Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS142430.roa
File:                     AS142430.roa (raw, json)
Hash identifier:          +A1KTD8WKbde/jrIhpOn2udUTUPdFceYPACX8Qu4SoY=
Subject key identifier:   C3:EF:18:50:D8:1D:87:12:3F:B7:09:1E:33:D9:EC:22:70:C7:09:25
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       13DAD56C9CEF75D7392BB70DE21046695943D4BF
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS142430.roa
Signing time:             Mon 28 Nov 2022 12:18:17 +0000
ROA not before:           Mon 28 Nov 2022 12:13:17 +0000
ROA not after:            Mon 27 Nov 2023 12:18:17 +0000
asID:                     142430
IP address blocks:        185.170.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:da:d5:6c:9c:ef:75:d7:39:2b:b7:0d:e2:10:46:69:59:43:d4:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:17 2022 GMT
            Not After : Nov 27 12:18:17 2023 GMT
        Subject: CN=C3EF1850D81D87123FB7091E33D9EC2270C70925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:73:e3:51:b9:58:d0:00:c1:91:5e:61:3a:
                    0d:26:7c:1d:31:8b:43:78:e8:9a:20:e9:68:6c:fa:
                    ac:78:87:c7:34:8f:59:5a:c8:a6:d6:1e:b3:5b:60:
                    ce:72:b3:3a:0c:20:3a:ad:1f:4d:fd:f8:5d:c9:37:
                    f9:4f:9b:a1:fb:29:cf:61:10:d7:bb:de:8a:57:da:
                    6f:ca:c2:d7:b3:b3:2f:62:15:47:8f:5c:ec:2d:9c:
                    49:78:f0:d5:19:92:84:7b:37:f2:f3:79:3e:ba:f1:
                    43:a8:eb:fd:fe:ca:19:21:be:e7:0f:e7:f0:67:94:
                    e7:6b:73:21:2d:c0:23:e1:47:d8:3a:01:c4:a3:2c:
                    9e:f5:24:55:21:44:e2:b7:e3:14:fe:67:f9:74:f4:
                    bd:64:7e:cf:cd:1f:d8:82:75:06:81:e1:96:e7:cc:
                    7f:00:08:22:63:12:68:a6:9e:ac:35:49:f2:48:a2:
                    0e:d2:23:87:fe:11:7c:bb:b1:3a:e2:f4:66:f1:da:
                    5c:14:8e:ad:ce:f7:1c:88:6a:98:57:a4:7e:61:bb:
                    a3:b7:57:0d:b5:73:56:43:c9:50:e2:25:98:0f:04:
                    ba:60:b6:d3:fa:00:f5:96:e8:0a:1c:f6:58:40:38:
                    f5:ac:6a:fe:e7:b2:05:bc:36:90:91:fc:bd:04:89:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EF:18:50:D8:1D:87:12:3F:B7:09:1E:33:D9:EC:22:70:C7:09:25
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS142430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:57:07:a4:69:6d:13:f3:1e:bf:0c:0f:77:36:b0:55:ad:ee:
         92:26:86:0b:5e:51:3c:21:a6:5f:2a:53:b5:0e:0c:0d:08:c3:
         86:c3:54:e9:29:e9:de:47:bc:41:8a:7d:84:b1:87:75:a1:3f:
         96:5f:3a:41:8f:8b:bc:2d:ad:20:fd:0d:62:03:70:50:c1:03:
         e0:36:26:01:7f:20:e8:70:94:e8:3a:1b:a5:52:02:91:70:24:
         0a:6d:28:1d:d3:dc:ea:7b:c2:c5:06:40:7b:0f:9d:7c:b0:7a:
         4f:cc:99:db:22:0d:ee:a5:e8:1b:d2:23:91:72:40:5a:f8:89:
         07:b3:85:ee:d5:f4:fe:96:2d:d7:cd:c3:52:7b:ec:67:55:28:
         58:81:3e:6b:e4:c6:9a:f5:fe:27:d4:58:3a:9e:d1:79:f5:71:
         50:f7:cb:e3:9a:e5:33:aa:72:f1:81:b9:ca:3a:be:4f:ba:18:
         18:ad:77:1e:d5:63:43:1a:6d:44:fa:e6:73:e6:42:d9:46:a3:
         ee:7f:95:22:93:ea:2e:c9:63:6d:55:25:65:fb:b0:58:2e:97:
         59:d9:ce:67:5c:40:f0:98:8e:08:cf:08:30:62:e9:ad:37:86:
         15:33:d4:f2:90:5f:fb:21:21:b3:b6:fb:ce:d4:3c:13:db:13:
         1a:10:9a:5c
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUE9rVbJzvddc5K7cN4hBGaVlD1L8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMTdaFw0yMzExMjcxMjE4MTdaMDMxMTAvBgNV
BAMTKEMzRUYxODUwRDgxRDg3MTIzRkI3MDkxRTMzRDlFQzIyNzBDNzA5MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmHPjUblY0ADBkV5hOg0mfB0x
i0N46Jog6Whs+qx4h8c0j1layKbWHrNbYM5yszoMIDqtH039+F3JN/lPm6H7Kc9h
ENe73opX2m/Kwtezsy9iFUePXOwtnEl48NUZkoR7N/LzeT668UOo6/3+yhkhvucP
5/BnlOdrcyEtwCPhR9g6AcSjLJ71JFUhROK34xT+Z/l09L1kfs/NH9iCdQaB4Zbn
zH8ACCJjEmimnqw1SfJIog7SI4f+EXy7sTri9Gbx2lwUjq3O9xyIaphXpH5hu6O3
Vw21c1ZDyVDiJZgPBLpgttP6APWW6Aoc9lhAOPWsav7nsgW8NpCR/L0EiTojAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUw+8YUNgdhxI/twkeM9nsInDHCSUwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMxNDI0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5qjkwDQYJKoZIhvcNAQELBQADggEBAANX
B6RpbRPzHr8MD3c2sFWt7pImhgteUTwhpl8qU7UODA0Iw4bDVOkp6d5HvEGKfYSx
h3WhP5ZfOkGPi7wtrSD9DWIDcFDBA+A2JgF/IOhwlOg6G6VSApFwJAptKB3T3Op7
wsUGQHsPnXywek/MmdsiDe6l6BvSI5FyQFr4iQezhe7V9P6WLdfNw1J77GdVKFiB
Pmvkxpr1/ifUWDqe0Xn1cVD3y+Oa5TOqcvGBuco6vk+6GBitdx7VY0MabUT65nPm
QtlGo+5/lSKT6i7JY21VJWX7sFgul1nZzmdcQPCYjgjPCDBi6a03hhUz1PKQX/sh
IbO2+87UPBPbExoQmlw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-ams.rpki-client.org