Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS9280.roa
File:                     AS9280.roa (raw, json)
Hash identifier:          /a/MQmPdLLMienzvRQsGsAZXf7yF1AlAS2vLzWAUIpA=
Subject key identifier:   88:33:C7:FB:52:D7:39:2D:58:D0:23:5F:CB:48:16:A8:4C:97:A1:19
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       4ACB4D62151CC4047149D81DCC435AE03559564E
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS9280.roa
Signing time:             Sat 27 Aug 2022 09:43:47 +0000
ROA not before:           Sat 27 Aug 2022 09:38:47 +0000
ROA not after:            Sat 26 Aug 2023 09:43:47 +0000
asID:                     9280
IP address blocks:        191.96.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cb:4d:62:15:1c:c4:04:71:49:d8:1d:cc:43:5a:e0:35:59:56:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Aug 27 09:38:47 2022 GMT
            Not After : Aug 26 09:43:47 2023 GMT
        Subject: CN=8833C7FB52D7392D58D0235FCB4816A84C97A119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:67:4a:c7:7d:ed:58:32:39:18:8b:8e:4b:
                    0c:03:36:72:a7:ed:fe:8a:b0:fd:4f:c5:2e:01:c8:
                    1a:db:27:49:da:bf:9e:2d:4f:98:b6:e8:94:42:a3:
                    6f:91:1d:10:0a:70:08:10:ac:bf:0f:69:da:62:dd:
                    36:d9:92:b7:a3:5e:c3:4f:70:84:61:e7:74:45:a9:
                    3d:3c:9d:dc:93:5e:59:a5:43:db:23:1d:1b:55:df:
                    11:bd:61:ee:b7:c0:6b:c4:4c:72:b9:ef:af:8c:cf:
                    94:48:42:18:85:c3:53:cd:2f:91:09:13:16:13:42:
                    16:32:e7:ee:00:be:13:de:74:8e:c7:6e:c4:fd:6f:
                    d6:26:17:11:e2:68:7d:c7:4c:21:6f:78:ac:88:9a:
                    65:19:cc:5e:e9:c4:32:ab:45:85:1c:07:20:c0:2d:
                    cb:88:94:ed:4f:af:8a:fe:93:2f:7e:1a:64:1c:dd:
                    85:0f:c0:cf:2a:63:d8:1c:65:a5:22:fc:85:bc:07:
                    d6:a9:05:1a:c1:3d:90:33:31:e4:3c:23:2c:33:85:
                    f3:9f:f5:28:a0:4e:9f:9c:ca:79:12:d9:a6:91:f3:
                    58:1f:22:f8:6e:61:7e:ed:67:37:a4:1c:84:18:28:
                    e6:da:a1:70:a7:47:fb:ce:8b:97:05:78:cb:32:ec:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:C7:FB:52:D7:39:2D:58:D0:23:5F:CB:48:16:A8:4C:97:A1:19
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS9280.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:7a:7b:27:7f:42:c4:3e:68:a8:0f:02:92:b7:7a:f5:42:1a:
         9d:8f:b0:04:4e:fa:8b:04:af:61:64:1b:6e:de:99:8c:56:40:
         e5:c0:b6:5a:08:56:86:2e:a0:a3:f6:79:16:b7:ba:a5:90:bf:
         02:a5:23:b2:ef:b9:61:ea:9a:3c:74:3b:13:53:14:6c:01:00:
         82:be:e2:b9:8f:26:53:9b:1a:7a:44:a1:19:d1:1d:ee:00:53:
         92:40:e8:8c:9d:df:9c:5b:78:49:94:0e:0a:e5:fe:ac:7a:d7:
         6a:7e:93:ce:75:a3:02:fb:d1:a6:08:22:ad:3d:44:d4:08:04:
         00:c9:02:76:1c:5f:d6:c9:8f:87:14:44:04:e6:48:bc:35:bb:
         19:b7:97:45:ab:7a:18:01:2f:aa:aa:f8:5a:04:8d:96:9a:20:
         b4:78:32:79:6c:7d:83:68:c2:7f:00:ac:cf:0b:5d:f1:b4:58:
         84:3b:e7:13:fe:fe:8a:48:5d:39:e1:ce:7c:9d:b8:ed:ee:81:
         e2:d6:af:94:15:c6:a9:b9:fa:e0:2a:f3:16:b1:d5:38:80:4e:
         45:cd:d7:d6:40:27:4a:d6:6c:da:84:80:39:ca:57:7c:e3:44:
         21:18:8a:91:57:63:1d:02:d0:09:60:5a:ee:44:ca:bd:2d:53:
         6d:de:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org