Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210356.roa
File:                     AS210356.roa (raw, json)
Hash identifier:          beslI52LG9JUZr0aJ6b8strQbiqY2G/mkqpq0APvBII=
Subject key identifier:   39:41:C0:9D:00:73:AF:D5:EB:29:81:DA:B5:55:46:66:AF:EA:7D:06
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       17166022157581CA27FDFEECA059AAD75B59B002
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210356.roa
Signing time:             Mon 28 Nov 2022 12:18:22 +0000
ROA not before:           Mon 28 Nov 2022 12:13:22 +0000
ROA not after:            Mon 27 Nov 2023 12:18:22 +0000
asID:                     210356
IP address blocks:        181.214.48.0/24 maxlen: 24
                          181.214.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:16:60:22:15:75:81:ca:27:fd:fe:ec:a0:59:aa:d7:5b:59:b0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:22 2022 GMT
            Not After : Nov 27 12:18:22 2023 GMT
        Subject: CN=3941C09D0073AFD5EB2981DAB5554666AFEA7D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:f6:c3:be:43:98:9c:ac:3e:0f:77:44:c9:
                    9c:60:f7:3e:ac:bc:5f:ca:27:d9:52:b1:f2:8b:f1:
                    1e:1a:72:bc:6d:c3:c6:65:8b:da:97:3b:1b:31:f0:
                    7c:bb:ff:16:f7:4d:81:8f:83:53:a8:9b:e6:07:9d:
                    d0:34:ed:55:ff:00:6c:2a:f4:94:3d:6e:76:28:91:
                    3f:d5:0f:50:48:6a:d6:59:c5:61:0e:8c:ae:61:63:
                    bf:8a:5d:5d:d2:41:29:f4:c4:05:2a:72:a4:61:21:
                    a4:13:0f:ae:45:1a:b0:0c:57:cc:a5:0a:8f:35:e3:
                    0d:6c:18:32:9b:d9:d6:8b:16:b4:d1:0b:e0:d5:6f:
                    9a:ba:81:94:30:92:4b:34:f8:8a:3b:a1:36:ba:e7:
                    49:2a:30:c5:b8:cb:0c:ee:87:8a:f7:39:25:56:6b:
                    02:a0:f2:06:6f:de:b8:f2:1d:17:ce:cf:81:7f:33:
                    ed:54:50:0e:08:7c:b9:d7:af:28:83:7a:e3:d2:0f:
                    f7:49:ee:d3:bb:d3:96:61:93:0c:0d:6e:b9:54:72:
                    26:68:29:d8:7d:47:e8:cc:4d:d6:ca:bb:df:c9:4d:
                    e4:9d:a7:45:40:d2:db:2d:2d:c6:7e:f9:22:2c:b3:
                    cb:7c:64:6e:8c:f9:f5:f1:31:8c:75:50:ec:40:23:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:41:C0:9D:00:73:AF:D5:EB:29:81:DA:B5:55:46:66:AF:EA:7D:06
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210356.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.48.0/24
                  181.214.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:c0:cf:ab:d4:83:c6:ae:b9:78:ee:74:e5:fd:8b:f7:1a:
         13:c1:7d:52:fd:21:e4:3c:97:90:2a:7e:c6:b9:0d:bb:81:a1:
         94:ab:ca:a6:d2:ad:11:c4:54:f0:2a:5d:b4:50:01:9e:0e:e2:
         27:98:a6:54:ee:11:7a:7d:35:54:a7:d7:03:44:c5:e3:d5:08:
         e6:e6:85:96:f2:ef:71:6e:d6:d3:9f:bd:62:bd:01:59:fb:36:
         3a:a4:4f:55:8c:d8:24:30:55:75:11:70:81:be:f9:fa:d9:6c:
         da:a1:32:68:5e:87:01:9e:18:97:f5:8f:ad:8e:d2:c9:1d:2d:
         b3:68:36:56:ea:5e:fe:8d:9b:52:b5:08:30:06:be:44:59:b6:
         5c:16:65:2f:68:87:60:51:6a:5f:2c:12:9d:b2:46:d0:b0:bf:
         9c:06:ac:7f:b6:3e:fd:54:e3:b5:52:4b:3c:5d:e7:7e:38:3e:
         59:8f:7b:70:22:7b:69:83:95:99:75:47:b9:c1:ba:32:45:26:
         6f:11:c6:76:5c:9d:28:dc:9a:b7:b3:9c:15:c1:12:8c:11:3c:
         4b:6b:82:50:7e:75:3d:7b:3b:49:17:30:27:26:9e:64:58:8b:
         fa:ea:da:8f:4e:b8:8c:ba:e5:ff:88:2e:b8:a8:3f:d1:84:07:
         17:ba:ec:e6
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIUFxZgIhV1gcon/f7soFmq11tZsAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMjJaFw0yMzExMjcxMjE4MjJaMDMxMTAvBgNV
BAMTKDM5NDFDMDlEMDA3M0FGRDVFQjI5ODFEQUI1NTU0NjY2QUZFQTdEMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvPbDvkOYnKw+D3dEyZxg9z6s
vF/KJ9lSsfKL8R4acrxtw8Zli9qXOxsx8Hy7/xb3TYGPg1Oom+YHndA07VX/AGwq
9JQ9bnYokT/VD1BIatZZxWEOjK5hY7+KXV3SQSn0xAUqcqRhIaQTD65FGrAMV8yl
Co814w1sGDKb2daLFrTRC+DVb5q6gZQwkks0+Io7oTa650kqMMW4ywzuh4r3OSVW
awKg8gZv3rjyHRfOz4F/M+1UUA4IfLnXryiDeuPSD/dJ7tO705ZhkwwNbrlUciZo
Kdh9R+jMTdbKu9/JTeSdp0VA0tstLcZ++SIss8t8ZG6M+fXxMYx1UOxAI5R3AgMB
AAGjggH6MIIB9jAdBgNVHQ4EFgQUOUHAnQBzr9XrKYHatVVGZq/qfQYwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyMTAzNTYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYB
BQUHAQcBAf8EFjAUMBIEAgABMAwDBAC11jADBAC11t0wDQYJKoZIhvcNAQELBQAD
ggEBAG9NwM+r1IPGrrl47nTl/Yv3GhPBfVL9IeQ8l5Aqfsa5DbuBoZSryqbSrRHE
VPAqXbRQAZ4O4ieYplTuEXp9NVSn1wNExePVCObmhZby73Fu1tOfvWK9AVn7Njqk
T1WM2CQwVXURcIG++frZbNqhMmhehwGeGJf1j62O0skdLbNoNlbqXv6Nm1K1CDAG
vkRZtlwWZS9oh2BRal8sEp2yRtCwv5wGrH+2Pv1U47VSSzxd5344PlmPe3Aie2mD
lZl1R7nBujJFJm8RxnZcnSjcmreznBXBEowRPEtrglB+dT17O0kXMCcmnmRYi/rq
2o9OuIy65f+ILrioP9GEBxe67OY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org