Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60819.roa
File:                     AS60819.roa (raw, json)
Hash identifier:          MEKE8isTKfVjm1DLtf7DLuRN8Stc3AASW1clwQ7cVjw=
Subject key identifier:   00:73:46:1D:0D:D6:10:06:17:56:5E:73:6E:06:46:EA:B0:8C:01:95
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       57B6B14B34FA04DE4DAC570DEFFFDD5FAD8EB92B
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60819.roa
Signing time:             Wed 26 Oct 2022 20:42:50 +0000
ROA not before:           Wed 26 Oct 2022 20:37:50 +0000
ROA not after:            Wed 25 Oct 2023 20:42:50 +0000
asID:                     60819
IP address blocks:        181.215.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b6:b1:4b:34:fa:04:de:4d:ac:57:0d:ef:ff:dd:5f:ad:8e:b9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 26 20:37:50 2022 GMT
            Not After : Oct 25 20:42:50 2023 GMT
        Subject: CN=0073461D0DD6100617565E736E0646EAB08C0195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:4b:7f:42:56:24:8e:d2:e9:aa:b7:49:4a:
                    5c:4d:2a:9e:0a:fe:a5:14:47:a5:3b:ca:9f:e3:78:
                    8f:f2:66:7a:b2:da:b8:59:32:5b:3c:f7:82:1d:78:
                    69:0f:e9:7c:b4:76:f6:2c:70:1d:c2:67:a5:9f:a6:
                    7d:07:f9:29:81:f7:f3:a1:1f:d4:42:35:b8:59:39:
                    27:e7:0f:77:e4:8a:66:38:eb:87:72:08:b1:44:6c:
                    53:1b:8d:d1:ff:09:f5:d4:c1:26:62:f5:3b:a1:df:
                    ae:50:32:f8:25:a0:40:6d:0d:70:81:71:63:3b:99:
                    e9:3e:e9:53:2e:15:41:10:cf:75:c1:55:5b:de:da:
                    21:3e:8a:ad:18:85:0a:f6:d6:3e:7d:76:6d:7f:5c:
                    bf:31:8f:03:23:62:b0:b0:fa:cc:89:65:19:ed:cd:
                    a4:15:7f:30:80:94:79:79:02:4c:4d:58:1b:aa:37:
                    41:86:bc:dc:d3:e8:3e:7a:3b:6e:21:1c:c1:2d:66:
                    0b:e1:50:7d:a8:5f:3b:43:dc:a1:21:d3:d8:41:1d:
                    0c:42:38:fa:94:b6:cc:af:e3:82:25:77:54:cb:e0:
                    02:ff:5c:54:13:6c:57:5c:d0:d5:b4:70:02:45:bf:
                    ee:ba:14:eb:49:c9:a7:9a:04:24:12:d3:aa:52:22:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:73:46:1D:0D:D6:10:06:17:56:5E:73:6E:06:46:EA:B0:8C:01:95
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS60819.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:04:11:0c:91:2b:4e:08:37:45:92:13:fb:a6:70:e3:09:2c:
         76:71:49:29:9d:db:84:a5:94:02:27:41:71:c2:09:fe:5c:47:
         e2:44:18:77:b9:b8:8b:b4:99:b1:7f:df:0f:da:41:4b:19:f7:
         a9:bd:c5:a9:9a:cf:8f:62:e1:44:e2:35:b3:16:b1:df:00:fe:
         34:cc:b9:fb:78:71:6a:60:05:03:26:a7:41:91:ea:4c:9b:dc:
         fb:d2:fa:17:04:66:e9:e2:bb:7b:4e:12:e0:72:dc:00:10:c2:
         9b:37:9e:65:e2:39:29:32:1f:b6:b6:18:88:b6:68:ce:fe:7a:
         87:0e:10:7d:f7:98:6f:a0:21:ac:aa:ed:6e:c4:04:45:3f:7b:
         d3:b7:b2:4e:27:a8:d8:ed:44:b8:a7:17:dc:51:b5:79:39:52:
         e2:02:05:f7:50:9f:9d:d9:0c:2f:f9:b8:26:66:89:5a:f6:8a:
         48:24:d1:8a:5b:05:0c:01:51:04:48:48:fe:85:91:28:80:82:
         c1:70:c9:e9:a6:0a:c8:c2:d4:3e:c9:a5:a5:29:e0:59:eb:eb:
         b5:3e:d9:e5:77:78:60:ec:90:d5:03:78:22:b8:0e:fe:c5:26:
         64:03:5e:e9:ee:c0:8c:94:b2:d1:65:2f:42:e5:f6:48:a7:42:
         58:51:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org