Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS203726.roa
File:                     AS203726.roa (raw, json)
Hash identifier:          AeRnGp3K6MNtVNVcTdU3FXbk/cKYYF6kRbP1mn27iTc=
Subject key identifier:   E2:6B:7A:C5:C3:2C:1A:AF:27:48:11:3F:BF:AA:54:B7:07:C1:7F:31
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       15D94E9BBE015E0FDE3706F674200F14D1424104
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS203726.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     203726
IP address blocks:        45.89.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d9:4e:9b:be:01:5e:0f:de:37:06:f6:74:20:0f:14:d1:42:41:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=E26B7AC5C32C1AAF2748113FBFAA54B707C17F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:62:14:3f:63:c7:cf:a4:71:67:15:1a:61:
                    25:15:aa:c5:d8:d4:3c:3f:56:c0:b2:25:5d:a7:25:
                    41:92:a4:af:35:ae:c2:05:be:ce:8e:06:e8:3e:97:
                    24:16:98:ea:47:97:20:96:b3:90:62:30:05:a0:cb:
                    c3:af:e5:8e:19:4e:df:b5:f6:95:6c:57:e1:37:80:
                    5f:73:4e:63:31:d2:65:56:f8:ad:d2:0b:c9:10:33:
                    5a:89:f8:85:cb:32:e4:ea:ca:a0:b9:6a:90:06:2e:
                    02:a8:47:17:ee:52:e4:0d:f2:74:fb:d3:30:47:f1:
                    8b:7a:ef:ea:b0:f2:f1:c0:ef:f6:8c:7c:2d:36:81:
                    fa:20:79:e0:3b:fb:e7:7c:ef:be:4c:cf:b1:ea:84:
                    9a:a7:18:0e:60:c7:a5:d1:ca:e6:fa:80:5b:a3:3a:
                    23:b7:bb:be:dc:81:b4:41:ce:82:58:d5:8e:90:10:
                    09:3f:a6:aa:1b:eb:b8:70:c4:1d:a9:06:0d:cc:96:
                    63:91:72:af:73:9e:fb:3c:8a:81:98:57:9f:2a:ea:
                    ec:39:aa:ba:cb:15:56:67:11:57:e6:16:34:57:79:
                    c9:ec:20:31:1a:ee:5f:c5:6e:99:e6:a9:fb:87:56:
                    a5:b8:9c:36:2d:a6:62:32:24:aa:b5:49:72:15:3e:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:7A:C5:C3:2C:1A:AF:27:48:11:3F:BF:AA:54:B7:07:C1:7F:31
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS203726.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:3f:f4:17:3f:60:c2:58:5f:da:b6:30:6a:65:a4:73:5f:b9:
         21:d8:85:49:79:16:cc:b2:29:19:52:18:ec:2d:b9:d0:1d:57:
         ef:a7:12:01:89:da:2b:d0:c8:2b:5a:86:70:19:2b:51:9a:b7:
         cd:2e:d6:96:f2:5a:a3:d5:d2:30:b3:bd:4e:f0:b9:8e:cb:f2:
         9d:ef:50:9b:a8:4b:79:b5:66:f5:a7:2a:a5:b7:95:6b:58:3e:
         29:9e:04:5d:bf:af:c0:29:28:20:5e:48:34:a7:48:22:72:70:
         0c:49:1e:bb:cf:51:2b:21:bf:1d:5c:25:ce:03:50:49:18:b8:
         2b:8c:13:65:cb:e4:4e:19:3d:71:ed:67:7d:5f:a7:29:93:92:
         67:c8:1c:62:b3:20:b3:77:ba:a4:ce:49:59:a6:35:1a:d3:d9:
         85:ed:ed:13:ed:40:5b:b4:ac:13:76:8f:35:5e:2f:e1:7e:51:
         e3:bb:e9:b8:41:1d:a4:c3:eb:49:5f:a6:a2:4d:c8:c0:c0:ef:
         a9:5e:3a:b1:5b:73:d4:26:d0:33:7d:bc:26:0f:a8:7a:54:6d:
         44:ca:c4:8b:e4:32:54:7d:27:1e:10:df:2d:08:82:30:ed:c4:
         ee:ff:dd:92:ee:d5:7b:4c:0c:4a:95:75:9a:71:5a:0f:c9:d4:
         1e:4b:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org