Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS398464.roa
File:                     AS398464.roa (raw, json)
Hash identifier:          n379kcq4NtlO+U3Q7jAEGXT8jeE6m0zDw3qUgASvinY=
Subject key identifier:   E9:CA:89:77:F1:FB:86:E8:A1:A7:6B:00:69:B8:42:C2:D2:B8:98:95
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       5DBCB72E1A3CF8D64686E23F54C39F85D6494C9C
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS398464.roa
Signing time:             Mon 28 Nov 2022 12:18:25 +0000
ROA not before:           Mon 28 Nov 2022 12:13:25 +0000
ROA not after:            Mon 27 Nov 2023 12:18:25 +0000
asID:                     398464
IP address blocks:        181.214.122.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bc:b7:2e:1a:3c:f8:d6:46:86:e2:3f:54:c3:9f:85:d6:49:4c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:25 2022 GMT
            Not After : Nov 27 12:18:25 2023 GMT
        Subject: CN=E9CA8977F1FB86E8A1A76B0069B842C2D2B89895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:27:6e:25:7a:c5:66:49:45:1c:be:63:ca:e6:
                    1e:65:82:6e:27:8e:52:02:6c:a3:4a:24:0f:f9:63:
                    dc:1b:69:a0:0c:c0:11:23:30:46:15:0c:35:77:ed:
                    3e:d6:42:53:d0:37:a9:12:1a:bb:b0:1b:fc:68:0f:
                    e9:42:a2:e4:0f:50:2f:69:51:48:ed:94:94:2b:a6:
                    84:4d:00:a3:37:b0:56:41:7d:15:af:86:e6:98:26:
                    74:89:5c:74:65:d8:fe:2b:d2:13:66:fc:1c:15:32:
                    40:5b:66:c7:17:6e:ae:e1:30:d5:8e:37:db:85:47:
                    52:88:c5:87:6a:44:3a:f7:e2:f7:87:48:c8:fb:20:
                    fc:5f:a7:25:f0:c7:5e:01:37:a5:da:dd:0a:9d:46:
                    bd:2a:47:72:e5:47:07:14:b2:1a:91:48:d5:5f:d8:
                    8f:4d:b8:85:31:8f:75:99:17:4c:bf:d6:82:fe:d7:
                    04:c9:35:98:da:12:05:11:29:fb:0d:b5:e2:27:31:
                    c7:3b:cb:22:26:be:db:41:ba:13:68:d2:66:ae:7e:
                    a0:4b:84:d7:cc:f5:49:14:b2:31:38:e9:2a:65:ee:
                    0c:1a:87:1e:8a:db:ad:79:46:63:3e:21:f8:72:12:
                    98:e0:bb:1a:5a:f7:63:cc:ec:45:61:19:1d:d3:4e:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CA:89:77:F1:FB:86:E8:A1:A7:6B:00:69:B8:42:C2:D2:B8:98:95
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS398464.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:54:3c:eb:8f:7d:b4:94:4e:34:4c:ec:74:26:dd:7b:19:f3:
         4f:ed:ac:b6:ef:91:c2:2f:40:60:d3:0a:8a:e8:45:c5:0f:17:
         13:ff:e1:64:87:06:85:3d:d5:a9:f4:12:62:14:41:1f:90:f8:
         6b:93:1a:50:24:4b:97:34:0d:6f:0d:d5:50:d5:e4:ec:bf:a4:
         23:1d:53:07:f5:6f:12:30:b2:2d:56:ec:8e:9c:e5:99:51:fb:
         68:de:01:ce:ec:e7:56:7b:6a:53:3b:a8:47:a2:19:60:23:68:
         a9:b4:61:69:7e:1a:c1:81:29:ab:0f:d4:bc:af:2f:cf:6b:e6:
         55:45:ea:03:92:40:8f:d0:80:71:15:c1:d2:7e:9c:80:aa:49:
         ae:b2:3f:7e:3e:85:5e:37:bd:32:4c:df:d4:6f:f8:30:2b:64:
         ad:f7:fe:2f:25:9a:66:4b:b1:c1:f6:3e:ef:57:c1:dd:e9:db:
         f2:27:cf:50:66:ee:5a:e3:d4:19:45:c9:9d:9d:dd:92:55:8a:
         f8:45:1b:3b:6b:8a:e9:fb:f5:33:4b:e0:00:06:07:3a:dd:98:
         a1:98:17:cf:2c:cb:4c:4e:99:62:ca:8d:08:58:77:ab:5f:86:
         bc:98:47:dc:ac:ac:7d:23:81:ed:77:06:98:56:76:a8:c3:65:
         44:88:26:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org