Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS48025.roa
File:                     AS48025.roa (raw, json)
Hash identifier:          sUx+h0pK8f+fFQLvlldpMLfQKiPp7Ie7SjGSvJzlUt0=
Subject key identifier:   07:E9:0C:91:38:0A:04:A6:F1:B2:60:74:74:E1:31:AC:B5:7A:D1:D9
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       61B2A274425EE997EC498D0742479247F9809A02
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS48025.roa
Signing time:             Sat 27 Aug 2022 09:51:09 +0000
ROA not before:           Sat 27 Aug 2022 09:46:09 +0000
ROA not after:            Sat 26 Aug 2023 09:51:09 +0000
asID:                     48025
IP address blocks:        45.88.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b2:a2:74:42:5e:e9:97:ec:49:8d:07:42:47:92:47:f9:80:9a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:46:09 2022 GMT
            Not After : Aug 26 09:51:09 2023 GMT
        Subject: CN=07E90C91380A04A6F1B2607474E131ACB57AD1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:9f:b2:c4:65:fb:7c:69:91:8a:10:8d:49:
                    9d:bf:ef:35:e8:5d:75:59:8a:77:c7:91:fd:b6:bb:
                    3c:37:2b:2c:81:0d:62:c7:dd:74:69:24:92:3a:cc:
                    8d:da:34:44:c6:87:34:f8:14:a6:d1:bb:44:20:26:
                    a9:cd:ef:e0:a1:41:78:69:9e:38:87:e9:7d:55:04:
                    11:81:f3:0c:36:58:8e:79:a9:ad:d7:79:41:16:68:
                    ce:80:1e:01:ee:9f:3e:82:58:c0:4a:07:dd:79:bd:
                    75:38:e7:2f:c6:10:dd:45:9e:8e:6c:82:dc:02:97:
                    0e:fb:26:44:23:06:3f:e9:38:1d:8b:f8:69:32:66:
                    25:2c:fb:a1:bb:6e:b8:dc:cb:ba:a5:88:64:18:f0:
                    60:9f:f7:0d:bc:2e:39:ca:0a:11:d5:d0:c3:56:24:
                    a0:7b:2e:6c:9c:c9:e7:5d:df:71:a6:25:ed:d4:da:
                    0e:b5:1e:dd:c6:db:ea:7f:7e:97:a2:15:6c:85:a6:
                    ee:56:8b:f2:a4:3d:59:0c:c2:dc:12:88:38:61:ee:
                    74:5e:35:e6:9f:f5:d6:00:84:09:d5:d7:0f:29:ad:
                    33:ac:e2:5f:df:65:16:b4:a5:74:93:8e:7a:54:1b:
                    69:0b:93:d7:d5:81:6a:95:81:57:75:e4:ae:97:6c:
                    b5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E9:0C:91:38:0A:04:A6:F1:B2:60:74:74:E1:31:AC:B5:7A:D1:D9
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS48025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:be:36:42:4a:fd:43:cc:01:6d:52:f1:86:81:ef:31:dc:
         ac:df:5f:87:c8:24:26:8e:6a:5e:48:2f:6d:31:2b:d3:a4:34:
         c4:8c:6c:b8:b8:0a:13:20:11:b9:6b:bf:85:44:10:24:ea:18:
         69:ac:d5:fa:6f:95:e0:15:13:cf:16:eb:2f:a6:03:55:1a:15:
         50:a3:60:23:28:a6:b8:36:48:be:3f:10:b1:1b:46:9b:08:a1:
         12:19:00:cb:0a:4c:70:0b:70:a4:b6:f8:23:aa:36:af:30:c3:
         8d:a7:bc:de:1b:af:52:dc:b9:5a:72:f1:b1:23:22:92:15:b0:
         e6:04:35:a5:3a:8c:94:83:26:b0:bd:04:26:44:30:03:47:cb:
         e8:0e:d5:cf:0a:3e:9c:5b:ed:bc:77:df:bf:6c:81:07:a8:a0:
         a3:1d:1c:43:22:70:2c:13:c6:da:88:04:25:49:e2:b3:a6:ce:
         73:49:00:26:49:0e:d1:4f:75:0a:c3:0a:04:46:df:0a:43:b1:
         2d:81:40:9e:78:e3:04:f2:37:8f:e3:d3:60:be:f5:fc:0f:af:
         3e:23:08:fb:7f:89:50:ba:86:98:3c:d6:54:ae:de:77:c5:80:
         48:90:0c:59:fa:f2:fa:87:04:18:14:9e:09:bf:c9:d3:eb:9d:
         49:dc:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org