Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS393427.roa
File:                     AS393427.roa (raw, json)
Hash identifier:          lnNwPMXK4qOOJku2SWSfEsVaJHbPP5btWqX/OnhOmew=
Subject key identifier:   2F:65:70:21:35:06:25:95:0A:46:BB:C5:36:FF:77:17:6E:D6:BF:E6
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       0B231AC25BC122C0B09DD7A46A2A8DEBE69B2E9F
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS393427.roa
Signing time:             Thu 19 Jan 2023 03:14:41 +0000
ROA not before:           Thu 19 Jan 2023 03:09:41 +0000
ROA not after:            Thu 18 Jan 2024 03:14:41 +0000
asID:                     393427
IP address blocks:        185.139.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:23:1a:c2:5b:c1:22:c0:b0:9d:d7:a4:6a:2a:8d:eb:e6:9b:2e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan 19 03:09:41 2023 GMT
            Not After : Jan 18 03:14:41 2024 GMT
        Subject: CN=2F657021350625950A46BBC536FF77176ED6BFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:ff:33:ae:1c:95:27:a8:22:9b:fd:3c:97:
                    64:00:69:fa:a3:b9:94:91:cb:47:8d:41:ab:a7:6d:
                    e8:7e:1b:da:64:9f:7a:0f:ff:fb:cf:74:f0:ac:fc:
                    2b:ee:44:6e:9f:1a:c9:af:ef:59:fe:a1:e1:c4:69:
                    19:da:5f:29:40:1a:47:ae:65:d7:8e:29:6b:ad:06:
                    fa:b3:e6:2f:fe:c8:f3:91:e6:c7:64:01:6e:51:59:
                    7d:e1:5b:27:71:13:76:b1:83:5d:65:67:ea:37:cf:
                    06:01:66:68:5a:d3:11:b0:4d:aa:e9:ac:27:cf:e6:
                    90:37:f3:ba:1d:b0:1f:5c:93:51:96:fb:49:e8:e8:
                    38:db:90:ec:66:a3:fd:aa:a9:01:b1:45:17:82:ad:
                    f1:7f:78:53:4d:93:12:4e:c1:02:c0:9b:7e:2a:af:
                    9c:09:08:b2:68:d7:4e:6e:eb:92:42:17:ac:ec:db:
                    70:49:f9:7a:2c:f3:9e:32:20:56:4e:8c:cf:2d:b7:
                    d8:31:8e:1c:ca:6a:76:73:32:d0:fd:cd:39:9c:fa:
                    0b:4a:57:99:c3:e6:3d:bf:e4:dc:45:75:98:a0:7c:
                    b6:b9:33:e9:92:06:d7:e6:a1:78:3a:12:1e:0d:1b:
                    85:79:02:57:8d:5a:7a:9a:19:80:d6:dd:92:3a:7d:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:70:21:35:06:25:95:0A:46:BB:C5:36:FF:77:17:6E:D6:BF:E6
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS393427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5f:eb:8d:f5:34:6a:8b:4b:09:84:2f:76:8c:eb:5f:79:d2:
         e3:39:77:d7:db:0b:f4:7d:10:fd:16:15:0a:88:1b:27:8d:f4:
         f0:5b:21:59:f6:53:52:d4:ae:00:26:d8:1e:9e:3d:48:b3:35:
         f1:04:a8:47:ae:60:29:22:c7:97:24:52:87:3c:bf:74:ea:62:
         d3:5d:d6:79:22:7b:90:58:9f:28:e4:4c:4b:9c:84:b9:38:6f:
         9d:6a:16:44:f6:54:63:f5:21:d9:d4:29:73:91:3e:7b:73:c6:
         85:6b:94:41:0b:65:90:3a:d5:e7:41:93:04:9c:78:da:a1:9f:
         da:16:b8:80:ca:79:14:d9:8f:e1:2b:d6:aa:b2:24:ff:6e:70:
         6c:c1:78:35:d1:13:5b:e1:a3:59:14:91:3c:7a:9d:ca:79:e2:
         3d:43:20:bf:dc:20:cb:64:44:35:0d:eb:96:f3:ee:f5:a5:40:
         65:15:8e:4d:fa:de:77:49:19:0f:86:56:eb:df:3f:a9:71:ce:
         76:cf:b6:57:06:e4:56:22:db:b2:8b:4e:d0:79:2d:3d:3c:55:
         46:58:a3:27:f3:44:89:bf:b5:bf:f9:33:74:49:04:b2:71:46:
         3f:cf:41:e3:f1:46:16:7a:12:08:0e:71:cd:4a:fb:39:ea:12:
         2c:d1:67:7d
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUCyMawlvBIsCwndekaiqN6+abLp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAxMTkwMzA5NDFaFw0yNDAxMTgwMzE0NDFaMDMxMTAvBgNV
BAMTKDJGNjU3MDIxMzUwNjI1OTUwQTQ2QkJDNTM2RkY3NzE3NkVENkJGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5f8zrhyVJ6gim/08l2QAafqj
uZSRy0eNQaunbeh+G9pkn3oP//vPdPCs/CvuRG6fGsmv71n+oeHEaRnaXylAGkeu
ZdeOKWutBvqz5i/+yPOR5sdkAW5RWX3hWydxE3axg11lZ+o3zwYBZmha0xGwTarp
rCfP5pA387odsB9ck1GW+0no6DjbkOxmo/2qqQGxRReCrfF/eFNNkxJOwQLAm34q
r5wJCLJo105u65JCF6zs23BJ+Xos854yIFZOjM8tt9gxjhzKanZzMtD9zTmc+gtK
V5nD5j2/5NxFdZigfLa5M+mSBtfmoXg6Eh4NG4V5AleNWnqaGYDW3ZI6fccZAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUL2VwITUGJZUKRrvFNv93F27Wv+YwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVMzOTM0Mjcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5i+wwDQYJKoZIhvcNAQELBQADggEBAHtf
6431NGqLSwmEL3aM61950uM5d9fbC/R9EP0WFQqIGyeN9PBbIVn2U1LUrgAm2B6e
PUizNfEEqEeuYCkix5ckUoc8v3TqYtNd1nkie5BYnyjkTEuchLk4b51qFkT2VGP1
IdnUKXORPntzxoVrlEELZZA61edBkwSceNqhn9oWuIDKeRTZj+Er1qqyJP9ucGzB
eDXRE1vho1kUkTx6ncp54j1DIL/cIMtkRDUN65bz7vWlQGUVjk363ndJGQ+GVuvf
P6lxznbPtlcG5FYi27KLTtB5LT08VUZYoyfzRIm/tb/5M3RJBLJxRj/PQePxRhZ6
EggOcc1K+znqEizRZ30=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org