Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271965.roa
File:                     AS271965.roa (raw, json)
Hash identifier:          eOfrZzxQ+kJ0L8k+k5mfs15bRO6FSN/xFDXyjbi3UKA=
Subject key identifier:   7C:BE:55:BC:E2:15:F6:21:FD:8E:CD:A2:D9:57:58:EC:27:6D:6F:C3
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       395D78424C5BB73603E608E54E77B114E3E50BBB
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271965.roa
Signing time:             Mon 28 Nov 2022 12:18:22 +0000
ROA not before:           Mon 28 Nov 2022 12:13:22 +0000
ROA not after:            Mon 27 Nov 2023 12:18:22 +0000
asID:                     271965
IP address blocks:        191.101.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5d:78:42:4c:5b:b7:36:03:e6:08:e5:4e:77:b1:14:e3:e5:0b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:22 2022 GMT
            Not After : Nov 27 12:18:22 2023 GMT
        Subject: CN=7CBE55BCE215F621FD8ECDA2D95758EC276D6FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:bd:b5:34:72:00:87:27:f6:f7:9a:09:58:
                    a6:f7:2f:84:72:08:67:37:e3:db:75:b3:77:c0:d2:
                    b3:9b:32:b2:4c:09:d7:19:b8:c2:fb:2f:35:1f:5d:
                    ff:b8:c6:5f:3a:0c:d6:a9:16:e8:b4:c4:9f:15:a7:
                    86:c9:72:59:ab:7d:b2:9e:30:6f:94:05:a6:05:87:
                    b5:f7:36:9a:76:50:d6:95:89:5d:75:84:9d:85:90:
                    ca:50:97:48:7b:2e:dc:38:a7:f3:93:e6:e6:ce:70:
                    45:ff:59:3d:e7:a5:e4:44:71:bd:41:5a:6b:78:5a:
                    9f:97:f3:c7:8c:07:2a:a2:67:19:f9:3f:0e:70:00:
                    9c:75:19:f2:ce:7c:ea:23:5c:ae:d5:e8:82:35:c0:
                    9e:c0:5a:2f:2a:6f:cf:8d:c0:74:fe:1c:42:14:7a:
                    da:37:2c:ac:bb:85:5f:87:80:ef:02:8c:92:f6:3a:
                    fd:b7:98:74:10:7b:ed:95:09:fd:11:7c:b1:77:e1:
                    e0:79:69:51:47:d3:17:43:07:02:f4:6f:f8:9a:f6:
                    e2:aa:2a:78:00:81:2f:4c:1f:23:53:67:29:1f:3a:
                    72:b1:b0:95:8c:9b:70:a2:dd:4e:e9:29:52:a3:b4:
                    22:6a:a2:e6:c8:79:f8:16:cf:65:b2:23:e0:58:b7:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BE:55:BC:E2:15:F6:21:FD:8E:CD:A2:D9:57:58:EC:27:6D:6F:C3
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS271965.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d0:a9:51:52:14:cc:45:80:32:f7:4e:40:f1:96:7a:c8:06:
         bd:bb:a7:be:03:35:1f:c6:e1:9b:10:34:9f:a4:25:d3:bd:f9:
         fd:fa:58:31:3e:84:6b:61:34:03:f1:62:98:75:8d:6c:37:63:
         2e:19:26:6e:36:3d:47:2c:30:d9:02:ad:96:c6:3a:a6:65:c0:
         f3:67:5e:3d:ed:5a:4d:c8:a1:88:ad:bf:86:d8:98:64:5b:11:
         9c:05:4f:58:5e:3e:ee:0a:d6:c3:2a:7e:99:f6:3e:d8:d7:d6:
         0c:4e:45:0b:d3:3e:ac:f7:e8:d5:4d:bd:0b:2b:b9:a8:b5:38:
         94:ed:ca:a3:ef:82:a9:4d:d5:bc:57:90:f6:04:b9:f1:a4:01:
         5c:72:4a:48:41:8e:46:fb:37:72:51:b9:ed:de:3f:e0:3e:da:
         40:d0:cf:88:27:0e:9d:7f:7b:da:7a:00:97:55:0f:df:35:08:
         1f:e3:2f:b7:73:52:40:f5:e4:1a:75:34:1e:10:c4:c1:2e:7f:
         2d:c7:28:84:ac:84:7b:77:e9:89:5d:68:fc:63:b6:2e:01:75:
         f6:2b:28:41:08:e7:41:c2:86:1e:4d:e6:58:b5:1c:21:3f:d1:
         26:99:89:5d:44:a0:bf:16:dc:34:db:d6:62:9c:2d:1c:4c:a5:
         b8:a7:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org