Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS18345.roa
File:                     AS18345.roa (raw, json)
Hash identifier:          cgipprOh28Gq6D0Zw5VgrPdi8TZfv7on2ZjE7fyE6P8=
Subject key identifier:   69:52:1E:8B:B0:20:4D:FC:06:94:97:4F:A9:39:06:4B:CD:94:E4:EF
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       58D04B3FFC62B378D3723C3D34557D413ECCCC6E
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS18345.roa
Signing time:             Mon 28 Nov 2022 12:18:21 +0000
ROA not before:           Mon 28 Nov 2022 12:13:21 +0000
ROA not after:            Mon 27 Nov 2023 12:18:21 +0000
asID:                     18345
IP address blocks:        181.214.23.0/24 maxlen: 24
                          181.214.51.0/24 maxlen: 24
                          181.214.104.0/24 maxlen: 24
                          181.214.199.0/24 maxlen: 24
                          181.214.215.0/24 maxlen: 24
                          191.101.210.0/24 maxlen: 24
                          191.101.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d0:4b:3f:fc:62:b3:78:d3:72:3c:3d:34:55:7d:41:3e:cc:cc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:21 2022 GMT
            Not After : Nov 27 12:18:21 2023 GMT
        Subject: CN=69521E8BB0204DFC0694974FA939064BCD94E4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:53:4a:42:b3:08:17:f4:25:30:85:38:a7:
                    ed:46:df:39:3b:67:10:7c:cc:74:a9:23:fb:0b:c0:
                    31:53:bd:15:05:55:dd:46:8f:7a:e0:82:b2:65:3f:
                    11:7d:b0:32:bc:7d:de:8b:46:83:a3:54:1b:fc:d9:
                    5a:71:f8:c3:60:9b:c1:7c:e3:71:ba:08:ba:26:00:
                    df:57:55:97:2c:c3:64:56:b9:d5:71:38:bc:f7:16:
                    6f:b9:03:fa:6d:ae:bf:d6:06:d7:b6:45:fe:4e:42:
                    d3:38:3e:0c:b3:41:c8:59:c1:97:1b:5d:67:5f:f4:
                    cf:89:4e:d8:30:00:78:0a:30:07:f0:95:ff:54:a5:
                    ad:0a:67:fe:6f:a3:b1:84:ca:0d:e6:38:ec:b5:f3:
                    01:22:63:9d:3f:73:2d:fd:ba:02:9c:ba:af:6d:c7:
                    37:9a:fd:1c:af:a9:eb:55:2e:39:57:69:e3:9c:b4:
                    ac:de:4d:5c:3e:18:88:5d:9c:78:0f:1d:d0:f9:9f:
                    8e:0f:e5:86:28:72:0a:c4:40:0f:ab:dc:b9:c2:b3:
                    14:aa:a2:1b:ff:17:fe:12:5e:3a:a7:27:65:36:dd:
                    f1:91:1d:79:dd:e2:d3:62:bd:95:1f:a5:d3:da:2f:
                    69:93:f2:bc:73:68:78:b5:40:2b:88:d2:75:a6:24:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:52:1E:8B:B0:20:4D:FC:06:94:97:4F:A9:39:06:4B:CD:94:E4:EF
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS18345.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.23.0/24
                  181.214.51.0/24
                  181.214.104.0/24
                  181.214.199.0/24
                  181.214.215.0/24
                  191.101.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:48:b4:67:47:3a:5c:8b:7e:a4:61:de:46:ea:0a:3b:16:dd:
         c7:60:e9:44:b5:49:18:d8:da:e7:84:2a:8d:a4:cf:af:e3:0c:
         5a:0e:98:79:32:f5:65:35:5b:c3:e2:17:bf:66:a5:db:ca:5a:
         5e:70:0d:13:28:5f:bf:68:17:5f:79:ee:2a:64:4e:bc:60:c5:
         a5:da:5d:cf:85:14:1f:38:c7:eb:a8:3e:44:7b:2e:38:eb:64:
         9f:5c:be:97:65:66:6c:fa:9d:ff:6f:f4:9d:fb:7e:ef:7c:b6:
         e0:90:c9:18:8d:aa:f7:a3:dc:c7:a1:b4:45:16:73:db:d5:98:
         d7:b6:e3:09:5f:82:3b:18:d3:32:47:88:21:4d:7b:fa:88:50:
         ef:2e:2e:79:74:84:7e:4c:5f:f1:a2:29:92:f6:4c:11:81:41:
         00:03:02:ca:d3:11:cb:d4:53:32:0e:da:67:a1:ae:59:d2:4b:
         fc:ad:ec:61:2d:87:23:21:f3:ac:95:cf:97:c5:bf:d4:8e:ec:
         45:55:e4:23:5f:e7:ad:60:db:63:22:03:bc:d1:e9:4a:22:6d:
         6e:2b:ff:54:82:b8:70:66:ae:38:0f:f5:38:a6:56:30:e2:11:
         2a:77:64:c1:10:7e:0d:07:5f:d5:4f:86:a4:c8:91:a5:66:ff:
         c6:cc:71:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org