Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210535.roa
File:                     AS210535.roa (raw, json)
Hash identifier:          dbrjDMW9BpjuuGNSMr99wTfGKeKkgeeORl4NprKyiUw=
Subject key identifier:   01:DA:37:F5:7F:03:1F:27:BE:19:13:FD:1B:B0:CF:BD:81:28:4B:DD
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0427DE4B069B258A38959CD6B7965204CC8D396D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210535.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     210535
IP address blocks:        191.101.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:27:de:4b:06:9b:25:8a:38:95:9c:d6:b7:96:52:04:cc:8d:39:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=01DA37F57F031F27BE1913FD1BB0CFBD81284BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:73:7a:9c:19:9a:6b:85:36:b5:42:66:55:
                    56:0a:c3:43:1d:96:67:35:ec:69:75:a5:55:4f:04:
                    9e:c2:12:80:16:c6:d6:85:e1:d9:1b:04:29:ab:25:
                    1f:9d:2f:58:6b:56:cf:8a:ff:47:d9:8c:fc:53:7d:
                    d4:b5:7c:97:36:85:6d:e5:8c:c8:a9:ed:01:5c:70:
                    25:65:74:bd:c0:03:13:15:4d:6f:50:d3:8e:61:5e:
                    12:ac:b8:08:cf:9b:be:7f:25:b9:d0:2f:d5:13:ef:
                    fc:55:1e:4e:3d:da:45:35:0a:3e:4a:14:35:2a:b8:
                    8a:7f:af:a7:aa:53:b7:2a:74:26:41:d3:2f:a1:fa:
                    57:9d:18:dc:d4:7e:42:a3:09:6c:e3:d3:ec:c6:27:
                    1c:11:5c:13:5a:21:14:48:9e:02:87:43:ca:23:0c:
                    ae:96:51:c4:6f:a7:4b:f5:51:7d:9c:2c:8c:9c:40:
                    2a:5c:69:6b:c5:a1:ed:7c:98:43:6a:98:35:aa:d6:
                    80:1c:41:ce:52:ac:d3:4e:ca:7c:97:a3:22:4c:53:
                    84:ec:6e:27:e0:5b:48:31:bd:88:5a:88:90:ff:72:
                    d4:ac:2f:2f:5d:d1:92:56:bf:50:07:b1:bb:e3:71:
                    ef:ad:3d:d7:66:2f:4c:3e:68:72:c7:8c:20:9a:70:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DA:37:F5:7F:03:1F:27:BE:19:13:FD:1B:B0:CF:BD:81:28:4B:DD
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d2:64:47:b6:3a:8d:e2:23:80:c6:ef:34:5d:3b:2d:35:13:
         64:3f:47:b5:40:39:16:1d:7a:9d:f7:36:79:ab:d4:8a:c5:0e:
         10:0b:6b:da:5e:aa:56:9c:bc:79:b9:12:6a:65:7b:8a:38:90:
         17:c8:8f:bb:08:78:ea:47:3e:7f:61:8f:a0:a7:93:0c:64:43:
         2f:33:81:f4:e7:c5:28:87:cb:9c:b7:ed:ff:8e:65:0e:cd:7d:
         e2:ef:3b:c4:39:55:47:a1:10:8d:2e:40:53:62:cd:8c:44:7a:
         75:da:c5:b7:cd:91:65:b7:53:f7:9e:ae:e8:dc:d1:94:bb:d1:
         dc:78:3f:1e:f2:94:f5:f7:5f:7a:8f:50:a8:7a:d3:e5:07:cf:
         9a:aa:f1:91:05:fc:dc:3b:c2:b8:b2:ca:58:b9:34:3d:e5:91:
         e9:49:04:29:7c:0e:de:45:4b:50:1e:85:f9:17:7b:c4:bc:89:
         61:3b:c4:11:b4:65:7c:3c:53:b7:25:04:ce:07:57:e9:93:a1:
         e8:11:03:a8:44:9d:97:bb:52:11:0f:6c:7f:84:7d:23:b4:7a:
         3f:03:96:78:a3:d0:49:9d:4e:36:31:5c:c4:06:d5:a4:65:d6:
         d1:5d:e3:6e:cb:33:11:9d:8c:b4:78:d7:e6:34:5d:9b:89:b4:
         51:42:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org