Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133398.roa
File:                     AS133398.roa (raw, json)
Hash identifier:          MGyz2Jyk6PLD5qXDGq6QOz07PYNHDOBf5iEhjGdBGrM=
Subject key identifier:   59:85:3D:EB:B0:FA:69:51:23:70:A9:89:98:51:76:12:CE:9E:75:3C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       1A48F0E6665B949B3F6F8559B7769E5F5737B451
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133398.roa
Signing time:             Mon 28 Nov 2022 12:18:15 +0000
ROA not before:           Mon 28 Nov 2022 12:13:15 +0000
ROA not after:            Mon 27 Nov 2023 12:18:15 +0000
asID:                     133398
IP address blocks:        191.101.180.0/24 maxlen: 24
                          193.31.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:48:f0:e6:66:5b:94:9b:3f:6f:85:59:b7:76:9e:5f:57:37:b4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:15 2022 GMT
            Not After : Nov 27 12:18:15 2023 GMT
        Subject: CN=59853DEBB0FA69512370A98998517612CE9E753C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:db:f1:f5:94:40:24:df:b5:e2:0e:05:7d:
                    00:1c:ce:1a:42:b0:6f:b0:e9:9b:98:42:b3:38:34:
                    ba:3f:bd:0a:93:46:39:59:b0:45:41:11:15:04:70:
                    ec:f5:9e:02:66:6e:61:de:00:1f:2f:8b:73:b2:d1:
                    b7:13:26:59:3b:a4:75:6a:42:52:0c:d6:b4:a0:4e:
                    3a:08:5a:63:4d:f9:1c:c1:02:98:fe:39:e2:97:15:
                    37:fb:4f:c9:e9:e0:a4:ba:f2:59:da:7d:33:dc:ce:
                    05:09:7a:be:35:a1:7a:cd:38:d0:5c:9b:cc:8a:fb:
                    ef:66:68:a4:cc:80:02:52:98:68:02:86:b9:7b:30:
                    04:92:c7:2f:1f:94:6f:ad:bb:e3:b8:2a:d6:41:d0:
                    9b:be:95:8e:f4:e8:d2:ec:0b:3c:bf:99:06:c4:69:
                    35:ee:7e:80:2d:99:64:2c:b1:8a:15:0b:c4:c9:1e:
                    73:45:db:a0:10:4c:3a:ca:d6:65:ad:d9:c0:3d:a7:
                    e8:34:49:99:87:e0:a9:74:a9:f1:2c:1a:b3:29:d1:
                    e4:92:07:5c:0e:2c:ae:93:6e:0e:f7:53:99:66:64:
                    a3:d2:16:2b:8d:e7:1c:e4:e1:74:78:29:3f:07:0b:
                    1f:2c:03:ac:57:e0:8a:1e:1c:ea:ca:7c:49:cd:78:
                    5e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:85:3D:EB:B0:FA:69:51:23:70:A9:89:98:51:76:12:CE:9E:75:3C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.180.0/24
                  193.31.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:0d:43:ed:75:5b:52:50:55:7d:0a:9f:e3:a7:90:fa:d9:1e:
         dd:f2:45:7e:e1:1b:5e:87:fe:41:37:94:cf:4c:6b:90:a1:85:
         5b:97:e9:70:ed:dc:33:0b:ed:c9:31:bf:e6:72:dd:b4:53:a3:
         9e:ec:5c:00:e1:56:7c:c7:58:eb:7d:55:4a:6a:a6:70:d9:d9:
         ca:50:15:c8:a6:eb:3d:1c:d2:27:ee:19:1f:92:00:3d:60:67:
         94:2a:28:9d:f9:20:73:d9:37:3f:62:f3:90:71:90:45:bc:8a:
         de:b7:48:f1:2b:ad:cc:fb:5e:63:d5:56:4a:f6:3e:00:32:30:
         c1:12:d2:63:10:43:b5:92:e8:29:78:18:02:00:40:51:d9:15:
         e0:34:e0:07:ba:14:bd:79:c8:ff:e1:bb:e6:4b:f8:b8:ce:23:
         b8:e7:17:83:f9:2f:ed:7d:f1:8e:6a:c7:8a:98:e7:a9:2b:c6:
         e1:66:a1:d5:97:eb:fa:c3:ef:5a:d2:78:45:eb:4a:3d:f3:96:
         4a:72:dc:5f:03:5c:e7:5b:a9:fa:ee:28:20:ae:ca:fd:13:b8:
         18:9d:a8:1a:2b:49:3e:76:22:90:b0:b9:ef:27:c4:3e:69:59:
         01:e4:54:d9:be:a1:ae:fd:7a:9b:68:1d:9f:a8:1c:58:dc:3a:
         3e:92:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org