Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS150303.roa
File:                     AS150303.roa (raw, json)
Hash identifier:          fVfymyGPzOJLoEHaTNZpApOzq5aUWAAkx1y1AecjKOc=
Subject key identifier:   6E:40:88:3A:A4:7C:EC:8B:9D:AE:AC:E7:C9:60:80:78:DF:DD:34:BC
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       734E505AAC84F7CC72CBAE122390AF3FD9942642
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS150303.roa
Signing time:             Fri 24 Feb 2023 18:14:06 +0000
ROA not before:           Fri 24 Feb 2023 18:09:06 +0000
ROA not after:            Fri 23 Feb 2024 18:14:06 +0000
asID:                     150303
IP address blocks:        181.214.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4e:50:5a:ac:84:f7:cc:72:cb:ae:12:23:90:af:3f:d9:94:26:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 24 18:09:06 2023 GMT
            Not After : Feb 23 18:14:06 2024 GMT
        Subject: CN=6E40883AA47CEC8B9DAEACE7C9608078DFDD34BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:a6:9f:ce:b9:ac:59:3c:7d:b4:a2:e0:0c:
                    2c:da:3e:ac:17:3f:9e:0b:46:5c:9e:4c:31:81:7f:
                    3f:d1:2c:5e:ba:f4:91:3f:77:f0:a1:5c:f4:d3:90:
                    03:97:94:76:a1:dd:fa:67:bc:2a:b4:4a:98:d9:ae:
                    93:a8:e0:81:97:49:6d:7a:5c:53:9c:02:63:65:f8:
                    03:8d:77:9d:d5:7e:44:4d:18:e1:fa:53:d6:29:f7:
                    52:dc:9d:6e:20:c2:8e:6a:cf:97:73:dc:5c:59:f9:
                    34:c1:9c:2b:07:f9:54:66:4d:62:6a:32:90:95:51:
                    82:f9:3b:b7:5a:1f:fa:3b:35:d3:57:25:59:be:29:
                    0a:8c:90:bc:a8:c7:e6:d0:ac:37:b6:05:be:e3:23:
                    20:58:6e:ff:8b:9b:52:f8:ee:6d:d3:04:ea:18:60:
                    e9:55:6a:95:3e:12:72:44:6c:e0:fb:ab:b9:0c:8e:
                    2a:64:97:ef:1b:39:7b:78:37:24:e2:fa:67:78:0c:
                    f5:28:f6:94:85:cd:ab:52:d9:ba:0e:c5:17:41:f9:
                    b7:2e:8c:f0:56:5d:bd:2b:ce:a9:03:af:9c:c2:de:
                    af:76:ce:68:cd:c7:61:9b:b6:d0:df:f6:2d:a1:6a:
                    fb:2a:54:0c:ee:af:91:55:cc:21:12:15:10:90:40:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:40:88:3A:A4:7C:EC:8B:9D:AE:AC:E7:C9:60:80:78:DF:DD:34:BC
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS150303.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:61:4b:f6:41:0a:c8:b5:98:42:01:71:03:46:27:d1:20:ed:
         71:7b:13:84:6e:9e:44:9d:5f:cf:ec:95:6e:27:3d:64:cf:ba:
         80:af:6e:c0:da:d5:c7:bc:d2:e3:87:82:40:29:9d:f1:f1:72:
         e1:59:45:6c:99:a4:69:dd:2d:a7:7b:06:95:f8:08:a5:d7:49:
         7c:a7:d9:f1:08:10:63:36:71:84:cd:b5:ed:ec:d6:01:f4:23:
         ec:e8:fc:cc:80:cf:01:a8:c2:fa:db:2b:ce:b7:5f:2d:f0:94:
         01:d0:4d:5d:86:0a:eb:23:b7:a9:cd:3f:52:eb:dd:61:88:11:
         35:22:28:39:d8:ca:66:3e:84:de:11:c1:78:92:fd:7a:4c:9c:
         7a:80:9c:10:df:d5:05:75:f5:20:fe:49:c0:85:0f:f4:b0:68:
         1d:68:e3:3f:0f:9e:7d:e0:5a:67:e1:b1:9e:1d:d6:6c:6b:ef:
         2b:d0:3e:35:ec:9e:c1:7f:60:bb:db:24:76:41:1e:b4:1a:16:
         21:3c:5d:2c:8c:49:bd:50:e4:9d:2f:31:e7:ed:50:92:3e:f4:
         68:f4:42:a1:14:be:54:29:71:c0:dd:b1:72:0d:ac:da:7b:af:
         3a:34:6f:96:4f:02:4e:b1:a4:97:21:d6:77:7a:39:3b:8b:84:
         5f:4f:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org