Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS17819.roa
File:                     AS17819.roa (raw, json)
Hash identifier:          EgqLw3x4zygUgUmywIuW57TZKRgr+q71Hads3UES/H4=
Subject key identifier:   E9:86:75:78:21:50:23:D0:5B:86:0C:5C:0F:94:58:7F:6D:9C:84:95
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       622A77ED980762E0EF23D934C673BA93573324E8
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS17819.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     17819
IP address blocks:        45.95.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2a:77:ed:98:07:62:e0:ef:23:d9:34:c6:73:ba:93:57:33:24:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=E9867578215023D05B860C5C0F94587F6D9C8495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:49:d7:e9:91:0d:e7:0c:b6:0d:85:5b:c0:
                    ef:6c:50:0e:cb:10:3b:6e:67:5a:ad:64:81:4b:a3:
                    fb:f1:27:15:02:97:4a:78:74:4b:4f:36:f0:ec:ed:
                    83:c7:0e:41:4a:a5:64:52:c9:a8:de:56:41:53:f7:
                    ce:d1:2d:a1:5a:93:91:0d:9a:34:a0:20:6f:57:53:
                    93:e5:48:49:20:85:df:4a:da:83:13:1a:08:06:b6:
                    99:d2:aa:ae:09:dd:d9:cc:5a:72:c4:27:ad:19:a6:
                    18:86:51:04:73:00:76:dc:15:e9:22:d1:5a:0e:b7:
                    20:99:58:91:d2:89:a2:d1:c9:23:67:0c:1c:de:6c:
                    62:cc:ea:94:79:02:33:ff:a9:b5:5a:6e:cb:83:cf:
                    25:50:bf:36:50:99:1e:a2:07:bb:ab:b3:27:60:83:
                    ea:88:08:10:53:b5:f6:d5:a5:07:88:c7:15:91:6c:
                    7b:4b:06:d4:6d:a8:b5:b8:93:32:50:9d:71:b3:3f:
                    b9:52:56:ea:f4:16:bc:55:ab:db:0e:16:70:23:6f:
                    03:22:e6:5a:2d:7e:78:8f:2f:c1:71:c7:ca:3c:92:
                    35:91:c3:3e:4e:1e:b0:e6:f0:2d:89:fc:cb:14:c3:
                    8e:2c:07:03:3c:19:7b:ae:45:44:72:79:b0:63:a4:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:86:75:78:21:50:23:D0:5B:86:0C:5C:0F:94:58:7F:6D:9C:84:95
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS17819.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:29:74:d1:62:3c:de:ca:fb:11:f0:5b:5b:8a:d9:ad:1f:b0:
         60:6c:04:f4:0f:26:cb:04:1f:ac:40:75:7c:e6:69:9b:c2:47:
         41:27:c4:17:47:36:2f:4e:42:29:75:3f:b1:e1:8b:ab:3f:54:
         9a:52:61:62:aa:0a:da:83:66:de:de:43:ae:9d:2c:60:06:21:
         77:c6:41:e1:59:24:7a:b2:2f:0b:22:22:29:e4:6d:f5:ce:7a:
         aa:d2:d6:a9:79:b6:f6:c1:e5:a1:c3:5e:36:32:04:6a:76:90:
         6b:b5:a1:d9:c9:57:b2:13:75:7f:a5:85:62:7c:c4:71:8f:e6:
         e0:8b:a5:2e:fe:73:3b:8e:09:c6:53:fb:38:38:2f:8a:0c:40:
         7d:a4:bf:f3:db:de:bc:60:48:f0:17:12:00:80:aa:34:90:9e:
         b7:33:ba:fe:a3:3f:93:f4:eb:c7:99:b0:33:a6:45:b5:a2:1f:
         0b:06:42:54:d0:22:9e:c4:e9:00:36:e5:69:a7:79:b3:b1:e8:
         c6:15:04:a0:63:42:3b:89:c7:3b:a8:97:a0:38:4b:52:38:c5:
         22:ac:54:62:56:c0:69:9f:0c:d1:db:c3:c9:d0:f4:f6:c9:0b:
         cd:a0:c4:b0:ff:ef:cd:15:1e:88:77:13:45:c8:17:32:40:e0:
         14:d0:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org