Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS22773.roa
File:                     AS22773.roa (raw, json)
Hash identifier:          h54tuIVEcSk92SzoOotn37DLYJBc6j6CRKUi/GXQPBw=
Subject key identifier:   72:17:85:DD:5C:5A:C9:D9:8F:B1:06:B6:C9:AE:8A:44:09:B7:FD:8E
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       726F68EF30ABBEEAB6B2F9E1D5CA5F0CBDAB1441
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS22773.roa
Signing time:             Mon 28 Nov 2022 12:18:24 +0000
ROA not before:           Mon 28 Nov 2022 12:13:24 +0000
ROA not after:            Mon 27 Nov 2023 12:18:24 +0000
asID:                     22773
IP address blocks:        181.214.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6f:68:ef:30:ab:be:ea:b6:b2:f9:e1:d5:ca:5f:0c:bd:ab:14:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:24 2022 GMT
            Not After : Nov 27 12:18:24 2023 GMT
        Subject: CN=721785DD5C5AC9D98FB106B6C9AE8A4409B7FD8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b4:78:25:d9:2f:f1:39:7f:80:cf:54:52:08:
                    e5:e2:1b:6a:b1:ee:03:ec:48:ad:10:ce:24:cf:9a:
                    52:81:ee:7a:9a:5f:99:99:fa:8c:e3:84:1f:d2:ae:
                    0b:b5:13:f7:87:71:82:02:d7:69:64:d8:f6:8c:84:
                    f5:fa:2f:bd:3b:0a:5e:37:6b:6e:c1:7b:f1:c7:97:
                    5f:23:03:f9:c0:29:4b:28:a7:f5:c9:e5:3b:06:01:
                    cb:e7:c0:9e:1c:b2:d7:23:e1:45:47:a3:c1:68:84:
                    e6:c4:98:a7:9f:f9:4b:13:cc:f1:34:84:8c:2a:49:
                    05:31:78:63:50:56:e3:f3:a9:6c:fc:61:f9:d3:d1:
                    75:7e:8d:44:80:d1:86:32:72:62:76:9c:3d:0a:27:
                    4c:69:8c:70:80:94:a6:8c:3a:33:6d:dd:8b:ae:74:
                    80:0b:c6:62:3a:c8:ea:74:b9:b0:71:52:32:d7:de:
                    7a:11:02:d2:79:0c:05:00:78:3f:96:30:05:25:66:
                    f1:73:97:48:19:38:84:e5:0a:42:7a:26:c8:ae:26:
                    30:1b:44:cd:94:fc:d1:f9:c4:8d:05:0d:64:ca:73:
                    0c:1e:36:2b:9d:8f:0a:ae:4d:3e:1a:5f:f4:6c:ba:
                    33:22:f0:cb:bc:02:95:61:19:6f:06:ea:cc:58:28:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:17:85:DD:5C:5A:C9:D9:8F:B1:06:B6:C9:AE:8A:44:09:B7:FD:8E
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS22773.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:6a:f6:04:1e:3d:07:55:1f:3b:8b:6f:be:5d:c9:bf:dd:d8:
         cf:f8:0a:ad:de:06:1e:68:76:d1:a5:02:72:4b:33:00:47:dd:
         e2:13:6c:82:81:80:7d:60:df:ea:50:80:89:2e:1e:04:22:ee:
         99:b2:f0:bf:b4:3e:d3:da:2c:9e:15:91:e0:0a:63:cd:1e:fb:
         f0:ce:f6:96:f8:78:c8:ec:6c:43:9c:20:64:b5:fc:b9:df:f4:
         9f:ff:ed:1d:46:0e:50:59:19:e9:68:22:38:91:ee:65:6a:9c:
         f6:53:cc:8d:7a:88:56:07:fb:d9:df:9c:6f:36:04:6b:f8:15:
         08:78:fb:b9:96:77:28:2c:1e:64:8e:14:82:41:8a:a6:57:b0:
         d7:4d:33:3d:87:5c:b9:66:e0:a3:62:04:c0:43:ba:7d:01:7d:
         01:e7:fb:9b:ba:9e:93:07:eb:06:b3:67:e5:43:67:1f:71:52:
         46:4b:1a:69:f9:26:42:50:f1:e0:c4:89:c1:72:29:d8:60:6b:
         28:8a:b5:08:00:a8:38:f1:b3:fa:d5:23:88:c3:d1:b7:59:9c:
         67:5f:2f:c3:80:96:51:a5:c5:d0:b7:aa:53:31:a9:cc:bb:ee:
         6f:fb:65:6c:b5:75:e9:09:87:8c:6f:d3:d8:82:d6:5c:56:75:
         bb:c2:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org