Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210846.roa
File:                     AS210846.roa (raw, json)
Hash identifier:          EDlQzVW9qp8u3ZjX7OpYtdamH9w/ZEGfGbEFnPdyYuQ=
Subject key identifier:   42:ED:34:A0:CF:50:F7:44:79:9B:C9:EA:B3:03:B9:F8:0A:90:2E:7C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       79C53599ADE8B53035AE185BEC30427781B8D75C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210846.roa
Signing time:             Mon 28 Nov 2022 12:18:18 +0000
ROA not before:           Mon 28 Nov 2022 12:13:18 +0000
ROA not after:            Mon 27 Nov 2023 12:18:18 +0000
asID:                     210846
IP address blocks:        45.133.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c5:35:99:ad:e8:b5:30:35:ae:18:5b:ec:30:42:77:81:b8:d7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:18 2022 GMT
            Not After : Nov 27 12:18:18 2023 GMT
        Subject: CN=42ED34A0CF50F744799BC9EAB303B9F80A902E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:5d:eb:0e:aa:71:98:24:ef:69:a0:92:f7:
                    7e:ce:c5:d3:7f:43:a2:8a:1b:fb:b8:ad:5f:99:00:
                    ab:41:db:b0:27:bb:5e:36:a7:23:b2:ec:45:68:fc:
                    1e:bb:38:95:af:50:ce:ff:cc:1a:96:51:fc:c5:60:
                    77:be:22:92:6e:65:4d:28:35:c2:36:40:87:45:1a:
                    4f:e8:b7:a4:d0:cc:2e:24:c4:3a:74:27:e2:6b:6a:
                    5e:38:bc:32:25:fc:f8:fe:8a:c1:ec:be:d8:95:57:
                    0e:69:74:20:49:a5:77:90:f5:c2:de:09:59:28:75:
                    91:c7:dc:da:32:11:a0:52:d1:d0:a2:94:79:20:7a:
                    e8:0d:16:62:fa:e4:03:94:48:72:89:d8:56:4f:3a:
                    64:b4:fa:65:f7:7c:7d:7b:d8:f8:66:78:2f:33:f5:
                    cb:67:f1:51:a7:e1:30:c6:eb:09:e7:06:14:c1:27:
                    20:15:b6:c0:0e:8b:cb:c9:40:2e:8c:cc:83:d7:69:
                    a7:26:f9:c7:8d:7e:35:82:85:52:51:22:57:5f:1e:
                    4c:44:b8:33:87:61:7c:7c:0a:73:61:a9:97:c6:e9:
                    2b:80:ea:96:6a:75:3c:68:b5:68:f5:89:36:93:7f:
                    3f:5e:5e:75:b2:49:48:39:5a:2e:42:9c:05:6b:91:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:34:A0:CF:50:F7:44:79:9B:C9:EA:B3:03:B9:F8:0A:90:2E:7C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS210846.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:62:fc:3c:67:9e:e9:d5:c6:8a:eb:fa:50:1e:fb:f4:90:41:
         01:c5:0f:ff:d0:f4:9e:c3:dd:a5:2a:d5:75:7a:d1:f4:ec:21:
         03:7d:c9:fe:99:0e:18:9b:c1:b6:b4:88:37:6b:e7:72:02:47:
         66:15:9e:ce:49:ad:99:df:d5:ef:42:9d:21:e3:0d:94:df:93:
         53:ec:3e:3d:df:b2:dd:a6:0c:95:47:1d:c1:15:af:33:1c:0c:
         e6:bc:1a:24:ad:cc:38:19:d9:b7:e4:5b:4c:d1:c8:db:6f:dd:
         9b:80:3e:65:4f:0a:59:ab:bf:98:79:1a:a2:06:cc:c3:ee:5f:
         c4:68:f7:74:cd:04:ec:95:68:9d:b3:20:5b:30:5f:62:d1:65:
         6d:4a:37:12:51:60:dc:ec:20:bc:32:3b:f8:63:1a:59:23:f1:
         20:08:c2:f2:d3:55:5b:e6:a2:14:3d:8a:bc:7f:06:1c:d5:5d:
         be:6f:e9:4f:df:57:a5:3d:7d:f9:27:a0:26:97:ed:96:e5:d2:
         d5:de:46:7d:54:04:4f:2c:46:2b:4f:ee:8e:25:82:3c:5c:d2:
         b7:1a:e9:66:4c:33:c6:6f:b0:2a:9e:77:8c:fb:c0:b5:a4:da:
         db:3f:b9:e5:1e:4c:ef:9a:d1:53:a3:ba:83:49:3f:f1:00:e9:
         f6:c0:07:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org