Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS15440.roa
File:                     AS15440.roa (raw, json)
Hash identifier:          UOzU0U5iVanQ0i/xpZdTh/8oimrdmK0e48Co0PXxLUc=
Subject key identifier:   AC:AE:0D:FA:D5:C9:DF:AA:DD:B2:AB:F8:7E:4A:A0:BA:74:62:74:48
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       45CF7BD307C2C56C89737CEBE5AE08652033CD00
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS15440.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     15440
IP address blocks:        181.214.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cf:7b:d3:07:c2:c5:6c:89:73:7c:eb:e5:ae:08:65:20:33:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=ACAE0DFAD5C9DFAADDB2ABF87E4AA0BA74627448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:12:59:55:c9:17:db:35:99:f1:cd:57:14:
                    47:65:fe:31:74:12:17:60:f5:6a:ac:05:54:fe:2a:
                    2d:29:84:04:b2:2d:aa:08:0d:b3:5c:1c:1e:40:22:
                    c9:92:ac:9e:7f:d9:68:48:b4:2f:94:b8:d2:72:1b:
                    6c:87:88:0f:8d:a2:54:48:22:e8:31:4e:98:6e:ff:
                    f7:71:b0:c5:fe:d8:3c:06:a4:07:c5:46:1d:52:0d:
                    f9:6f:1b:93:90:25:ca:3e:d1:f9:88:5c:21:f5:1a:
                    46:fb:a8:9d:ca:17:9d:a2:9d:fa:e0:a1:2c:0e:49:
                    a6:2e:3e:ff:f7:78:13:20:e9:7a:fc:36:98:1a:b5:
                    2d:79:0d:ca:b5:66:b9:fa:50:db:b9:81:6c:c5:87:
                    1c:3f:f6:80:7b:26:0f:e8:a9:e8:ba:1c:7e:09:79:
                    c6:8f:81:94:ca:71:32:6e:df:f8:2b:b0:ee:4f:6d:
                    4d:6a:16:7c:17:e1:80:ec:61:0c:d3:13:3c:eb:8c:
                    30:bd:71:ce:3d:29:d6:0a:87:5b:bb:b5:87:1b:17:
                    33:c5:5c:58:c5:4c:8f:c9:d7:dd:bc:e5:f6:65:bb:
                    58:83:b7:62:da:71:84:85:92:45:77:19:7c:1f:92:
                    f8:cc:75:20:c7:f3:4f:bf:05:47:a1:eb:c5:d7:9c:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AE:0D:FA:D5:C9:DF:AA:DD:B2:AB:F8:7E:4A:A0:BA:74:62:74:48
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS15440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:f1:e9:95:80:e7:f4:12:4f:87:0f:57:ab:11:24:3a:25:
         e4:34:0f:d9:d4:1f:23:d8:25:78:4b:1f:c4:c0:bf:4e:ff:03:
         42:cc:93:e9:56:39:c1:01:e5:f9:b9:61:79:a5:63:98:30:55:
         c9:bd:a8:a4:e6:73:55:fd:eb:fc:5d:ef:32:96:4c:3f:83:a0:
         5d:45:13:e7:23:a8:7b:3d:6b:b0:5a:5d:55:fe:66:14:98:28:
         61:1d:bb:61:64:82:c7:fc:02:8a:2c:36:c6:31:d1:61:ea:23:
         96:85:55:c6:02:2f:d8:c5:07:d2:29:46:dd:f3:11:9e:6e:27:
         95:ef:b4:96:c8:23:37:b2:58:97:0b:0a:55:8e:1a:80:3e:51:
         73:fd:8f:05:5b:ca:d9:c8:06:67:98:23:de:f8:be:73:bc:91:
         20:29:42:ab:b0:b9:66:2d:c7:72:9f:ef:52:e8:48:15:dc:b9:
         ba:ea:83:48:59:d4:0c:a8:d8:09:0c:0d:32:98:e9:74:a0:ef:
         e7:eb:c6:fa:24:11:69:0c:3e:9a:32:55:a3:21:ea:e0:11:c3:
         c6:18:23:24:77:bf:77:87:c1:a5:19:c4:c7:3e:0a:26:cf:0e:
         eb:f4:95:bd:66:cc:6f:a0:9c:81:9b:bb:88:16:a1:58:4c:a8:
         b7:66:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org