Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS22822.roa
File:                     AS22822.roa (raw, json)
Hash identifier:          sqw1izcdXgGkzbbO9rKVualSdfkQc3Gbd1JdST2vRw4=
Subject key identifier:   5B:36:B8:1E:E1:F9:1A:F8:51:47:AD:E6:07:BE:60:0B:5A:9E:65:77
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       56E03361CD860623FAB66C883B8A86D392011EE0
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS22822.roa
Signing time:             Mon 28 Nov 2022 12:18:26 +0000
ROA not before:           Mon 28 Nov 2022 12:13:26 +0000
ROA not after:            Mon 27 Nov 2023 12:18:26 +0000
asID:                     22822
IP address blocks:        179.61.170.0/24 maxlen: 24
                          191.101.200.0/24 maxlen: 24
                          191.101.208.0/24 maxlen: 24
                          191.101.226.0/24 maxlen: 24
                          191.101.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e0:33:61:cd:86:06:23:fa:b6:6c:88:3b:8a:86:d3:92:01:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:26 2022 GMT
            Not After : Nov 27 12:18:26 2023 GMT
        Subject: CN=5B36B81EE1F91AF85147ADE607BE600B5A9E6577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4d:e8:f6:68:2f:86:be:bb:06:6d:e2:c8:75:
                    90:2c:15:1f:fe:48:46:62:d5:f5:93:25:b2:eb:a5:
                    80:a0:9d:e9:4e:cf:04:31:1f:34:5d:e1:27:cb:1e:
                    5a:aa:21:8d:58:70:64:78:7c:0e:ba:cb:6d:48:84:
                    50:2f:15:c4:66:7e:c0:49:3d:fb:30:00:d3:22:af:
                    25:39:5b:a7:f2:5f:60:dd:86:d7:6c:97:74:19:4b:
                    93:9a:4b:a5:b0:13:a2:fa:ac:40:11:48:87:81:f8:
                    ff:58:ea:c0:10:8b:bd:c7:9b:e7:e1:4a:f4:ef:47:
                    96:cc:ce:e2:00:6f:0f:e5:46:1e:ab:59:f7:7c:de:
                    e4:19:b1:d2:5a:e0:e3:fa:97:b0:10:95:0c:00:97:
                    df:2d:17:58:79:c4:5c:89:ac:dc:f4:01:45:11:04:
                    3b:52:32:b9:11:f3:5a:91:3a:66:77:54:1c:b6:e8:
                    ad:0c:a8:69:51:98:89:4a:b7:9b:26:b7:c8:80:ef:
                    f4:7d:72:30:4a:1f:74:1f:c4:fd:46:3b:0a:65:00:
                    78:d3:6c:24:c9:16:58:8b:c3:bf:44:de:bf:55:c4:
                    67:fd:39:09:84:28:c2:a5:ff:22:93:aa:77:73:f5:
                    22:b7:04:2a:48:f3:78:5a:4a:22:9b:bc:90:9d:ef:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:36:B8:1E:E1:F9:1A:F8:51:47:AD:E6:07:BE:60:0B:5A:9E:65:77
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS22822.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.170.0/24
                  191.101.200.0/24
                  191.101.208.0/24
                  191.101.226.0/24
                  191.101.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:3e:fe:5e:78:90:37:37:d3:4b:38:0e:b0:df:b1:fb:71:a8:
         2a:bc:e4:e2:b2:aa:99:6d:7d:a1:ba:15:a1:73:7f:03:2a:5e:
         9f:45:34:6a:92:d3:6d:b1:40:c6:61:7a:95:8e:ac:88:dd:9f:
         7e:a8:9a:c4:35:93:94:cd:df:1d:b7:bf:e6:92:ff:f7:e0:4b:
         d6:d7:b0:84:3e:63:27:d6:ae:70:4e:63:35:b8:2e:b8:25:c3:
         66:45:11:30:6a:75:c1:06:9b:a7:64:af:72:80:da:60:ac:bf:
         31:3e:8a:35:e8:2a:f8:6e:04:2b:36:75:00:ca:d8:22:b9:f5:
         92:80:b0:50:ee:2e:72:c5:92:e0:55:7e:7f:b0:b2:eb:41:57:
         ce:68:1f:8e:d2:0c:db:3b:75:9d:b9:f0:b4:7b:71:d0:a8:3c:
         93:63:19:73:a7:1f:3d:9b:eb:ea:ca:b3:04:72:1f:98:d7:0b:
         63:b2:b4:40:1a:2c:5e:f2:7e:f9:5f:e8:1c:e9:82:76:e5:65:
         77:4b:36:c0:d0:eb:42:6e:8f:76:85:ed:e9:42:91:58:17:c3:
         8e:23:3f:10:85:25:7a:d8:34:e6:af:57:28:d0:60:da:1e:91:
         46:11:79:f1:61:09:75:85:00:11:57:85:cc:12:2f:86:e8:94:
         48:83:58:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org