Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS54138.roa
File:                     AS54138.roa (raw, json)
Hash identifier:          xTLiTIwiay5p94sVFTdTUiDur9R+2MTG32EFfr0vvMs=
Subject key identifier:   EA:64:50:E6:98:A7:58:BA:4D:14:AA:A0:BA:2D:21:E4:E2:F2:FA:D0
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       6F351B5004E5090B188BB93310E71E8EA311497D
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS54138.roa
Signing time:             Fri 11 Nov 2022 18:14:05 +0000
ROA not before:           Fri 11 Nov 2022 18:09:05 +0000
ROA not after:            Fri 10 Nov 2023 18:14:05 +0000
asID:                     54138
IP address blocks:        191.101.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:35:1b:50:04:e5:09:0b:18:8b:b9:33:10:e7:1e:8e:a3:11:49:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Nov 11 18:09:05 2022 GMT
            Not After : Nov 10 18:14:05 2023 GMT
        Subject: CN=EA6450E698A758BA4D14AAA0BA2D21E4E2F2FAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:69:bb:24:43:62:92:07:7b:d1:9b:90:48:
                    b7:a3:67:36:88:e4:24:10:50:32:c0:be:cd:7a:a5:
                    a9:2e:e0:3c:20:c1:db:08:17:f9:bb:51:46:3c:d5:
                    49:e8:79:3f:02:38:95:f4:29:09:46:43:af:2e:89:
                    b3:bc:b7:47:5d:eb:58:47:ee:7c:02:39:3d:1a:3d:
                    8d:a5:2c:7d:0f:52:a5:20:bc:af:de:dd:ae:8c:8d:
                    59:17:15:f9:ce:2a:0a:e8:0e:82:b5:a1:1f:2c:de:
                    1b:00:d9:5f:5d:a7:ee:50:b7:63:1a:9a:22:16:4a:
                    1a:5e:6a:e7:8c:45:f2:31:7a:dc:f8:38:e5:47:9a:
                    80:c5:8e:3e:82:d9:12:1d:e2:b6:78:46:78:d0:d3:
                    8a:ab:06:82:58:83:3b:5b:66:ac:89:cf:d3:42:48:
                    71:a7:09:88:4d:68:5f:d4:bf:27:79:9c:88:bd:24:
                    1b:0e:cc:0b:34:1e:49:50:96:5d:4a:d6:8a:97:af:
                    05:25:9e:6e:f0:25:1b:10:c8:18:70:83:a8:60:e9:
                    a8:cb:5a:bb:7f:b3:fb:8a:f5:22:bc:6f:c9:60:81:
                    62:27:bb:fa:48:9d:44:2a:d4:ce:b8:fc:a0:1c:cc:
                    c6:e8:f5:1d:f7:04:a2:7c:14:ba:1f:2b:4e:8d:13:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:64:50:E6:98:A7:58:BA:4D:14:AA:A0:BA:2D:21:E4:E2:F2:FA:D0
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS54138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:e8:e4:06:92:17:f1:2c:65:ae:d6:62:b5:3c:ab:cf:85:a9:
         39:dd:a1:48:d7:40:04:7f:c4:c5:4e:02:49:ca:a9:62:99:25:
         c9:bb:6b:73:b6:f7:d7:61:18:7c:23:f4:60:c7:3b:7f:78:34:
         8c:af:70:8f:d4:fb:d1:83:84:d0:1c:70:4b:0d:de:44:58:8b:
         8d:09:26:87:33:5c:ab:60:c7:b0:87:2f:c3:1e:56:ad:11:4b:
         64:ab:4f:c6:a7:a2:be:5d:8a:d9:91:9a:df:02:76:62:24:3e:
         4d:9a:fb:f5:3f:41:fe:42:8c:2b:15:96:af:42:0f:a3:70:a9:
         62:4f:33:ed:a3:52:a4:df:ef:34:68:02:59:c6:07:e8:60:8f:
         b6:4c:06:80:3b:48:3a:f3:f2:59:75:7d:ab:de:a1:df:df:51:
         b7:c4:a4:7f:49:9a:d4:66:b1:2f:b2:85:67:bc:3b:f8:dc:f0:
         1f:84:ba:0a:26:90:b3:64:b8:48:a4:71:ab:e4:40:4c:80:69:
         b8:fd:e5:4e:1d:3d:ef:09:15:95:71:cf:55:4f:33:5e:77:66:
         5c:95:62:11:42:c2:55:e3:1c:f8:9c:79:d1:47:7f:7d:9f:3c:
         82:14:7b:cc:33:7e:66:84:17:d6:26:41:74:a5:84:28:1f:7f:
         a7:59:1c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org