Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210703.roa
File:                     AS210703.roa (raw, json)
Hash identifier:          Ldoaslm72NtHocJN03zTAY2kAcQ0m3la9NvroNvQ05o=
Subject key identifier:   F2:E2:D8:01:78:3D:46:B7:07:04:86:E2:0B:78:E3:6A:B3:E0:CB:29
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7D6C6D9ABF04FD02C132331A5DDB17668FE571
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210703.roa
Signing time:             Tue 10 Jan 2023 00:00:14 +0000
ROA not before:           Mon 09 Jan 2023 23:55:14 +0000
ROA not after:            Tue 09 Jan 2024 00:00:14 +0000
asID:                     210703
IP address blocks:        181.214.96.0/24 maxlen: 24
                          191.96.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6c:6d:9a:bf:04:fd:02:c1:32:33:1a:5d:db:17:66:8f:e5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan  9 23:55:14 2023 GMT
            Not After : Jan  9 00:00:14 2024 GMT
        Subject: CN=F2E2D801783D46B7070486E20B78E36AB3E0CB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:23:7e:d0:a8:d9:7f:0d:c6:29:41:ef:a0:
                    32:18:ea:b0:63:20:d6:ad:50:9c:50:ec:1a:48:11:
                    45:9e:ef:9e:50:a7:83:28:b2:61:35:71:0e:d9:b5:
                    33:1a:7d:3f:b7:1f:68:50:49:66:65:22:3b:1c:de:
                    94:53:10:fa:26:71:92:95:c5:97:2f:10:fb:a5:a4:
                    35:f4:a1:67:f1:2b:8c:61:bf:68:55:1c:0a:5e:c0:
                    00:33:03:2d:93:a1:bf:68:ae:98:88:9f:dc:8c:19:
                    94:d4:32:05:53:5f:14:f1:f1:37:15:71:ba:5b:31:
                    40:18:ce:ff:71:80:a8:c1:ee:ca:03:99:8c:08:54:
                    50:b1:31:f2:74:2c:cf:3f:ae:19:86:5e:bc:38:f0:
                    b5:d9:d0:a8:7c:6f:ef:bd:ad:92:cf:5a:11:3d:7b:
                    b5:4c:ed:50:a4:60:3e:5f:42:f8:1e:a2:72:05:1d:
                    57:a4:d5:9b:0c:d2:6f:99:be:b7:e4:a1:48:78:11:
                    e2:f7:40:10:be:2d:9b:08:1f:bf:52:a0:31:96:c1:
                    ac:f2:22:4e:32:d2:e1:90:1d:ad:01:ed:08:8d:9f:
                    4c:a1:4b:ba:5f:c5:d2:f6:ae:da:73:33:0b:29:34:
                    fb:6e:ce:a5:f7:2f:9c:81:0b:37:00:33:31:39:f3:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:D8:01:78:3D:46:B7:07:04:86:E2:0B:78:E3:6A:B3:E0:CB:29
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210703.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.96.0/24
                  191.96.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:70:19:73:33:ef:24:85:da:9e:fa:85:96:65:b2:e5:c0:
         65:e4:a4:a0:b2:fa:48:72:30:7a:52:d4:e2:f1:80:58:9a:71:
         8a:5c:98:79:c3:ce:5d:36:c4:bd:7d:05:bc:c6:e3:fc:ad:b9:
         90:2d:a0:0f:5b:ec:4d:d9:35:9a:ac:26:17:b8:b6:17:c1:0c:
         0c:93:5f:1c:53:21:09:bc:02:a4:7e:10:c5:72:de:dd:71:67:
         a3:51:64:5a:53:93:e8:14:b4:3d:ca:0c:1c:f7:e6:18:72:fe:
         72:7f:fb:ca:5c:eb:60:68:76:02:9c:29:3d:b4:7a:f7:23:51:
         1f:09:a2:19:bb:17:ea:1f:5f:de:4b:22:69:c6:be:89:12:f0:
         b6:35:a1:84:c6:82:02:c1:15:e0:aa:63:01:ac:27:16:4c:74:
         2d:09:ca:b4:13:71:9b:b3:7f:41:4a:37:31:2c:5a:01:93:b1:
         63:d2:09:1d:28:95:dd:78:50:94:26:8c:37:2c:ca:8a:95:de:
         e7:8d:0d:0d:64:d9:a3:0c:fa:12:37:36:67:f3:36:ec:9d:b7:
         d3:4d:31:b5:8b:ee:1e:b8:6e:68:60:29:11:37:34:c6:34:7a:
         5c:20:1e:47:17:4e:d2:81:36:08:cb:2d:a7:7f:85:1c:f5:5b:
         65:12:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org