Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13627.roa
File:                     AS13627.roa (raw, json)
Hash identifier:          ttJHjOaBR6+7c9TzPTutOo9/CMvxKtKA7Q1YRwN1At0=
Subject key identifier:   C2:94:46:E4:13:6B:0C:7A:58:F1:85:8F:BC:9E:94:24:CE:34:26:67
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       691E876D0E180D86465EFE60E606B741775C5FA8
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13627.roa
Signing time:             Tue 10 Jan 2023 12:01:56 +0000
ROA not before:           Tue 10 Jan 2023 11:56:56 +0000
ROA not after:            Tue 09 Jan 2024 12:01:56 +0000
asID:                     13627
IP address blocks:        185.137.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1e:87:6d:0e:18:0d:86:46:5e:fe:60:e6:06:b7:41:77:5c:5f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 10 11:56:56 2023 GMT
            Not After : Jan  9 12:01:56 2024 GMT
        Subject: CN=C29446E4136B0C7A58F1858FBC9E9424CE342667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:f6:8c:8d:ac:62:53:bc:f2:95:0e:54:a4:
                    98:50:27:04:99:c7:88:f3:4f:58:5f:15:c3:0c:17:
                    f3:20:0c:2e:fb:27:63:1c:8e:a2:8a:f5:7b:58:c9:
                    88:4f:64:0a:2e:31:37:a0:9f:ed:f0:aa:39:4c:6f:
                    c5:a8:e3:bb:97:d6:a9:0c:cc:6b:5a:b3:f3:eb:40:
                    e1:93:c1:73:21:80:5f:73:7e:b1:16:bd:1f:2a:af:
                    61:0b:bb:6c:70:52:5a:60:36:a4:ea:9f:b6:87:ff:
                    fe:ec:22:8c:1d:91:1a:68:2f:2b:66:43:91:85:3e:
                    30:1d:b1:47:7f:ec:82:45:4c:81:b2:c4:35:f1:23:
                    3d:da:d4:a7:7b:45:9d:ba:16:7e:31:01:e9:d5:85:
                    de:60:79:7e:fd:ff:bf:e9:3c:79:e1:03:0a:37:98:
                    bd:55:04:9c:17:33:db:51:5c:c9:7c:48:a8:71:ab:
                    e8:35:68:7c:84:96:2e:e7:ba:79:c9:27:81:1d:77:
                    03:c0:14:5e:8d:20:f8:eb:d9:6f:e1:64:3b:30:1c:
                    a1:8f:73:4b:e7:e9:63:66:96:29:05:a1:01:9a:bc:
                    dc:0e:3b:0a:c6:b0:ca:b1:79:22:d9:fd:2c:da:83:
                    9d:00:20:4b:a6:d9:ff:85:d8:61:01:fc:92:d2:bf:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:94:46:E4:13:6B:0C:7A:58:F1:85:8F:BC:9E:94:24:CE:34:26:67
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS13627.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:36:31:f6:b9:8d:d9:d6:0f:6e:ec:05:39:c5:51:8d:91:3a:
         e0:9f:7c:1f:86:e0:ea:38:5f:e0:2c:fe:4e:ac:26:31:0a:14:
         b2:08:5d:e4:45:8c:b5:a6:23:43:7e:09:40:12:e2:52:81:a9:
         48:9a:4d:36:b8:8d:4d:fa:9e:b1:19:50:ee:86:1a:ce:f0:d9:
         79:f6:8e:43:d8:52:37:2d:44:99:a7:aa:8e:74:cc:01:86:ad:
         fb:15:be:91:ee:c9:cf:a6:d9:76:ab:3d:18:9d:4f:35:00:36:
         bd:88:31:d4:2d:a4:06:6a:4e:80:d0:4f:de:ca:79:8b:f1:b4:
         7e:da:42:e5:3d:2c:3d:db:00:e4:4e:00:5a:db:7a:77:41:1d:
         46:95:5b:72:cb:b3:e3:f8:83:7d:33:d2:35:e8:ad:19:bd:13:
         bd:cc:46:35:5a:7b:a2:14:b9:30:98:51:50:cb:7b:79:86:65:
         0b:77:56:8c:ee:6e:c3:86:2f:31:de:99:3f:bc:2c:12:25:7f:
         c6:a9:d8:2a:30:1e:7a:0a:fa:36:c6:49:16:8a:c7:b8:50:b4:
         29:a7:91:95:4f:3d:f8:f3:54:34:c7:61:de:e5:6a:74:2c:56:
         ad:4c:a3:a5:2d:47:90:ed:4a:4e:42:88:b6:5d:23:f3:81:87:
         3f:de:89:ff
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUaR6HbQ4YDYZGXv5g5ga3QXdcX6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAxMTAxMTU2NTZaFw0yNDAxMDkxMjAxNTZaMDMxMTAvBgNV
BAMTKEMyOTQ0NkU0MTM2QjBDN0E1OEYxODU4RkJDOUU5NDI0Q0UzNDI2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBj/aMjaxiU7zylQ5UpJhQJwSZ
x4jzT1hfFcMMF/MgDC77J2McjqKK9XtYyYhPZAouMTegn+3wqjlMb8Wo47uX1qkM
zGtas/PrQOGTwXMhgF9zfrEWvR8qr2ELu2xwUlpgNqTqn7aH//7sIowdkRpoLytm
Q5GFPjAdsUd/7IJFTIGyxDXxIz3a1Kd7RZ26Fn4xAenVhd5geX79/7/pPHnhAwo3
mL1VBJwXM9tRXMl8SKhxq+g1aHyEli7nunnJJ4EddwPAFF6NIPjr2W/hZDswHKGP
c0vn6WNmlikFoQGavNwOOwrGsMqxeSLZ/Szag50AIEum2f+F2GEB/JLSv839AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUwpRG5BNrDHpY8YWPvJ6UJM40JmcwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBxBggr
BgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMxMzYyNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALmJXjANBgkqhkiG9w0BAQsFAAOCAQEATzYx
9rmN2dYPbuwFOcVRjZE64J98H4bg6jhf4Cz+TqwmMQoUsghd5EWMtaYjQ34JQBLi
UoGpSJpNNriNTfqesRlQ7oYazvDZefaOQ9hSNy1EmaeqjnTMAYat+xW+ke7Jz6bZ
dqs9GJ1PNQA2vYgx1C2kBmpOgNBP3sp5i/G0ftpC5T0sPdsA5E4AWtt6d0EdRpVb
csuz4/iDfTPSNeitGb0TvcxGNVp7ohS5MJhRUMt7eYZlC3dWjO5uw4YvMd6ZP7ws
EiV/xqnYKjAeegr6NsZJForHuFC0KaeRlU89+PNUNMdh3uVqdCxWrUyjpS1HkO1K
TkKItl0j84GHP96J/w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org