Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211585.roa
File:                     AS211585.roa (raw, json)
Hash identifier:          vJB1O3Th9zR+TUz/+b+xulol3dnpnU0a6oPOaxA/cUg=
Subject key identifier:   CD:45:78:EF:0C:A6:5A:50:32:3B:C3:CE:F3:09:DD:BE:6B:89:BA:35
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       6A5419857812400DD75B4B5C8E102476D8F13EA2
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211585.roa
Signing time:             Thu 09 Feb 2023 19:11:11 +0000
ROA not before:           Thu 09 Feb 2023 19:06:11 +0000
ROA not after:            Thu 08 Feb 2024 19:11:11 +0000
asID:                     211585
IP address blocks:        191.96.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:54:19:85:78:12:40:0d:d7:5b:4b:5c:8e:10:24:76:d8:f1:3e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  9 19:06:11 2023 GMT
            Not After : Feb  8 19:11:11 2024 GMT
        Subject: CN=CD4578EF0CA65A50323BC3CEF309DDBE6B89BA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:3d:40:15:79:31:25:e2:dc:23:47:ab:ac:
                    1f:0d:78:fb:11:d8:ea:69:0a:43:fb:c6:9f:a7:a1:
                    c9:65:0f:63:57:f2:d1:57:dd:b0:b4:fd:2a:24:57:
                    94:71:ea:0a:4c:07:6d:b5:a2:d0:e9:c0:4b:47:d4:
                    01:55:4a:79:c1:e2:30:19:76:37:5b:01:f6:72:6e:
                    a4:fc:a0:eb:18:0d:61:51:3d:16:5f:34:cb:b1:17:
                    fb:d9:2f:61:19:f5:55:94:70:d3:68:f9:41:53:1a:
                    62:23:8b:a6:6b:83:53:fe:71:6c:8c:92:c7:d5:4f:
                    8f:c0:bc:c3:2a:a2:4d:4a:82:94:fc:a8:bf:87:c0:
                    98:e2:2f:fb:50:f7:3a:1d:01:7b:29:eb:30:37:08:
                    67:b8:a8:be:ab:c1:39:f4:59:cf:66:49:fa:e7:91:
                    ac:38:11:9c:f9:09:74:3f:28:54:1c:f2:e2:3d:24:
                    57:57:14:0c:29:b6:90:bd:a4:dc:a4:7d:9e:cf:92:
                    c4:5f:c0:08:11:0c:71:95:79:c2:c8:1a:ca:eb:c8:
                    47:8c:00:91:87:48:95:8e:f6:94:77:8b:c0:d5:18:
                    f3:89:1b:77:af:e0:39:3e:25:9a:43:cd:0f:f3:31:
                    5c:2c:8f:9d:74:03:64:8c:3b:6c:c8:e3:1c:e3:2e:
                    2f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:45:78:EF:0C:A6:5A:50:32:3B:C3:CE:F3:09:DD:BE:6B:89:BA:35
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS211585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:11:db:e2:c3:73:e2:ab:58:df:0b:56:38:6a:43:ae:20:ff:
         18:92:1c:c1:d8:64:88:9a:a8:14:e6:26:7d:51:0a:ca:c7:da:
         38:17:0a:af:78:52:80:a0:4d:e3:47:16:bf:9b:a9:f2:ba:28:
         17:ac:37:ae:ab:a8:af:78:50:b7:a7:10:6c:43:3b:f0:2c:f1:
         6e:01:b5:f9:2c:1b:da:6e:90:3b:09:ba:c7:82:f8:98:fe:0e:
         ad:a1:45:40:ae:61:f4:b1:71:de:29:05:6b:5e:2f:24:8d:58:
         a6:ab:42:49:e0:b4:ba:90:17:3f:b4:d6:ab:62:2b:eb:98:74:
         41:a4:ab:9d:fc:2a:ba:42:84:17:bf:b3:09:cd:17:00:dd:5d:
         e3:c5:f4:c0:62:ff:70:46:88:a3:65:bf:f4:ef:87:3f:50:1e:
         1c:a5:08:44:02:83:56:16:43:17:7b:e7:32:97:fc:84:f8:ca:
         93:ae:48:c8:e6:1b:04:b5:28:a8:bd:ce:d0:51:55:17:30:e2:
         02:95:19:b4:a0:d7:aa:c1:68:8b:cd:ae:c0:f7:5a:20:93:73:
         5e:25:88:36:14:b5:0c:d3:b1:6f:7c:67:92:da:79:01:09:a5:
         47:9b:51:4f:ee:af:31:95:31:bf:72:eb:1a:15:9a:52:56:93:
         7c:0b:f8:54
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUalQZhXgSQA3XW0tcjhAkdtjxPqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMDkxOTA2MTFaFw0yNDAyMDgxOTExMTFaMDMxMTAvBgNV
BAMTKENENDU3OEVGMENBNjVBNTAzMjNCQzNDRUYzMDlEREJFNkI4OUJBMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42j1AFXkxJeLcI0errB8NePsR
2OppCkP7xp+nocllD2NX8tFX3bC0/SokV5Rx6gpMB221otDpwEtH1AFVSnnB4jAZ
djdbAfZybqT8oOsYDWFRPRZfNMuxF/vZL2EZ9VWUcNNo+UFTGmIji6Zrg1P+cWyM
ksfVT4/AvMMqok1KgpT8qL+HwJjiL/tQ9zodAXsp6zA3CGe4qL6rwTn0Wc9mSfrn
kaw4EZz5CXQ/KFQc8uI9JFdXFAwptpC9pNykfZ7PksRfwAgRDHGVecLIGsrryEeM
AJGHSJWO9pR3i8DVGPOJG3ev4Dk+JZpDzQ/zMVwsj510A2SMO2zI4xzjLi8xAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUzUV47wymWlAyO8PO8wndvmuJujUwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMyMTE1ODUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YH0wDQYJKoZIhvcNAQELBQADggEBADAR
2+LDc+KrWN8LVjhqQ64g/xiSHMHYZIiaqBTmJn1RCsrH2jgXCq94UoCgTeNHFr+b
qfK6KBesN66rqK94ULenEGxDO/As8W4BtfksG9pukDsJuseC+Jj+Dq2hRUCuYfSx
cd4pBWteLySNWKarQkngtLqQFz+01qtiK+uYdEGkq538KrpChBe/swnNFwDdXePF
9MBi/3BGiKNlv/Tvhz9QHhylCEQCg1YWQxd75zKX/IT4ypOuSMjmGwS1KKi9ztBR
VRcw4gKVGbSg16rBaIvNrsD3WiCTc14liDYUtQzTsW98Z5LaeQEJpUebUU/urzGV
Mb9y6xoVmlJWk3wL+FQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:00 2024 by rpki-client on console-fra.rpki-client.org