Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140947.roa
File:                     AS140947.roa (raw, json)
Hash identifier:          pm7WPh24Ox9iTgYlKPrYwsI/Ll7rO3uIJbdv/ar14wQ=
Subject key identifier:   C3:32:C2:A7:04:E0:3A:74:80:EA:A4:7F:38:B9:E1:9C:77:FD:05:B7
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       1C406269B0AB31B244B9E56830CCF425EC6B3F80
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140947.roa
Signing time:             Thu 15 Dec 2022 01:38:31 +0000
ROA not before:           Thu 15 Dec 2022 01:33:31 +0000
ROA not after:            Thu 14 Dec 2023 01:38:31 +0000
asID:                     140947
IP address blocks:        179.61.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:40:62:69:b0:ab:31:b2:44:b9:e5:68:30:cc:f4:25:ec:6b:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec 15 01:33:31 2022 GMT
            Not After : Dec 14 01:38:31 2023 GMT
        Subject: CN=C332C2A704E03A7480EAA47F38B9E19C77FD05B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:9f:c7:f5:a1:f1:6a:08:7b:33:38:4e:5e:
                    26:92:41:8c:02:5c:b1:44:5c:66:75:88:77:60:25:
                    fa:1e:c3:70:fb:60:e8:f7:c9:a1:46:3c:b1:29:47:
                    5a:25:7e:25:98:0a:85:d7:a1:78:31:77:18:71:8a:
                    fd:0d:3c:61:05:f4:66:b7:25:c2:17:34:d8:58:1b:
                    62:25:b9:42:cc:0c:a4:00:09:28:be:f0:b5:7d:39:
                    46:64:17:c7:bb:a0:12:8c:96:25:d5:d2:43:cd:cb:
                    78:c7:75:f1:b3:72:12:0a:c8:2d:f0:6c:1c:47:ea:
                    f5:94:80:da:9d:78:10:14:41:03:12:b4:e6:9f:1b:
                    54:58:87:51:3d:92:be:e4:8a:63:d0:6b:2f:d7:13:
                    cc:18:62:4e:8c:3c:5a:d4:39:f0:0c:8b:82:10:cc:
                    7e:e3:5e:66:56:a1:eb:95:c0:e4:75:b6:db:1f:b8:
                    3d:d0:be:d8:5a:ce:43:e0:29:b1:85:d2:21:32:0f:
                    6f:1e:29:49:91:9f:e1:aa:12:5a:23:3a:bb:82:34:
                    8c:d0:c8:1d:05:7a:a6:16:7d:6a:e3:43:4f:fe:39:
                    9f:7d:b1:06:8d:9a:81:e5:51:79:4f:7a:f5:16:99:
                    f0:a1:d8:73:12:f5:d9:01:aa:0e:c8:0d:10:97:27:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:32:C2:A7:04:E0:3A:74:80:EA:A4:7F:38:B9:E1:9C:77:FD:05:B7
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS140947.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:3f:47:43:8a:aa:6f:43:89:18:2c:c5:fb:38:a9:eb:98:e0:
         54:b0:9d:d1:d9:c2:a2:f1:ac:36:e4:f9:8e:48:08:e9:29:3b:
         85:3c:67:7a:c8:d2:25:97:69:8f:00:a1:8e:92:92:58:5c:66:
         34:eb:06:51:90:5f:f3:22:42:24:46:53:70:ca:99:97:89:91:
         c1:4a:2d:2e:4a:a9:0e:e8:29:7e:76:23:fc:a4:c1:8d:0b:7b:
         fa:0f:c9:c3:7b:9e:55:92:88:66:82:e1:e0:c9:69:da:a6:64:
         72:c2:72:64:56:3d:77:8d:ba:16:99:fe:f4:29:73:92:9e:31:
         32:33:dc:b7:2d:bb:c8:9f:c1:55:ba:f9:22:2a:72:ae:80:de:
         60:0a:3e:d3:81:a1:39:93:65:16:45:de:68:64:4d:92:a3:d9:
         e4:f4:bf:8c:c2:44:a9:fa:84:53:f5:d9:c8:7b:60:26:f8:7a:
         fe:3f:3c:77:38:8f:d4:17:9d:f5:8e:78:b8:f7:9c:50:f8:39:
         56:39:56:de:95:e1:5f:4d:9b:08:96:4f:a3:d9:19:22:33:e2:
         7c:51:6b:45:f9:3b:c3:2b:83:33:99:f0:60:45:fb:14:55:d5:
         e6:d3:03:d3:9c:da:ad:fd:90:d1:dc:b9:7e:3e:61:f6:ce:db:
         5c:f4:ee:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org