Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209242.roa
File:                     AS209242.roa (raw, json)
Hash identifier:          71qnwkc/2P19msetFscEf0GT14hyT7huIN2zzjrVtHk=
Subject key identifier:   EE:22:DF:9C:D7:4B:1D:3D:BF:15:4A:C2:4E:C6:1A:40:1E:A8:32:3D
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       71CE8A874369D191CB52D2FC0D7D1BCEF5AA0FE7
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209242.roa
Signing time:             Fri 09 Dec 2022 11:15:13 +0000
ROA not before:           Fri 09 Dec 2022 11:10:13 +0000
ROA not after:            Fri 08 Dec 2023 11:15:13 +0000
asID:                     209242
IP address blocks:        185.135.9.0/24 maxlen: 24
                          185.173.35.0/24 maxlen: 24
                          191.101.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ce:8a:87:43:69:d1:91:cb:52:d2:fc:0d:7d:1b:ce:f5:aa:0f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Dec  9 11:10:13 2022 GMT
            Not After : Dec  8 11:15:13 2023 GMT
        Subject: CN=EE22DF9CD74B1D3DBF154AC24EC61A401EA8323D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:a3:56:72:45:df:e6:af:8e:a9:5a:2a:b8:
                    6b:ed:c4:43:b5:8f:e8:be:e6:94:ba:b8:82:1e:4a:
                    de:69:47:6a:34:c1:3a:94:a2:cc:dd:0e:25:55:61:
                    c5:a5:2d:7a:8b:ef:59:ab:be:87:de:18:43:77:c5:
                    39:9e:33:a5:68:38:7a:f5:9f:73:3f:c1:7a:82:00:
                    3b:4e:3e:b2:13:e6:91:d1:0d:2f:1f:0d:89:50:13:
                    bd:9e:bc:2e:0c:5c:9a:42:46:72:8a:59:a7:1c:3a:
                    c7:5a:6b:88:58:54:8d:ae:b7:a3:06:e8:3b:95:6a:
                    7e:ac:f4:a2:8d:05:5c:ce:dd:8f:7c:7e:1d:38:b6:
                    15:24:6a:a7:51:36:52:2d:7f:58:a3:92:79:f4:de:
                    d5:03:a7:fa:82:90:e4:76:5f:00:9e:04:a5:1d:a4:
                    19:55:15:93:88:f9:f5:dc:dc:0d:ed:72:3f:f7:a5:
                    d1:52:03:69:a0:8f:f7:98:4d:d8:5d:de:ef:a2:0f:
                    7d:75:9f:2f:38:34:3e:d5:36:d1:ac:b2:73:c8:26:
                    06:55:d1:b4:f4:6e:6f:d1:45:9c:86:c5:2c:96:1a:
                    7a:3f:59:a2:e7:dd:e0:61:16:95:5a:77:44:9f:c6:
                    12:65:2a:bf:1f:08:8a:bf:25:0c:2f:c7:f1:ed:53:
                    a2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:22:DF:9C:D7:4B:1D:3D:BF:15:4A:C2:4E:C6:1A:40:1E:A8:32:3D
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.9.0/24
                  185.173.35.0/24
                  191.101.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:01:cc:f4:67:96:df:07:0d:b8:d0:8b:de:2b:8b:3c:10:e1:
         66:17:dd:e9:60:54:14:01:e7:76:3f:b9:e8:e4:d2:35:94:c2:
         ab:12:9d:17:b4:98:a8:63:80:a5:0f:0c:a9:b3:29:02:72:c2:
         a7:3b:b1:38:7c:4e:43:f8:b1:14:b3:2c:fc:02:f5:65:97:f2:
         0a:01:70:c3:09:cb:56:21:f4:b5:aa:8f:11:cf:7a:e1:99:a1:
         25:23:b3:a5:89:92:7f:cc:e9:ba:a7:11:70:b6:3f:ae:b3:0a:
         36:e9:3e:c3:df:4b:7b:0e:0b:72:c1:5c:2f:b3:34:e8:97:55:
         5b:56:20:ec:a0:5b:2c:08:1c:74:97:8d:b4:50:20:0c:17:60:
         d0:40:09:fb:2e:5f:82:9e:da:7e:0e:17:bb:f4:be:7c:b0:11:
         9f:0f:d4:6b:66:4f:71:70:59:8f:b3:01:63:eb:97:53:e2:02:
         21:8c:ad:dc:0e:34:39:42:30:71:68:f2:5c:03:a8:46:76:da:
         42:41:eb:e6:c7:02:9c:c7:f4:ca:a5:09:6a:ee:d4:80:e8:cb:
         f0:e4:58:c7:4b:f9:78:e3:67:d7:5a:d8:36:f2:c6:22:23:89:
         7b:c3:08:f4:f5:f9:37:66:be:b2:6b:0e:19:bb:04:4a:7f:51:
         ba:7a:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org