Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS15830.roa
File:                     AS15830.roa (raw, json)
Hash identifier:          3Eq2unqMFlQ4s2/QeJx8Ofq9TLQRL5I9RaoHcgrToG4=
Subject key identifier:   72:D6:47:8B:21:18:83:41:08:ED:3A:93:FD:56:21:B7:1C:C9:BD:A6
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       2E086EAD82EC5F6120CB7F2297DA5EEEA646E456
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS15830.roa
Signing time:             Mon 28 Nov 2022 12:18:24 +0000
ROA not before:           Mon 28 Nov 2022 12:13:24 +0000
ROA not after:            Mon 27 Nov 2023 12:18:24 +0000
asID:                     15830
IP address blocks:        85.209.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:08:6e:ad:82:ec:5f:61:20:cb:7f:22:97:da:5e:ee:a6:46:e4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:24 2022 GMT
            Not After : Nov 27 12:18:24 2023 GMT
        Subject: CN=72D6478B2118834108ED3A93FD5621B71CC9BDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:25:1f:3b:9c:cb:09:0e:fb:14:aa:1f:30:75:
                    25:ae:a2:c0:18:e6:a6:a0:a3:db:45:94:13:33:80:
                    ed:85:71:da:27:2b:99:de:c9:3a:07:27:c6:eb:06:
                    fd:82:e5:cd:73:2c:ae:c3:58:e5:86:38:0b:a2:24:
                    9a:6b:b1:fe:f2:b4:04:91:b5:a2:3a:d3:88:03:1d:
                    9e:f1:c9:ac:b7:df:8d:ed:ea:a7:ec:ea:71:76:2c:
                    25:9b:6b:08:c6:a9:14:d1:d4:28:34:fa:7c:c1:ce:
                    de:20:06:14:b1:02:8e:d5:b4:77:ad:4a:a7:da:5e:
                    31:16:29:8d:5d:31:02:28:58:87:1f:7f:47:88:97:
                    9b:7c:41:2a:bf:43:d1:ba:2a:69:92:28:88:a3:5b:
                    fe:27:9a:1d:06:2c:82:fb:58:12:84:9c:f6:72:73:
                    37:de:19:90:f7:36:c0:b8:f6:b9:e9:72:d9:cd:02:
                    99:20:5a:82:fa:2e:fb:df:53:68:37:7b:cc:5a:b7:
                    e3:04:a2:e3:e5:82:94:82:c3:e4:17:00:2f:64:7c:
                    71:3c:a6:f0:95:a0:06:9f:c2:8d:13:fa:22:07:ef:
                    f4:3d:02:ff:67:f0:85:ed:68:46:9a:04:9e:40:4f:
                    a1:27:a9:3f:f1:08:f1:d8:f3:2d:96:39:da:23:37:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D6:47:8B:21:18:83:41:08:ED:3A:93:FD:56:21:B7:1C:C9:BD:A6
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS15830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:be:b2:81:0a:cc:e5:34:8d:40:08:8f:37:32:e2:3a:63:4e:
         39:07:fd:7a:26:26:07:1c:e7:05:e6:0f:c8:a7:8c:45:7f:87:
         88:5f:6f:f3:c7:db:4c:e3:cf:57:38:d0:29:ba:18:5f:4b:38:
         ee:8c:03:da:54:eb:a5:74:24:35:e4:91:76:47:5f:7e:cf:43:
         e3:df:7e:d2:ac:69:c2:94:fe:cc:67:05:bd:9b:16:14:a4:0b:
         9b:b6:f6:c9:ac:be:02:fd:36:c3:bf:18:37:25:67:ea:84:ec:
         62:1e:82:e5:60:c1:39:22:32:59:6c:82:8b:56:7f:dc:cf:63:
         09:c9:1f:ef:87:89:d0:af:e9:91:b0:73:70:f0:8d:d3:90:b2:
         84:57:6a:69:ba:5d:b8:ea:77:8c:19:cd:aa:46:65:e9:3a:6e:
         d3:17:84:74:f2:23:8f:92:3d:45:c1:73:f2:f6:a8:e7:eb:e0:
         17:b1:ac:12:da:aa:d1:0e:06:91:75:6e:0f:97:f1:c2:37:df:
         39:d7:9e:91:5f:c4:a9:57:36:01:8c:7f:a4:a0:c7:75:21:10:
         00:45:7f:e2:c3:2d:fe:72:cb:34:bc:a3:27:92:5f:51:35:7b:
         ca:ee:9e:00:24:de:d6:25:98:47:29:e5:84:b0:dd:8f:f3:83:
         bc:bd:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org