:f8:c1:f4:02:bc:0f:82:35:09:ad:86:8a:c7:29:
         d9:22:ec:f0:44:59:54:3a:51:71:8e:22:66:0e:5d:2b:b1:8d:
         92:a7:3c:4d:8e:6e:66:7c:f8:a5:e4:f5:ab:ff:25:1b:29:34:
         00:98:5a:1d:ac:6a:00:29:eb:a9:7e:93:f3:c0:85:16:8f:9f:
         c5:82:7c:5a:41:f7:b1:c0:37:4c:e7:19:72:da:cd:72:2e:4d:
         bf:8b:9c:f6:5a:e9:d7:75:18:2a:ae:9e:94:3b:ba:07:cc:fd:
         cf:f4:77:7c:18:3a:1f:e9:2d:47:dd:e4:84:c9:23:7c:03:85:
         42:02:28:08:9c:20:fc:ce:39:5c:03:66:dc:6e:f9:a0:73:43:
         9d:1e:57:be:28:ca:f5:b9:ae:a3:ab:14:8b:5d:ce:7f:36:d8:
         a1:ba:77:d0:48:ea:f2:65:84:c3:44:5c:02:80:91:2e:a2:73:
         25:80:65:c3:fd:2b:b4:14:fa:6f:46:3e:56:80:3b:0a:3b:d4:
         98:d6:0a:27:12:bf:35:9a:40:0c:e9:db:a6:85:00:ff:aa:04:
         24:7f:ba:b7:1a:f1:c8:85:d4:9e:d8:28:b6:70:a0:5a:17:65:
         7b:64:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org