Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS58955.roa
File:                     AS58955.roa (raw, json)
Hash identifier:          lYrBHnAdh8VtPVF6NTNpvQUn9EDW8kGLbyuH06DbMxc=
Subject key identifier:   C0:98:ED:AC:FA:51:84:7D:26:F5:3B:FA:C0:17:DF:CF:75:AD:A8:7B
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       57F13F39BF7AF4A88B49DFD9BABE71EF99611892
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS58955.roa
Signing time:             Wed 12 Oct 2022 09:52:09 +0000
ROA not before:           Wed 12 Oct 2022 09:47:09 +0000
ROA not after:            Wed 11 Oct 2023 09:52:09 +0000
asID:                     58955
IP address blocks:        191.96.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f1:3f:39:bf:7a:f4:a8:8b:49:df:d9:ba:be:71:ef:99:61:18:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 12 09:47:09 2022 GMT
            Not After : Oct 11 09:52:09 2023 GMT
        Subject: CN=C098EDACFA51847D26F53BFAC017DFCF75ADA87B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:92:ca:e3:ca:92:e2:88:a6:23:77:9a:7d:
                    3f:4a:5e:ea:03:a6:86:6f:bd:7d:9d:38:d4:3a:e6:
                    4c:bb:95:74:b0:81:dc:4e:f2:22:1c:0a:db:5b:c0:
                    68:b5:74:b8:03:62:d0:1e:ed:68:63:67:72:96:6e:
                    bb:64:fb:ba:03:c9:56:31:d0:a5:c3:e2:03:cd:6e:
                    37:02:61:3f:94:29:a1:90:1c:b9:c8:fe:f8:94:f8:
                    83:bb:c6:4a:0a:65:9d:13:ee:d2:04:9b:df:cf:f0:
                    cd:6f:df:24:30:bb:ee:2a:aa:72:7e:ec:a7:f3:77:
                    b5:c7:f2:cc:da:38:e7:81:40:ce:29:2a:68:e9:f7:
                    57:c8:bc:1f:e7:04:e6:e7:08:8e:bb:e7:ed:92:bc:
                    4b:7e:e6:88:32:d0:86:5f:10:8e:f3:55:18:0b:76:
                    80:74:e1:ba:4b:18:ed:4d:2f:56:8f:52:84:73:a9:
                    c3:01:b7:77:b9:e3:d0:47:9c:43:eb:2d:b0:7a:a7:
                    b8:50:a3:26:6a:34:f3:44:e0:95:41:af:16:3a:bd:
                    7c:32:df:51:3a:48:fe:b0:13:64:30:87:2a:9b:e0:
                    7b:be:ee:96:ad:5b:0f:2b:61:53:d3:61:e0:5d:17:
                    23:f6:25:36:86:a6:68:59:e0:bf:5c:6a:44:a7:4c:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:98:ED:AC:FA:51:84:7D:26:F5:3B:FA:C0:17:DF:CF:75:AD:A8:7B
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS58955.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:07:f9:0c:e7:7b:04:0a:da:06:b5:68:13:ae:f7:99:d5:dd:
         56:96:47:c2:f9:e4:a5:1c:68:2e:51:db:56:5e:b7:a3:2f:fc:
         10:68:6a:32:4c:6f:a5:1b:2d:ae:40:b6:60:c3:0a:0a:e6:ea:
         08:61:b0:46:b0:62:7a:ea:c6:98:db:1e:a1:88:3f:05:f2:9a:
         aa:3b:65:cc:47:94:7d:da:79:d7:c0:30:9a:80:a3:29:57:c9:
         27:a8:84:0e:52:c5:d4:4c:5f:53:94:01:ad:83:97:69:d5:e1:
         03:9a:bc:07:fd:c5:89:36:55:3e:56:94:b6:3e:0b:3f:4a:8b:
         2c:ee:f5:8b:fe:9b:38:5f:4c:81:17:ca:9b:c1:27:7d:0c:7f:
         1b:60:ff:b0:51:ab:0d:cc:8b:c5:38:19:64:cf:b5:b9:a5:13:
         fb:83:56:bd:a0:47:d6:61:7c:8b:65:f3:1a:e1:dd:3c:67:88:
         21:04:af:3d:33:cc:f8:89:9a:fe:08:8a:54:5b:3f:25:9e:58:
         97:cc:9a:72:94:91:6b:e4:32:aa:4c:bf:a7:73:5c:7e:9e:6e:
         81:97:e7:b3:1d:49:53:48:23:2e:fc:6c:58:6d:96:e3:c2:7a:
         66:b9:08:a1:e2:b3:b8:c7:7b:5e:5b:0b:1f:e1:78:94:c0:f4:
         dc:59:fc:7e
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUV/E/Ob969KiLSd/Zur5x75lhGJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMTIwOTQ3MDlaFw0yMzEwMTEwOTUyMDlaMDMxMTAvBgNV
BAMTKEMwOThFREFDRkE1MTg0N0QyNkY1M0JGQUMwMTdERkNGNzVBREE4N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0m5LK48qS4oimI3eafT9KXuoD
poZvvX2dONQ65ky7lXSwgdxO8iIcCttbwGi1dLgDYtAe7WhjZ3KWbrtk+7oDyVYx
0KXD4gPNbjcCYT+UKaGQHLnI/viU+IO7xkoKZZ0T7tIEm9/P8M1v3yQwu+4qqnJ+
7Kfzd7XH8szaOOeBQM4pKmjp91fIvB/nBObnCI675+2SvEt+5ogy0IZfEI7zVRgL
doB04bpLGO1NL1aPUoRzqcMBt3e549BHnEPrLbB6p7hQoyZqNPNE4JVBrxY6vXwy
31E6SP6wE2Qwhyqb4Hu+7patWw8rYVPTYeBdFyP2JTaGpmhZ4L9cakSnTKM/AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUwJjtrPpRhH0m9Tv6wBffz3WtqHswHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVM1ODk1NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9gdzANBgkqhkiG9w0BAQsFAAOCAQEAWAf5
DOd7BAraBrVoE673mdXdVpZHwvnkpRxoLlHbVl63oy/8EGhqMkxvpRstrkC2YMMK
CubqCGGwRrBieurGmNseoYg/BfKaqjtlzEeUfdp518AwmoCjKVfJJ6iEDlLF1Exf
U5QBrYOXadXhA5q8B/3FiTZVPlaUtj4LP0qLLO71i/6bOF9MgRfKm8EnfQx/G2D/
sFGrDcyLxTgZZM+1uaUT+4NWvaBH1mF8i2XzGuHdPGeIIQSvPTPM+Ima/giKVFs/
JZ5Yl8yacpSRa+Qyqky/p3Ncfp5ugZfnsx1JU0gjLvxsWG2W48J6ZrkIoeKzuMd7
XlsLH+F4lMD03Fn8fg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org