Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140641.roa
File:                     AS140641.roa (raw, json)
Hash identifier:          VwJui3Z67aZVAXyUGBW2w9E4GmrhO3HqG0nSmyCN7nE=
Subject key identifier:   44:02:BB:5E:0D:7B:AB:47:D7:9E:1F:0B:E6:72:DB:BB:4F:5C:39:FA
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       63E39B7917F4B479141DEC1225E780DF4E880B22
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140641.roa
Signing time:             Mon 28 Nov 2022 12:18:23 +0000
ROA not before:           Mon 28 Nov 2022 12:13:23 +0000
ROA not after:            Mon 27 Nov 2023 12:18:23 +0000
asID:                     140641
IP address blocks:        191.96.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e3:9b:79:17:f4:b4:79:14:1d:ec:12:25:e7:80:df:4e:88:0b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:23 2022 GMT
            Not After : Nov 27 12:18:23 2023 GMT
        Subject: CN=4402BB5E0D7BAB47D79E1F0BE672DBBB4F5C39FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7c:b3:52:fe:33:37:4c:57:3d:4c:eb:1f:d2:
                    c2:84:d5:8b:eb:dc:d2:60:b4:01:3c:e1:59:f4:5c:
                    0c:5e:2f:3e:76:e5:9d:d8:e6:53:8f:26:02:d6:c4:
                    68:2b:e9:25:14:33:bf:b9:f0:a3:6a:ab:e7:0f:67:
                    33:b3:aa:30:a5:21:bc:51:93:8d:f5:5b:45:e2:29:
                    64:52:51:9a:23:05:c8:3a:dd:6c:94:f2:62:f9:e8:
                    4f:e5:0b:2e:14:7c:89:d3:70:85:a3:98:48:72:74:
                    11:bd:64:bd:1c:c6:cd:2c:49:ca:4d:e1:dd:bc:52:
                    4a:ca:89:aa:c4:0f:3c:a2:cf:e1:48:24:1f:8a:24:
                    b7:b2:65:d3:86:ba:9c:64:9d:69:2d:4c:4d:24:9f:
                    e0:31:8c:19:35:d5:3c:b7:df:f5:90:a9:68:51:6a:
                    c3:66:b3:ab:3f:64:7a:08:f6:63:b3:fe:cd:a4:eb:
                    53:a6:2b:33:39:fe:91:37:9d:1e:4f:b7:07:24:ae:
                    31:9c:b9:cb:cc:32:8a:9a:a3:d5:d5:22:3e:d6:f3:
                    58:1e:12:19:aa:e9:f1:47:70:c0:8d:d4:f1:af:7d:
                    ed:68:11:8d:e3:a0:5a:63:e0:ae:94:32:98:11:16:
                    6a:4c:dd:12:10:ec:96:de:c5:7c:5e:48:71:10:c5:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:02:BB:5E:0D:7B:AB:47:D7:9E:1F:0B:E6:72:DB:BB:4F:5C:39:FA
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140641.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:74:0c:7e:4f:07:f4:ad:bf:5b:01:52:3d:2d:4f:08:c8:47:
         4e:70:c9:a2:cf:27:5e:b2:1f:7a:92:5e:34:57:19:01:fa:31:
         fd:27:32:f0:09:e8:77:6e:e1:db:03:08:52:bb:44:95:30:fb:
         a0:58:9a:d5:60:36:9b:6d:b5:98:ef:b7:02:2a:33:f4:9b:41:
         de:5b:a1:99:35:a3:34:6e:cb:66:03:1d:32:5c:36:e3:be:eb:
         fe:91:41:cf:06:af:8c:d1:96:c8:f9:96:65:1e:eb:a8:a0:40:
         d0:53:1e:5d:29:4c:4e:ed:d9:57:2d:74:1b:df:2a:c7:bc:99:
         8d:c9:76:4f:e6:3e:21:c5:32:c4:18:51:c5:b8:b9:20:a2:f6:
         23:5a:c4:a0:1f:ea:11:1c:43:62:33:7f:90:18:4a:32:e5:66:
         fe:95:4e:93:97:85:9e:c1:ea:5c:73:c7:6e:45:34:d7:73:90:
         e2:ae:94:e5:7f:71:10:9d:a8:ea:25:ee:66:04:ac:0e:9d:9b:
         54:f3:88:e8:79:ae:be:51:ca:a7:9d:ac:95:37:2c:ce:84:37:
         a5:55:64:76:93:d2:a9:60:78:cc:64:ed:c9:a1:59:61:a7:d6:
         73:19:3f:4f:39:92:78:3b:b4:ac:e5:58:90:32:14:3f:2b:4b:
         05:fa:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org