Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS53340.roa
File:                     AS53340.roa (raw, json)
Hash identifier:          5Tr+oUWbl4Ifu6K9P0K4KsNNNPMvlL4fpKrTy0er4KM=
Subject key identifier:   9E:B7:41:2A:FF:0A:ED:B2:C2:F3:61:CC:83:56:E6:96:CF:8E:77:7B
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       47512F3CCDB34D4EF5FECF0FF78E61857532ED63
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS53340.roa
Signing time:             Fri 21 Oct 2022 20:23:04 +0000
ROA not before:           Fri 21 Oct 2022 20:18:04 +0000
ROA not after:            Fri 20 Oct 2023 20:23:04 +0000
asID:                     53340
IP address blocks:        45.89.254.0/24 maxlen: 24
                          181.214.47.0/24 maxlen: 24
                          181.214.81.0/24 maxlen: 24
                          181.214.87.0/24 maxlen: 24
                          181.215.249.0/24 maxlen: 24
                          191.96.178.0/24 maxlen: 24
                          191.96.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:51:2f:3c:cd:b3:4d:4e:f5:fe:cf:0f:f7:8e:61:85:75:32:ed:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 21 20:18:04 2022 GMT
            Not After : Oct 20 20:23:04 2023 GMT
        Subject: CN=9EB7412AFF0AEDB2C2F361CC8356E696CF8E777B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:d7:fa:ac:92:da:05:79:39:09:e7:e1:7c:
                    26:d2:ba:7b:a7:f6:87:82:ab:2b:05:e2:71:3a:a0:
                    5b:66:b9:18:ff:23:77:51:b1:01:64:26:ac:6b:6f:
                    42:45:de:4c:7a:f5:0e:29:68:57:12:09:07:a1:2c:
                    34:eb:16:f5:ad:af:52:b6:3e:69:70:e2:b6:6c:a1:
                    c6:e2:e6:d9:0f:1f:4b:99:39:ba:38:61:75:6f:fc:
                    d9:21:6c:58:f5:00:50:81:88:c0:22:33:c1:ac:ea:
                    88:92:a1:fd:0f:1f:d4:93:ff:8a:55:7a:cb:00:8d:
                    eb:03:c2:a4:e0:43:74:b1:fa:a3:59:12:54:ad:5f:
                    4a:f4:84:b6:d5:08:a9:cf:75:f0:76:2d:11:16:31:
                    88:de:35:e3:bf:f8:1f:ab:81:52:0f:61:f1:49:6a:
                    11:10:ad:eb:e9:43:f7:93:e8:9b:11:fb:e1:86:96:
                    82:47:69:8e:a1:b3:94:8b:e5:07:17:5e:d9:44:92:
                    e9:2c:ae:5a:8b:b9:81:9d:60:f5:e7:e9:24:1b:e7:
                    ce:f2:81:e3:9b:25:bb:1b:99:b7:7f:b7:2b:5c:58:
                    e5:b8:f4:95:f2:be:94:90:eb:70:5f:c2:2a:e1:a7:
                    71:60:a4:74:44:07:2e:fc:65:fa:74:b8:5b:0f:7a:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B7:41:2A:FF:0A:ED:B2:C2:F3:61:CC:83:56:E6:96:CF:8E:77:7B
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS53340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.254.0/24
                  181.214.47.0/24
                  181.214.81.0/24
                  181.214.87.0/24
                  181.215.249.0/24
                  191.96.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:be:a1:b2:1c:0f:80:4a:76:7b:19:10:a0:f2:14:d0:f2:24:
         0f:e5:cb:42:dc:bc:e4:3d:ec:c7:41:fe:8b:70:db:6d:66:53:
         ee:a4:31:4a:0f:7d:75:57:32:27:43:e4:b3:92:b5:22:73:3e:
         e7:af:26:3d:71:3c:5f:6b:1c:32:8c:13:8c:ca:0e:fd:f8:20:
         7e:24:90:9b:9f:e6:f7:a5:e5:43:26:f9:49:60:b8:a3:69:58:
         1d:b0:1f:a1:6e:52:f3:c5:8c:ea:97:9a:4a:31:98:8e:34:e2:
         00:2a:35:de:c8:b0:7f:db:1f:48:cd:c0:a8:3a:38:df:b5:83:
         bc:f1:83:fd:4e:1a:1b:a9:9d:a7:e1:24:01:f4:25:7b:44:16:
         7d:7d:b7:eb:6e:97:a8:31:cc:52:0f:f5:3f:98:8b:a4:86:1a:
         7e:64:d0:6f:d5:fd:97:39:84:91:26:5b:1d:90:9c:5b:39:8d:
         7c:a4:30:99:1a:a6:4c:78:46:b8:89:96:66:10:e0:1b:88:10:
         88:11:7c:ee:30:b0:e7:69:91:21:5c:d4:48:60:36:61:cd:2b:
         41:f8:c7:2d:d1:ba:e9:3c:c4:8c:21:5f:c4:0b:a8:6e:a4:48:
         7a:85:b0:5d:a7:90:a0:f9:3e:3d:71:f6:7e:f0:70:78:93:4b:
         b0:3c:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org