Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205474.roa
File:                     AS205474.roa (raw, json)
Hash identifier:          k7D5ohGacB+Q3uYkNdFyKT5TfqTEQSRa0rjaJKkbpMU=
Subject key identifier:   C4:63:F5:40:43:7F:8D:37:C6:90:73:A7:29:CA:1C:C2:6D:42:21:B9
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       1B47C2CEFF013E63EDB49B14541B21F524659E90
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205474.roa
Signing time:             Sat 28 Jan 2023 00:05:23 +0000
ROA not before:           Sat 28 Jan 2023 00:00:23 +0000
ROA not after:            Sat 27 Jan 2024 00:05:23 +0000
asID:                     205474
IP address blocks:        181.214.170.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:47:c2:ce:ff:01:3e:63:ed:b4:9b:14:54:1b:21:f5:24:65:9e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 28 00:00:23 2023 GMT
            Not After : Jan 27 00:05:23 2024 GMT
        Subject: CN=C463F540437F8D37C69073A729CA1CC26D4221B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:71:8d:1c:3f:89:49:8f:98:9e:61:21:b7:
                    8b:5f:16:b3:80:c0:82:75:8b:f9:bf:ee:fa:07:78:
                    f2:2e:f8:63:7a:87:66:19:bb:dc:c7:90:28:c1:a7:
                    fa:11:c4:2f:f7:70:50:82:e5:0c:ff:71:95:56:cb:
                    9c:8d:c2:e5:53:aa:6a:a2:e6:2c:01:9f:b5:d6:3e:
                    7f:02:35:cf:0c:21:9e:7e:68:fe:94:77:f8:4c:1f:
                    6f:2f:03:e2:af:62:bf:31:bd:90:2f:13:be:73:bd:
                    d9:a2:6e:0d:cb:f1:87:b4:6a:28:a3:40:9a:d7:bd:
                    f0:dc:00:52:0b:4d:3a:a0:8d:8f:e0:75:fb:43:38:
                    3e:13:48:1f:20:07:41:58:6c:b4:a9:c4:5f:72:1b:
                    0d:bf:bd:0f:5e:5c:53:ef:87:66:70:39:13:df:1a:
                    32:3e:9a:de:04:0c:d5:9d:d5:17:05:00:ef:c4:47:
                    f1:85:9b:da:73:dd:ae:bd:d0:ed:40:2f:56:78:99:
                    9c:74:37:25:6d:ef:1d:a2:59:85:4a:d4:71:44:38:
                    22:42:2c:f6:dc:25:13:98:d3:6b:8c:b1:c6:b3:4f:
                    16:36:9c:ce:ae:42:72:73:cd:cb:8f:a4:1e:39:57:
                    8f:3b:29:18:3d:58:dd:6f:2c:d8:f3:a0:a5:34:36:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:63:F5:40:43:7F:8D:37:C6:90:73:A7:29:CA:1C:C2:6D:42:21:B9
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS205474.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:db:10:be:df:b5:0a:8f:d1:43:4d:d6:3b:f0:70:8e:54:fa:
         ed:71:29:e3:20:fd:c1:dd:1d:aa:73:2b:47:85:4c:fd:d1:3b:
         45:2b:8e:31:5f:51:55:26:d8:55:ec:79:85:c7:aa:b5:4b:c6:
         60:4f:e3:bf:e3:94:d7:b9:71:e4:51:13:24:dc:5b:24:25:69:
         94:95:aa:d0:9b:20:9e:5f:96:04:8f:fb:c2:e1:47:30:5d:b6:
         37:a0:a6:08:4b:51:3a:28:fb:59:87:9b:20:0d:c4:02:25:01:
         15:8c:eb:8b:82:5a:77:a6:9c:37:af:2a:dc:16:3f:78:1e:17:
         43:e3:3a:24:b5:88:74:66:1a:44:60:a5:68:95:ac:55:df:e8:
         a8:e0:ad:e2:91:74:14:03:8e:fd:d7:c6:da:6e:07:dd:9d:dc:
         1a:c3:8c:22:69:60:01:72:eb:83:8f:e5:e2:e8:fa:84:75:41:
         a2:fa:22:c6:7f:0b:f1:7e:e8:67:53:90:12:f7:43:c0:cc:ce:
         11:26:50:7a:53:d7:ba:fc:48:db:b8:a8:bc:b5:52:95:e0:f2:
         80:40:00:7f:c9:d6:8a:7b:eb:de:f9:a2:34:9d:ea:ab:dc:8b:
         35:49:74:63:c2:db:8c:a3:75:13:4d:2b:2d:a3:df:a3:bb:0e:
         08:df:d8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org