Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS141376.roa
File:                     AS141376.roa (raw, json)
Hash identifier:          it9sObqLVlQyW6V6R7SHF87nBrigokcFszixql26crY=
Subject key identifier:   84:93:A6:74:19:50:D0:A7:80:81:9C:F0:C5:4B:25:36:35:3C:B5:52
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       6313DAFEA7A7DFAD25EE1FFC78BFDF92FA208496
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS141376.roa
Signing time:             Fri 02 Dec 2022 06:07:42 +0000
ROA not before:           Fri 02 Dec 2022 06:02:42 +0000
ROA not after:            Fri 01 Dec 2023 06:07:42 +0000
asID:                     141376
IP address blocks:        181.214.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:13:da:fe:a7:a7:df:ad:25:ee:1f:fc:78:bf:df:92:fa:20:84:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec  2 06:02:42 2022 GMT
            Not After : Dec  1 06:07:42 2023 GMT
        Subject: CN=8493A6741950D0A780819CF0C54B2536353CB552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:24:09:33:9e:52:59:15:d8:a2:c4:37:00:
                    af:89:7b:80:4c:b9:2d:79:6c:31:71:c3:c5:e0:97:
                    42:b7:f2:17:f3:bd:00:52:8b:13:41:23:75:27:09:
                    c9:81:f8:73:5d:12:dc:a2:65:31:e5:7d:85:c1:bb:
                    96:df:94:3b:c1:34:14:00:4e:9b:8a:e5:cd:de:1b:
                    2a:a5:3f:f2:b0:eb:32:62:05:61:12:18:8c:04:24:
                    77:6c:86:c1:14:de:9e:35:64:43:0b:03:47:82:4d:
                    df:d3:35:46:2d:a5:9f:6a:07:f5:04:ef:f0:9a:53:
                    bb:0a:85:49:ad:60:6f:8b:f3:64:c2:97:82:9f:af:
                    cb:1d:c0:24:20:09:f7:e8:c6:16:1f:9b:5e:45:12:
                    56:ae:c6:a3:cd:f9:96:04:58:fb:21:c3:71:28:39:
                    31:14:70:df:de:e9:c1:d2:eb:cb:1f:8b:2a:6e:bb:
                    82:a4:cd:c0:3a:f3:47:34:44:66:5e:30:b6:a0:bf:
                    36:e4:b5:42:b3:a2:79:36:6a:4b:ec:d1:ec:ff:5b:
                    93:e1:0d:98:4a:a0:df:05:98:6b:75:dd:95:00:cb:
                    a0:e5:89:8e:35:7f:30:40:ec:db:39:eb:2b:41:fb:
                    2b:57:3b:bc:4e:cf:4e:05:85:20:51:b5:20:78:59:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:93:A6:74:19:50:D0:A7:80:81:9C:F0:C5:4B:25:36:35:3C:B5:52
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS141376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:62:00:21:02:63:a2:75:af:95:08:32:55:d3:d1:df:f3:d2:
         94:a7:36:e4:16:a3:84:ca:0e:bc:fc:5f:8a:b3:d3:7c:eb:fa:
         ba:70:61:66:bc:ba:27:9b:9b:d9:4d:eb:2c:93:cf:33:ba:58:
         9d:c7:19:9b:1b:72:28:18:8e:2c:de:f8:db:fb:89:ea:08:b8:
         26:31:04:4e:f8:2a:39:dd:54:55:6c:3b:71:04:60:ae:a9:fe:
         6f:f2:c5:e4:0b:13:00:f8:18:f7:55:6c:cc:65:3c:4d:75:fb:
         dd:ed:e0:ef:10:22:f7:52:d1:b0:53:e1:29:f6:35:8a:3f:57:
         a1:c7:66:c5:64:d6:b8:c2:cf:ff:69:4d:95:34:59:22:bb:dc:
         31:54:1d:b3:81:c9:38:11:68:a4:d4:9e:06:c5:03:a7:f4:9b:
         9b:14:26:9f:c4:38:a9:19:43:4b:1b:2c:72:44:ac:37:38:e5:
         6e:2a:26:3c:1a:73:05:e5:c2:1d:27:9c:ab:be:b7:95:81:43:
         0e:5f:ff:5b:96:65:36:f7:35:f4:0d:84:76:23:7a:cc:c9:fd:
         dd:c5:23:09:1c:b1:8e:5f:f7:55:13:c1:2a:84:27:37:40:3d:
         89:4d:a3:41:31:ef:cf:65:58:fe:a3:fb:ea:ca:37:15:fc:e5:
         17:89:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org