Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS199865.roa
File:                     AS199865.roa (raw, json)
Hash identifier:          Sxax+PUsdaF/brYz/3PWA75pKUtmhvr1Edcx7+okAhw=
Subject key identifier:   B1:50:F9:75:4C:7E:71:69:66:AC:58:40:41:26:D9:62:E8:2D:B5:91
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0FCBB30CC84D700B6167981244B10F2898D554FC
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS199865.roa
Signing time:             Fri 17 Feb 2023 18:16:24 +0000
ROA not before:           Fri 17 Feb 2023 18:11:24 +0000
ROA not after:            Fri 16 Feb 2024 18:16:24 +0000
asID:                     199865
IP address blocks:        179.61.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:cb:b3:0c:c8:4d:70:0b:61:67:98:12:44:b1:0f:28:98:d5:54:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb 17 18:11:24 2023 GMT
            Not After : Feb 16 18:16:24 2024 GMT
        Subject: CN=B150F9754C7E716966AC58404126D962E82DB591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:9a:20:97:3b:26:32:07:27:dd:1c:d2:87:
                    2a:6c:7e:98:12:8d:97:74:3a:71:ff:d5:97:aa:39:
                    ae:02:7e:42:f0:25:c4:a3:70:bd:f8:2b:ed:a3:be:
                    2f:62:b3:6d:f8:35:e5:2b:ee:b6:dc:51:83:85:d0:
                    2d:4e:8d:88:0b:fa:db:89:96:79:77:90:bf:d5:45:
                    a6:1d:19:3a:b3:c1:2e:89:0a:ea:e6:5c:b2:2a:05:
                    43:94:a1:ca:8c:9c:a8:13:c9:a3:44:61:10:03:4e:
                    31:55:01:04:09:ab:4c:20:0f:ef:27:b2:cc:8e:f2:
                    3d:56:cf:af:29:36:63:27:2e:02:4f:f6:17:0c:57:
                    7c:b6:74:83:24:20:29:a5:d2:72:96:eb:19:c3:98:
                    ab:f7:f0:56:4d:ea:9a:fa:95:ed:06:13:83:38:88:
                    3e:61:41:f6:66:af:15:0a:89:4a:18:ff:ed:be:77:
                    94:ce:ce:af:a4:54:56:4e:86:aa:db:0e:1e:67:e5:
                    e3:e9:48:c7:6b:7d:08:35:75:68:ed:fe:57:d0:18:
                    af:e7:cb:94:4b:87:c6:71:0a:10:20:d6:aa:bf:1f:
                    59:0c:5a:b9:a1:45:af:ef:0a:3d:00:fc:e7:c5:f8:
                    b6:c2:9c:3d:f6:80:f8:0f:06:c3:22:c5:5b:8f:c5:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:50:F9:75:4C:7E:71:69:66:AC:58:40:41:26:D9:62:E8:2D:B5:91
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS199865.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d3:c3:1a:04:79:97:59:20:76:34:ed:a2:02:ae:f3:2f:ed:
         66:c2:80:b1:cb:16:37:6d:1c:42:d4:4d:66:fa:33:31:22:03:
         42:b2:d4:05:93:b2:4a:5b:e1:99:2b:98:50:f1:8a:f5:f3:29:
         96:e7:9c:0a:df:6f:ec:a4:ac:75:9e:6c:6d:7e:ee:f0:dd:3c:
         a8:31:d4:5d:cd:33:41:6f:f1:17:76:95:76:f4:70:25:a0:7c:
         56:06:e5:4a:04:6c:bc:8f:0c:8a:42:e1:24:1c:0a:40:57:b4:
         3c:83:ce:bd:9a:5e:19:39:44:07:0c:d8:24:31:fb:1a:56:c5:
         bd:8d:a4:e4:ba:7d:34:7f:b4:52:01:53:c0:aa:4d:9e:9a:85:
         f4:5b:57:16:8e:f3:88:0c:ad:05:b9:8f:02:43:81:56:20:82:
         d7:ee:04:44:b2:f7:5c:59:30:2a:d3:c1:3c:03:a7:40:69:fc:
         fc:09:20:94:6d:e2:63:36:78:2b:4d:04:be:74:b6:1b:06:f7:
         3f:ac:d7:f7:8d:3b:b2:3e:05:9f:f5:4a:73:8d:47:46:00:5a:
         fe:15:02:03:40:d2:52:51:de:59:ef:b7:e4:8d:24:ab:3b:39:
         9f:92:df:53:d1:a1:8d:34:1a:21:1c:86:23:0e:1c:9e:d9:cb:
         ed:eb:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org