Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3170.roa
File:                     AS3170.roa (raw, json)
Hash identifier:          qrVbyTrUhSAE3jirOBYnMH1tVjJDwtQO+9Fo+/16ayU=
Subject key identifier:   E5:F8:D6:24:EB:90:36:65:50:82:91:0B:CB:F9:65:22:10:29:50:A3
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       45612C5F977E6EA292D569B5C6C33534F539683D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3170.roa
Signing time:             Mon 28 Nov 2022 12:18:17 +0000
ROA not before:           Mon 28 Nov 2022 12:13:17 +0000
ROA not after:            Mon 27 Nov 2023 12:18:17 +0000
asID:                     3170
IP address blocks:        2.58.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:61:2c:5f:97:7e:6e:a2:92:d5:69:b5:c6:c3:35:34:f5:39:68:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:17 2022 GMT
            Not After : Nov 27 12:18:17 2023 GMT
        Subject: CN=E5F8D624EB9036655082910BCBF96522102950A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:6e:58:11:e4:ad:f9:ba:9b:8b:21:7d:cd:
                    2d:40:84:c1:6c:ff:3f:7f:5d:ec:77:cd:1b:4c:c0:
                    1f:09:c0:c2:33:69:f5:a3:98:fd:5a:54:40:f8:37:
                    25:46:5a:0a:58:7e:da:c8:6c:02:56:01:ae:fc:c0:
                    3a:a1:55:f3:72:57:be:dc:6c:89:77:97:af:a6:16:
                    5b:d4:63:2c:c2:4a:3e:94:67:06:cd:82:ba:b0:a7:
                    ba:d7:51:0b:d3:85:37:41:66:33:5a:c6:8d:7e:44:
                    9d:de:3b:2e:63:a0:93:68:4b:e6:70:08:26:0a:a2:
                    6a:99:3f:63:41:7e:cc:59:96:19:97:0d:f6:55:23:
                    b8:d4:dc:cf:f5:b8:47:19:f0:02:33:c7:e8:d0:62:
                    10:69:4e:4b:f0:31:58:ad:ca:eb:22:2c:2b:3e:62:
                    5c:aa:3f:4c:f6:77:da:a7:6c:69:15:c4:65:0f:98:
                    0c:b4:b3:f6:96:8d:03:50:26:a6:a9:7b:53:8c:a0:
                    bc:66:3a:4c:09:d8:33:6d:15:20:ec:47:e8:d0:b7:
                    29:8c:bd:c2:bd:44:88:c7:6d:74:43:8f:01:2b:ec:
                    34:c6:57:4b:10:e8:ee:4d:38:22:df:f8:10:ec:a6:
                    8c:88:fa:87:d3:8f:3a:eb:82:e1:60:a3:a4:58:f8:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F8:D6:24:EB:90:36:65:50:82:91:0B:CB:F9:65:22:10:29:50:A3
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS3170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:40:17:30:08:e8:f7:eb:38:51:22:88:a8:be:d0:dd:88:
         34:9d:85:7c:d4:7e:80:01:a0:f5:18:9f:06:43:2f:65:03:09:
         75:ff:97:64:76:ca:61:98:aa:1a:55:23:e9:30:cd:a0:3b:a9:
         8e:c8:a2:69:65:57:6e:3d:a7:67:cc:61:f4:68:34:c0:ee:73:
         60:f4:ea:82:63:8a:a9:60:4f:11:51:42:e5:ea:34:b5:4c:e7:
         91:2d:77:2e:22:dc:73:95:a3:47:cb:ed:22:2b:d3:9e:72:4b:
         1e:b2:07:f2:b9:a5:fb:e4:06:49:a0:54:14:c8:28:f7:23:a8:
         e0:42:80:6f:58:77:4f:05:c1:7d:49:9b:7a:1d:c2:d6:bf:67:
         84:76:71:9a:c2:f9:3d:01:32:72:64:ba:0e:f2:32:2d:46:51:
         b7:58:b9:2d:87:a0:b9:5f:53:71:31:ee:fa:35:31:53:43:27:
         b2:63:d7:04:15:b9:b1:a7:c3:1a:5c:29:aa:a7:c6:6e:ba:39:
         f1:08:21:86:d8:28:42:c6:62:eb:cc:5b:7f:57:1a:9a:2a:51:
         40:5a:fd:15:70:d8:c6:38:4e:fa:a6:19:51:fd:e8:60:dd:e2:
         77:84:6b:72:7d:70:12:2c:c6:4d:bf:22:c3:69:61:04:86:69:
         40:cf:3c:5a
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIURWEsX5d+bqKS1Wm1xsM1NPU5aD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMTdaFw0yMzExMjcxMjE4MTdaMDMxMTAvBgNV
BAMTKEU1RjhENjI0RUI5MDM2NjU1MDgyOTEwQkNCRjk2NTIyMTAyOTUwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgm5YEeSt+bqbiyF9zS1AhMFs
/z9/Xex3zRtMwB8JwMIzafWjmP1aVED4NyVGWgpYftrIbAJWAa78wDqhVfNyV77c
bIl3l6+mFlvUYyzCSj6UZwbNgrqwp7rXUQvThTdBZjNaxo1+RJ3eOy5joJNoS+Zw
CCYKomqZP2NBfsxZlhmXDfZVI7jU3M/1uEcZ8AIzx+jQYhBpTkvwMVityusiLCs+
YlyqP0z2d9qnbGkVxGUPmAy0s/aWjQNQJqape1OMoLxmOkwJ2DNtFSDsR+jQtymM
vcK9RIjHbXRDjwEr7DTGV0sQ6O5NOCLf+BDspoyI+ofTjzrrguFgo6RY+A9pAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU5fjWJOuQNmVQgpELy/llIhApUKMwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBwBggr
BgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMzMTcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAAjqvMA0GCSqGSIb3DQEBCwUAA4IBAQBuhEAX
MAjo9+s4USKIqL7Q3Yg0nYV81H6AAaD1GJ8GQy9lAwl1/5dkdsphmKoaVSPpMM2g
O6mOyKJpZVduPadnzGH0aDTA7nNg9OqCY4qpYE8RUULl6jS1TOeRLXcuItxzlaNH
y+0iK9OecksesgfyuaX75AZJoFQUyCj3I6jgQoBvWHdPBcF9SZt6HcLWv2eEdnGa
wvk9ATJyZLoO8jItRlG3WLkth6C5X1NxMe76NTFTQyeyY9cEFbmxp8MaXCmqp8Zu
ujnxCCGG2ChCxmLrzFt/VxqaKlFAWv0VcNjGOE76phlR/ehg3eJ3hGtyfXASLMZN
vyLDaWEEhmlAzzxa
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org