Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS141158.roa
File:                     AS141158.roa (raw, json)
Hash identifier:          Dzmt0VbGUeinKi3/4kXqmeX0Q4ZOgDr3k1uvfGMEixw=
Subject key identifier:   35:91:B5:C8:33:9E:2C:40:BE:75:39:DA:B5:F8:58:39:60:E9:8E:78
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       57C862FE487C051DBC8C2ECC0391E11022BC0FCB
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS141158.roa
Signing time:             Mon 28 Nov 2022 12:18:24 +0000
ROA not before:           Mon 28 Nov 2022 12:13:24 +0000
ROA not after:            Mon 27 Nov 2023 12:18:24 +0000
asID:                     141158
IP address blocks:        2.57.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c8:62:fe:48:7c:05:1d:bc:8c:2e:cc:03:91:e1:10:22:bc:0f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:24 2022 GMT
            Not After : Nov 27 12:18:24 2023 GMT
        Subject: CN=3591B5C8339E2C40BE7539DAB5F8583960E98E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:db:51:2f:92:8d:33:a7:e5:19:cf:10:02:
                    42:3b:de:44:cb:e9:a4:19:ac:af:76:5b:59:71:b5:
                    7d:71:e1:f0:d2:e3:19:01:93:7d:31:70:f2:75:db:
                    ea:92:06:6e:2c:27:07:b5:10:80:a9:0a:df:76:98:
                    cb:a8:6a:78:ae:ca:ce:b7:dd:4c:c7:4f:ee:a3:28:
                    48:ec:28:27:a8:e9:42:e6:24:62:77:ed:4c:b2:2e:
                    8a:43:19:e7:dd:ec:17:61:36:8e:7a:d0:cc:84:15:
                    67:63:19:cc:e1:6b:5a:94:c8:5e:0c:6d:66:bb:fe:
                    bf:87:50:32:94:07:5e:56:88:50:56:94:67:09:0d:
                    08:ec:f9:a4:92:a6:83:87:58:83:ce:bd:4b:77:49:
                    4a:a6:ad:1b:37:6d:a9:12:59:d0:66:ba:bc:89:dd:
                    6c:ca:10:87:55:c9:48:95:ba:a4:4a:3b:6b:f0:23:
                    67:97:73:c0:82:e8:fb:1c:ef:54:9d:d1:4d:4e:2c:
                    ad:b0:9d:e1:8b:fd:48:e8:a7:d5:53:42:e9:05:4e:
                    e3:bc:12:4f:7f:40:3b:46:e9:1b:dc:ad:09:73:80:
                    0c:72:a9:af:b8:c9:db:eb:3f:4e:87:e7:4e:ea:81:
                    13:44:43:e7:49:4e:92:52:71:a8:4a:e8:bd:d0:3a:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:91:B5:C8:33:9E:2C:40:BE:75:39:DA:B5:F8:58:39:60:E9:8E:78
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS141158.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:45:c3:77:6f:e5:2b:e5:64:f6:eb:cf:f9:9b:08:fd:a1:b6:
         5a:38:ac:06:13:84:56:68:3f:89:9b:65:05:38:f4:dd:65:2e:
         be:fa:35:7a:03:c2:26:a1:88:e9:88:e7:cb:d4:04:9e:c2:69:
         17:4d:e5:97:48:46:73:60:f8:b7:48:66:63:43:2b:82:d6:68:
         a7:84:7a:c0:10:f0:5e:d1:d8:0b:dd:ff:af:01:d7:74:62:1a:
         02:d3:aa:69:66:68:2a:88:30:f1:21:f4:d5:57:b2:14:0c:c5:
         d2:30:4e:f8:97:6f:91:d8:f3:f8:35:23:8f:da:77:b3:a0:49:
         a2:4f:85:01:dc:f3:42:37:d2:90:48:be:29:38:c6:5f:ae:a7:
         93:66:56:94:5d:30:d8:05:e4:82:2f:34:13:4f:ed:a3:a4:9b:
         be:a2:5c:75:bf:0b:66:3e:60:e0:4a:25:d0:e5:f9:48:8a:f0:
         53:5f:9a:cc:85:8f:83:fc:68:fd:a3:c8:93:31:72:03:c3:5f:
         c0:66:7d:13:86:2b:c6:8c:c3:e7:05:e9:7f:96:ce:c7:d5:dc:
         70:6c:93:9b:3c:bf:c9:a9:8b:95:5e:20:f7:18:3f:79:bf:7b:
         2c:59:d8:ed:68:2b:e0:2d:13:4b:2b:5e:f9:1e:7c:34:da:c6:
         a4:de:00:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org