Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS265919.roa
File:                     AS265919.roa (raw, json)
Hash identifier:          rfdP7rkQDlqXWLEoj29SaCZdr87SgZa6ODVb8yoH16c=
Subject key identifier:   AA:FC:3F:0D:09:C5:9F:8D:2B:B9:C8:D7:10:7D:6B:E8:19:42:8F:42
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4E9834AF87008CAF153C87B103BB044EB2548FCA
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS265919.roa
Signing time:             Wed 01 Feb 2023 22:02:27 +0000
ROA not before:           Wed 01 Feb 2023 21:57:27 +0000
ROA not after:            Wed 31 Jan 2024 22:02:27 +0000
asID:                     265919
IP address blocks:        181.214.234.0/24 maxlen: 24
                          191.96.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:98:34:af:87:00:8c:af:15:3c:87:b1:03:bb:04:4e:b2:54:8f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  1 21:57:27 2023 GMT
            Not After : Jan 31 22:02:27 2024 GMT
        Subject: CN=AAFC3F0D09C59F8D2BB9C8D7107D6BE819428F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:b1:cd:ec:12:eb:51:3b:f9:e0:06:26:d5:
                    e4:73:0b:0d:95:bc:b3:01:a1:2d:2f:c1:8e:fb:4f:
                    99:99:7f:5a:4b:30:0e:b0:58:b1:fe:ec:62:b4:82:
                    c1:47:ad:99:17:e3:bf:6f:c9:86:b5:7e:e9:ad:3b:
                    03:af:51:0d:a3:df:da:aa:1e:50:ba:cd:ca:1d:65:
                    a5:96:cb:f6:03:54:1d:98:28:1f:5e:ca:bd:4c:5e:
                    12:cc:cf:d0:e7:a4:a6:12:ea:65:9a:fd:b9:79:7a:
                    56:ac:b9:09:da:c2:f0:15:d2:18:d6:63:3e:3e:4a:
                    b0:0b:b2:ea:e2:a6:57:b0:f5:95:03:b9:78:d2:d4:
                    77:85:9a:08:52:5b:58:62:b3:f2:66:c4:91:9e:9e:
                    ca:7d:bc:4d:08:be:85:5d:7b:d0:df:01:fb:b2:85:
                    f7:bc:3d:54:95:29:af:f2:9f:e9:74:a8:f5:fb:33:
                    49:52:fc:a5:27:0d:22:a7:f0:e0:d8:1b:f9:51:41:
                    3e:90:48:1b:e5:20:f1:2b:2b:3e:7d:cd:ac:f3:f3:
                    ae:fe:ee:85:e2:bd:96:c7:c2:9f:3f:73:93:93:16:
                    77:61:a8:0f:29:e6:06:c3:5b:2b:de:8c:3f:7c:54:
                    fd:c6:94:1e:92:21:ed:0d:6f:3c:fe:a1:5d:12:21:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:3F:0D:09:C5:9F:8D:2B:B9:C8:D7:10:7D:6B:E8:19:42:8F:42
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS265919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.234.0/24
                  191.96.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:9e:92:c9:c7:9c:fc:c9:1a:13:6d:2d:a8:bc:0c:c3:8e:
         cd:d2:56:e4:6b:2d:11:52:db:31:6a:ce:e8:06:1a:de:6e:98:
         91:f0:13:51:8c:9e:cd:99:36:53:01:3a:ab:66:4d:3e:9a:10:
         01:90:d7:6c:be:dc:23:a8:7e:ff:7e:0f:63:e0:ca:de:c5:6e:
         7b:67:15:45:ac:56:85:4d:de:12:4a:20:5b:be:a1:bb:29:4b:
         d1:85:c8:52:cb:59:49:1e:6c:fc:2a:c2:47:8e:10:41:fd:cc:
         46:c9:33:7a:5a:e8:d1:b8:ae:71:d8:f8:23:20:a2:ce:d3:65:
         b6:4c:52:b1:17:e6:5e:47:85:1d:82:63:2e:e7:80:dd:3f:5f:
         ea:9f:44:cf:17:ed:8a:a4:00:d3:d4:fd:6f:16:70:34:5a:63:
         a8:b2:f9:73:bc:f2:eb:87:7f:00:64:79:80:43:6d:96:75:0f:
         f3:2e:30:17:6d:cf:55:26:2b:36:c8:aa:1e:29:d7:3e:c1:e1:
         1d:48:68:62:0d:d4:c2:76:c2:fa:78:be:26:1c:57:10:f4:46:
         fc:23:6c:64:a2:0e:a6:4b:9f:ee:e4:e1:84:44:cc:fc:9e:22:
         24:8e:5d:c6:1d:6d:3b:50:4d:f6:62:0b:c8:a2:5e:a9:97:c1:
         f6:93:2c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org