Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS12129.roa
File:                     AS12129.roa (raw, json)
Hash identifier:          1S8OCo7cwfCwf9pXlhBZ2ko4rpGhEkfLjLM6Gm4bm9k=
Subject key identifier:   1E:E0:EE:F6:1F:2C:34:10:92:15:C1:A7:8F:FF:39:BA:05:D4:0C:33
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       5E66C1315C91DBFC41A46751BA16400DBD7AEEFA
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS12129.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     12129
IP address blocks:        181.214.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:66:c1:31:5c:91:db:fc:41:a4:67:51:ba:16:40:0d:bd:7a:ee:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=1EE0EEF61F2C34109215C1A78FFF39BA05D40C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:c1:6a:3f:b7:c4:b4:8f:6d:71:a8:4d:eb:
                    68:7b:50:3f:2c:a1:80:1e:83:e5:aa:a9:40:03:f0:
                    6a:4b:c3:64:7d:25:81:d3:03:00:ed:f6:4a:ac:cc:
                    84:7a:34:83:ab:75:77:0e:b3:97:69:9c:48:fd:f1:
                    00:8b:2a:fe:43:bd:bc:6c:d8:c7:52:b4:61:f2:c3:
                    c8:45:4d:7a:c7:ca:7b:dd:fb:b5:20:78:46:66:40:
                    12:08:76:15:28:47:a8:7c:62:80:31:4e:62:1c:0d:
                    0b:7c:2e:00:53:37:fa:87:ea:89:74:81:1d:81:7f:
                    39:90:da:7c:d5:bc:a7:ba:32:e5:b9:34:da:c0:06:
                    7d:5d:3a:15:7e:a1:4e:98:9d:c3:3d:f1:20:9d:17:
                    28:09:46:12:f3:61:68:fa:5a:c5:10:bf:4a:a5:16:
                    8a:50:9f:3f:ef:92:61:e9:c1:28:dd:53:fe:90:f1:
                    44:69:7b:0b:2f:13:bf:1c:4e:a5:0a:c5:c4:27:02:
                    4f:ca:44:5c:46:f8:19:83:bc:e6:43:c9:9f:2e:c1:
                    87:e7:f0:2b:a2:21:a9:af:3f:ef:b2:ea:54:0d:59:
                    52:95:25:27:20:49:3b:d1:71:c9:62:68:c1:f8:e4:
                    87:53:92:65:8f:e2:07:20:40:91:e2:b0:9a:7d:6d:
                    f6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E0:EE:F6:1F:2C:34:10:92:15:C1:A7:8F:FF:39:BA:05:D4:0C:33
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS12129.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:71:92:28:1f:94:80:8e:fa:8a:d5:57:4d:67:d6:0a:1a:c4:
         51:00:e1:bd:61:05:9f:41:62:8c:e8:bf:4d:2c:c1:42:cd:c3:
         d9:3a:cc:50:57:9e:a0:b6:64:4e:34:a5:c9:1b:ea:66:72:88:
         75:04:15:19:4a:38:d1:73:d2:7f:0f:3e:e8:00:ac:cc:41:2a:
         73:06:98:51:b0:15:5b:0d:6f:78:50:c7:ac:ca:74:d8:d1:1c:
         d2:5e:e0:10:13:cd:38:86:de:2a:a0:15:63:03:b2:e2:52:f8:
         cc:a5:e6:17:44:cb:ff:c7:93:58:b4:b0:93:2f:52:fd:4c:a5:
         54:32:b5:08:a9:2c:f1:fd:f0:e4:16:38:5e:71:df:48:1a:21:
         ac:56:b7:16:03:c6:eb:ee:bf:72:02:e7:94:fe:25:a5:44:83:
         84:b3:f2:0f:32:66:a4:cd:be:56:17:25:6e:4b:9a:ca:85:d4:
         96:74:82:bc:a6:18:55:94:6e:a9:c2:d7:3e:7e:38:49:13:0b:
         44:5e:e5:09:ca:cb:1d:ba:22:85:db:33:10:1f:92:91:e1:ad:
         78:90:bb:4e:0d:3f:46:75:3b:46:f2:29:98:24:b1:34:62:74:
         18:7d:5b:63:8e:87:32:54:a1:3b:12:4f:b2:f4:c7:b7:a9:61:
         35:ac:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org