Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS1299.roa
File:                     AS1299.roa (raw, json)
Hash identifier:          VGjcP9aurNM4mrs9HKkWdjlOJ6WTAcHRqu6/j+9aAvk=
Subject key identifier:   FF:36:B3:1B:C3:15:D9:E3:ED:BA:1B:22:52:4E:F4:1B:31:18:1D:6A
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7FBB5C9FDEA2C1416F8FC8F4CF42AC99EE1115B1
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS1299.roa
Signing time:             Wed 07 Dec 2022 12:20:42 +0000
ROA not before:           Wed 07 Dec 2022 12:15:42 +0000
ROA not after:            Wed 06 Dec 2023 12:20:42 +0000
asID:                     1299
IP address blocks:        179.61.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:bb:5c:9f:de:a2:c1:41:6f:8f:c8:f4:cf:42:ac:99:ee:11:15:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec  7 12:15:42 2022 GMT
            Not After : Dec  6 12:20:42 2023 GMT
        Subject: CN=FF36B31BC315D9E3EDBA1B22524EF41B31181D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ac:08:91:0c:f7:f3:4f:82:b3:6f:7a:53:dc:
                    b6:11:27:4e:9e:dd:bc:ce:6c:b8:b3:7d:f6:00:45:
                    93:fc:cd:3f:5d:58:73:37:e0:f3:5e:23:4d:62:73:
                    00:2b:32:ee:e1:99:22:b1:07:d2:56:a4:ae:15:89:
                    39:e7:8d:65:dd:b6:3f:01:09:bc:65:75:0c:3d:11:
                    b4:6d:f3:80:74:eb:5d:4b:19:78:2e:7e:79:b1:ca:
                    25:8b:13:74:c0:ca:43:e8:6f:74:c3:6d:aa:29:b5:
                    9c:84:f6:1c:79:b7:65:a6:18:6e:dd:34:02:2c:c8:
                    7b:08:1b:f0:96:9d:7a:de:ff:7f:7b:1a:9d:07:a7:
                    55:ca:c2:7f:78:6e:6b:74:c5:fe:36:a0:e7:de:a4:
                    0e:07:b8:53:9e:64:2e:ab:6f:c3:be:00:55:17:87:
                    bf:3e:47:26:8a:d2:c1:1e:f1:24:49:4b:71:03:e8:
                    f0:66:4e:61:11:4f:41:c7:41:e0:62:f5:14:c9:73:
                    81:d6:9c:25:ca:98:43:e7:1e:28:60:1a:43:af:80:
                    ab:69:67:1d:19:96:51:b1:d9:b6:65:43:9f:2c:18:
                    ff:18:40:10:40:8c:19:50:48:3a:b0:fe:fb:4e:4a:
                    8f:67:ec:d9:98:fa:64:8c:62:92:22:1d:24:5c:a1:
                    59:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:36:B3:1B:C3:15:D9:E3:ED:BA:1B:22:52:4E:F4:1B:31:18:1D:6A
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS1299.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c9:86:1f:cb:77:0b:e7:8f:c0:e0:7a:69:c5:1a:ee:0d:83:
         0b:e4:d7:3b:5d:b6:f0:40:27:18:ed:40:24:d1:2b:fb:8d:b5:
         ef:18:aa:74:4a:0a:8b:8e:3e:36:12:18:9f:63:29:af:28:86:
         38:5a:fc:4f:b3:14:d8:0f:64:bd:6a:92:e6:32:64:3e:0c:08:
         e1:48:8a:ff:3f:55:df:a5:32:24:c1:97:73:33:29:3f:7b:4e:
         cc:c3:d6:1f:b8:d1:f0:27:f9:6b:c3:a0:c9:83:af:61:4b:83:
         74:06:60:fe:5c:2e:c2:ac:a9:f9:bf:26:0d:e0:df:03:ec:ea:
         af:24:c2:22:18:f5:ad:9d:d2:57:c9:bf:85:6f:91:62:13:c0:
         e0:e6:a6:f7:a3:89:84:ed:ba:1a:8a:9f:68:97:62:75:ed:7c:
         98:8a:aa:1d:2f:64:52:fb:58:83:58:d4:9e:44:b9:64:5b:72:
         00:41:3f:c6:c1:ce:bc:f0:19:5a:48:ef:8e:e9:c0:e5:bb:8d:
         75:79:71:6c:9e:51:67:e3:dc:5f:ce:d8:f3:e3:ff:66:84:0b:
         18:e5:e8:ee:66:b8:0a:de:bf:a9:6a:1f:18:d5:fd:f5:ce:89:
         24:ab:94:0f:bf:1b:48:39:a5:7d:f4:3c:ab:70:e0:ca:7d:27:
         e7:b7:bc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org