Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133973.roa
File:                     AS133973.roa (raw, json)
Hash identifier:          KPfT9KbB+BnvO/Ge1vE9K0b/Px9G0ViQLVHAFmaMiTQ=
Subject key identifier:   F6:CF:16:85:F1:4D:A7:AB:CD:23:B3:44:76:77:4B:70:41:7D:BC:03
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       20F453889A279EB71692E11D20E3CAFA8A4C6FDD
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133973.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     133973
IP address blocks:        181.214.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f4:53:88:9a:27:9e:b7:16:92:e1:1d:20:e3:ca:fa:8a:4c:6f:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=F6CF1685F14DA7ABCD23B34476774B70417DBC03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:78:c0:ca:85:fe:28:a6:27:ab:ca:0a:2b:
                    7f:0f:d3:b8:8e:25:c0:4a:0e:ab:68:cc:fb:55:d1:
                    68:61:a3:40:3e:09:09:f7:91:46:3a:76:c0:bf:04:
                    7a:ea:a6:07:71:67:bc:eb:e7:89:47:42:d9:8a:3d:
                    03:aa:76:2a:8e:66:60:9f:14:57:c6:82:24:9e:93:
                    f0:6e:cc:19:9b:90:69:6e:90:c5:29:37:d3:f0:82:
                    8e:58:6e:2f:ef:56:3e:be:c6:7f:4c:da:16:d3:06:
                    c8:08:dd:59:2c:ce:58:0a:4f:e7:04:c1:56:53:b2:
                    40:c3:38:55:06:23:9b:41:a9:8c:9d:3a:e3:bd:37:
                    99:56:50:34:ad:76:72:bb:87:3a:7b:69:10:b8:0c:
                    2f:d3:4c:c5:1f:9a:c9:22:e5:14:0f:ad:c6:2e:ff:
                    0c:8f:88:64:60:e1:89:43:fb:7b:5c:a0:b7:08:5d:
                    7f:eb:9f:0f:1c:34:73:a4:96:6e:b6:fd:7a:b1:cb:
                    1f:1f:a0:a3:95:1d:81:b8:fb:6e:64:12:3b:8c:cd:
                    22:fb:eb:61:19:2c:f3:70:d1:9d:94:dc:e3:87:20:
                    be:79:2e:5a:7e:04:bd:78:c2:b4:21:1e:1e:48:2c:
                    ee:d5:2d:49:09:41:6e:b3:da:2b:cd:a0:bd:eb:84:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CF:16:85:F1:4D:A7:AB:CD:23:B3:44:76:77:4B:70:41:7D:BC:03
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS133973.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:dc:97:ef:9a:37:bd:ec:a4:d9:96:7c:33:60:d1:b4:b6:
         8c:a9:9a:5d:5e:eb:61:fa:ba:21:fd:16:02:8d:05:79:e4:cd:
         24:7d:6f:1c:f5:f9:e1:a1:53:b5:dd:10:b1:da:c4:a1:cb:38:
         55:bd:84:57:49:d9:43:a9:57:e2:a5:f8:c2:17:f4:fc:6c:38:
         f2:f4:e5:cf:09:ad:f0:d3:1e:84:8f:1d:ec:29:a5:82:7b:b5:
         95:e1:7a:17:dc:cb:41:f6:da:8f:92:c0:63:27:11:28:31:6e:
         9e:74:c6:0c:c7:81:dc:ad:8b:4a:74:22:13:f1:80:4d:31:a6:
         6e:74:78:cd:82:e6:d4:7e:84:eb:89:5a:82:3c:d0:63:b3:aa:
         0e:20:c8:f5:b2:07:2b:84:02:89:af:48:5d:42:71:5b:c7:74:
         55:bd:e3:3a:cc:90:cc:74:a0:13:8f:e4:f7:bc:48:ea:b3:5b:
         5c:6c:14:6d:ae:8f:17:b8:c1:db:05:81:4c:06:b5:7f:98:6c:
         5f:a8:6d:f9:45:c3:b0:ed:0c:b1:0f:ef:e7:ca:e9:99:cd:96:
         4a:39:7d:92:be:38:5e:d0:02:55:6a:99:17:a1:61:6c:6d:4e:
         a7:d7:e0:3d:00:80:66:d8:5b:2e:df:23:14:c0:cb:0f:2c:cd:
         ea:ca:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org