Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209466.roa
File:                     AS209466.roa (raw, json)
Hash identifier:          ZUaNgrF4ZIECLyzKdddqf2SWgNZLhadTA98Kw85xRv0=
Subject key identifier:   65:5A:6D:2F:96:E6:EF:E4:70:6B:05:24:6C:1C:AB:ED:4A:CB:8E:18
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3912A3C3B18D8EB7FA164C4DB623440DABEB9112
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209466.roa
Signing time:             Mon 28 Nov 2022 12:18:25 +0000
ROA not before:           Mon 28 Nov 2022 12:13:25 +0000
ROA not after:            Mon 27 Nov 2023 12:18:25 +0000
asID:                     209466
IP address blocks:        185.174.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:12:a3:c3:b1:8d:8e:b7:fa:16:4c:4d:b6:23:44:0d:ab:eb:91:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:25 2022 GMT
            Not After : Nov 27 12:18:25 2023 GMT
        Subject: CN=655A6D2F96E6EFE4706B05246C1CABED4ACB8E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:98:fd:ff:10:c1:35:74:ae:c3:6e:63:7f:
                    ba:8d:23:08:6c:93:f2:ac:a9:57:1a:a1:45:d3:bb:
                    1c:be:32:bb:f1:aa:53:2f:b5:37:9c:a2:2c:e7:70:
                    c4:cd:d5:e9:fe:95:9e:62:19:f9:12:e9:23:4a:07:
                    78:aa:04:47:77:fe:c9:e4:ff:6c:47:f7:a4:8f:e3:
                    97:7f:3e:9c:18:e4:9b:91:5b:f4:88:54:5e:08:54:
                    8a:05:cc:84:40:37:70:28:e3:f8:ed:49:35:6d:ec:
                    89:3b:d9:e6:c4:b2:7e:e3:8c:64:58:84:df:06:be:
                    6c:a6:bc:b9:11:d1:6b:82:a6:5a:98:f2:dd:ac:a1:
                    75:7e:c9:56:05:45:67:62:24:ff:62:49:a9:ab:c6:
                    54:fa:f3:66:d4:6e:8c:4b:04:c6:31:ab:74:78:77:
                    49:c8:00:f5:87:a5:b2:f1:d2:13:9b:6d:72:1b:a6:
                    57:da:f0:38:bc:cb:65:bb:fd:67:cb:06:4e:15:9c:
                    bd:82:77:2b:38:69:3a:6d:28:3a:ab:7d:19:78:a3:
                    2d:8b:6f:1d:a5:af:c1:9a:6b:f3:09:67:54:01:bb:
                    4d:b6:7c:60:f6:5e:d5:f9:f6:b4:36:a5:35:df:ed:
                    64:3b:de:16:2a:00:e7:0e:f2:75:40:42:43:61:93:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5A:6D:2F:96:E6:EF:E4:70:6B:05:24:6C:1C:AB:ED:4A:CB:8E:18
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS209466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e9:af:97:a4:01:96:cb:25:96:4f:b0:0d:1e:24:0c:37:f9:
         41:1c:d1:7f:aa:9e:6c:96:3b:c3:41:14:60:7a:27:1d:dc:aa:
         88:05:9b:ea:f2:9e:a8:84:17:d5:0b:96:c2:a2:f8:ab:bf:8c:
         d3:a2:7d:88:a5:65:f2:7e:83:10:47:1f:48:86:5f:e0:cd:37:
         b4:d7:92:54:39:51:35:26:4c:14:1e:f0:70:ed:0f:e1:32:37:
         cf:91:e5:f3:ac:d6:1c:45:56:81:c1:c3:c3:9b:70:9c:96:d1:
         39:2a:e4:e6:57:69:7e:2d:2c:b0:36:26:f1:7f:e5:00:8b:51:
         00:ea:39:02:7e:fc:93:76:cf:42:0b:83:e6:c1:6c:4d:c3:53:
         ec:3e:d7:c7:39:0c:d2:0e:17:fb:1e:74:b9:b7:ca:fb:90:05:
         b8:a0:bf:e0:9c:51:25:d2:2e:eb:03:46:6f:db:8d:38:0d:98:
         bc:05:fb:45:26:19:0f:9d:ec:f0:44:de:9d:72:d1:5b:30:9c:
         95:ed:e1:f1:9f:6a:29:d0:16:6a:b9:06:47:fd:e9:72:dd:31:
         5b:fe:e6:bc:68:66:a3:40:f7:e3:ee:9c:85:d3:54:09:b1:fc:
         b0:1a:5a:fd:ea:1b:c4:89:53:eb:3a:fe:e6:d6:1e:9c:cb:ff:
         2a:b3:c0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org