Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46573.roa
File:                     AS46573.roa (raw, json)
Hash identifier:          7+dKSW9cOx+yWYaI5ZpMkddgPkTB7PZx7Rgiy0gfpk4=
Subject key identifier:   45:89:21:74:23:B5:28:0B:92:B6:3C:DB:90:27:CF:B6:68:50:4D:5D
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       70E3B71F5412AF3E5A20409BD881D572D43990B5
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46573.roa
Signing time:             Tue 11 Oct 2022 13:26:52 +0000
ROA not before:           Tue 11 Oct 2022 13:21:52 +0000
ROA not after:            Tue 10 Oct 2023 13:26:52 +0000
asID:                     46573
IP address blocks:        45.95.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e3:b7:1f:54:12:af:3e:5a:20:40:9b:d8:81:d5:72:d4:39:90:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 11 13:21:52 2022 GMT
            Not After : Oct 10 13:26:52 2023 GMT
        Subject: CN=4589217423B5280B92B63CDB9027CFB668504D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:3b:39:c2:82:e2:3d:36:c7:8c:42:8b:2c:
                    9c:cb:90:38:d0:8d:19:82:be:a5:40:3c:ac:a5:67:
                    2e:56:7c:4b:54:5d:56:4a:fa:6f:ff:b7:2d:5d:8d:
                    61:f5:60:c7:9d:61:f7:ca:26:33:0e:7d:ba:40:13:
                    a1:0c:62:14:7b:6c:a6:e1:2c:ce:96:f2:b3:87:0f:
                    fb:2b:5e:89:79:5b:e2:2c:f6:83:da:02:5c:34:59:
                    6e:51:18:0a:ee:e5:8a:e1:53:19:da:46:99:5f:0a:
                    2d:fb:32:1d:c6:8e:cd:2f:96:00:e0:9e:4c:fa:9f:
                    7b:9c:2e:75:30:ce:36:aa:7a:2b:97:39:1b:7d:b2:
                    89:39:21:84:18:d8:aa:70:0c:7b:04:88:cb:a6:19:
                    0e:02:09:cb:e3:de:79:3c:c5:b5:3f:31:47:d9:0e:
                    a4:0e:cd:fe:f9:d0:35:53:ee:90:d8:c1:41:34:39:
                    fb:2c:95:72:db:a0:fa:84:30:7e:20:77:f9:f4:be:
                    52:49:45:cf:49:12:f5:27:42:02:8b:8e:11:a3:39:
                    99:fb:26:a1:43:1c:0a:cb:9d:86:60:9f:32:f0:63:
                    ee:f7:b7:fd:5d:0a:ec:78:21:d7:ed:d3:d1:86:cd:
                    67:88:7a:56:81:83:39:f4:66:a7:fa:24:62:51:90:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:89:21:74:23:B5:28:0B:92:B6:3C:DB:90:27:CF:B6:68:50:4D:5D
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS46573.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:df:10:6e:a2:cb:90:98:4c:29:5d:bf:51:25:71:2b:0d:b6:
         d7:d2:3a:04:bd:26:e3:59:69:6a:d6:43:e7:dc:30:e7:3c:37:
         c8:aa:13:14:0d:ef:ca:5d:c0:45:89:5b:c3:4c:09:9a:cb:77:
         02:77:5e:1b:d6:3f:93:45:40:66:09:7e:62:bc:d3:e1:3e:79:
         0a:35:86:95:d2:b7:15:85:05:61:ac:a0:4b:60:51:31:b5:9c:
         0a:d9:12:b1:18:35:a6:61:7e:3c:05:75:8e:2a:e7:b1:94:3c:
         f4:e3:26:97:c8:bd:04:60:2a:41:4c:85:61:61:ba:9c:9b:50:
         80:ef:32:65:b7:22:f5:f1:b0:3f:9c:33:10:3c:ef:e8:64:52:
         ff:1b:41:9b:d3:b5:2c:ce:cb:47:6f:f0:85:c6:46:64:dd:47:
         d8:b8:7e:00:84:ac:fc:9f:63:68:41:dc:a5:cd:6b:4b:82:07:
         70:a4:53:c5:ec:d9:42:f8:0d:64:b9:92:a6:f4:10:1c:39:ff:
         76:90:91:fc:59:81:27:c8:c9:00:4d:f2:de:80:6e:4c:9c:9e:
         18:e6:57:ae:83:1a:4c:6f:70:c7:ff:c8:38:8c:ed:66:8e:ff:
         39:aa:69:71:cb:03:17:1a:88:03:32:0c:9d:83:b2:18:99:66:
         e2:2d:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org