Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS35758.roa
File:                     AS35758.roa (raw, json)
Hash identifier:          BfQsCxGsMTqJ2xbEB+aPnR8Ll776ADhHRbpYd6rAz+o=
Subject key identifier:   D6:6C:AD:4E:BD:EC:6A:72:5F:53:5C:6A:2B:A6:B5:5F:5B:2F:3C:26
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0AB7FEDC5B1745770DA5AB6D0B16C2098C992361
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS35758.roa
Signing time:             Mon 28 Nov 2022 12:18:22 +0000
ROA not before:           Mon 28 Nov 2022 12:13:22 +0000
ROA not after:            Mon 27 Nov 2023 12:18:22 +0000
asID:                     35758
IP address blocks:        181.214.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b7:fe:dc:5b:17:45:77:0d:a5:ab:6d:0b:16:c2:09:8c:99:23:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:22 2022 GMT
            Not After : Nov 27 12:18:22 2023 GMT
        Subject: CN=D66CAD4EBDEC6A725F535C6A2BA6B55F5B2F3C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:71:30:35:2b:f2:21:da:58:ea:39:dd:c6:
                    79:57:c2:2e:65:9f:71:95:94:d0:29:e5:90:3e:cc:
                    02:48:f5:ed:55:f2:cd:12:6f:6e:b1:fa:d6:be:4c:
                    f1:40:ab:6a:7e:7a:db:30:4a:20:d9:17:86:71:3e:
                    8e:d1:ba:7a:0b:95:62:19:9d:71:6f:7e:a5:e2:80:
                    c1:e4:08:57:d4:6d:25:72:91:39:23:fc:79:ad:b4:
                    8f:26:96:fd:6e:b2:8d:db:7c:a2:95:40:29:39:42:
                    bb:10:a1:3d:fc:a0:77:b0:e7:c3:bf:62:8e:bf:d1:
                    fb:30:67:8e:2a:53:a2:dd:5d:63:1c:ca:a3:87:ba:
                    55:19:93:58:6a:38:ca:19:1e:18:7c:ca:95:4c:51:
                    4b:08:16:46:48:70:16:e3:cb:c4:bd:aa:49:27:a3:
                    32:ec:ad:cf:87:9b:62:6b:7e:35:6e:ea:da:5a:5a:
                    60:79:a6:05:2f:17:52:f7:32:ce:eb:99:a7:09:24:
                    19:e3:c8:aa:65:1f:0a:c9:08:c2:16:07:ce:8d:58:
                    f0:65:7a:5e:3f:54:b5:57:d1:ce:55:6e:2b:52:1f:
                    20:f1:45:a6:5f:4c:b2:5d:c3:a6:eb:4a:bb:77:9c:
                    a6:18:aa:44:02:79:7e:49:1d:7a:d4:00:b6:02:c6:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:AD:4E:BD:EC:6A:72:5F:53:5C:6A:2B:A6:B5:5F:5B:2F:3C:26
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS35758.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:8c:fb:39:93:96:25:9e:06:4d:01:18:e8:8e:e6:04:de:
         a7:b1:ec:40:2d:48:04:26:2a:cd:77:dc:95:bd:05:59:1c:00:
         3e:11:99:de:72:5e:9c:46:92:b8:21:21:22:72:8b:0e:ac:6d:
         6a:10:ba:fb:b2:63:a7:d3:c7:d0:c6:bd:b0:57:ee:cc:ac:97:
         b7:68:91:76:9c:1e:ae:43:d6:cf:1c:72:27:63:a9:2d:74:1b:
         01:df:f4:9c:62:0c:c3:d8:24:e5:f4:28:b4:41:09:fb:cb:2c:
         f1:52:87:42:f0:a1:4f:a3:a9:53:06:22:1f:c1:65:55:8d:36:
         46:ce:72:d0:b4:00:bf:5b:ea:c8:dc:e8:a9:92:5b:ce:65:61:
         23:12:d3:43:2c:83:0f:f4:8d:1b:44:b7:a1:b8:52:a1:79:83:
         38:73:08:2a:70:38:45:c0:b6:29:c3:82:f3:2b:0b:49:27:a6:
         9b:1e:fe:f7:22:a9:a8:ba:7a:74:b4:3c:34:21:8a:71:7b:33:
         dd:0a:e4:57:44:76:d9:07:f0:17:4a:30:6d:3a:99:94:df:5d:
         86:ec:2d:c2:9c:df:64:7b:f4:48:9a:86:fb:14:ef:44:48:eb:
         3f:5b:61:76:56:61:11:70:ae:c3:25:ec:43:12:4d:6a:06:d8:
         7a:24:bf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org