Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS398465.roa
File:                     AS398465.roa (raw, json)
Hash identifier:          ZS5qeQmNgvUvj/SpEtHxJwoZ0HyZ1tqO79wkQFNJb8o=
Subject key identifier:   02:B8:C4:DD:17:28:29:D2:AD:8A:94:02:F7:AC:E7:D7:E4:83:A9:C1
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       7B99999034839B5308B17582FBB2DFE6C996885A
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS398465.roa
Signing time:             Tue 29 Nov 2022 04:17:48 +0000
ROA not before:           Tue 29 Nov 2022 04:12:48 +0000
ROA not after:            Tue 28 Nov 2023 04:17:48 +0000
asID:                     398465
IP address blocks:        149.62.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:99:99:90:34:83:9b:53:08:b1:75:82:fb:b2:df:e6:c9:96:88:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 29 04:12:48 2022 GMT
            Not After : Nov 28 04:17:48 2023 GMT
        Subject: CN=02B8C4DD172829D2AD8A9402F7ACE7D7E483A9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:db:b0:16:53:f2:5d:04:b1:e4:85:fa:54:
                    0b:1d:05:33:3c:ce:4d:cd:26:c1:39:76:db:a2:96:
                    d0:61:a1:26:8b:47:e2:a2:f8:f6:56:58:18:4f:fe:
                    24:99:a3:b2:19:38:8d:2b:69:61:40:24:ec:5d:5d:
                    8a:0c:20:8b:f6:0c:40:71:ec:8c:b4:9e:2b:02:7a:
                    55:d8:0d:89:da:de:ea:da:fa:5f:9c:5e:48:e1:7b:
                    d7:ba:49:8d:3c:05:85:4f:0f:64:dd:3c:2a:be:77:
                    2f:57:1b:ae:79:37:39:64:21:e8:40:e1:3e:12:d6:
                    53:8b:db:44:25:0a:89:42:ca:c4:cb:fc:7f:d2:93:
                    2b:a8:4b:7e:7f:cb:27:bd:e7:f5:ec:55:e1:40:b5:
                    8c:5c:d3:07:95:39:1f:7e:23:fd:5e:4f:65:e6:d6:
                    1a:da:7c:3d:08:e2:a6:1a:df:05:7e:89:f7:00:e7:
                    11:87:10:eb:51:9a:c8:f0:01:3d:a2:1a:71:11:00:
                    50:4b:18:02:01:4f:e8:bf:59:b9:c9:6c:ea:8f:84:
                    38:cf:61:95:de:4e:ef:c4:88:a5:ce:d3:cf:a4:91:
                    f2:e3:16:8d:ec:56:02:03:5b:92:4a:00:21:84:f7:
                    60:62:97:c8:3a:29:82:15:6a:f5:7a:d0:38:eb:e3:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B8:C4:DD:17:28:29:D2:AD:8A:94:02:F7:AC:E7:D7:E4:83:A9:C1
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS398465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.62.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:06:90:35:03:c7:be:c4:25:f8:d9:d1:f8:e8:b3:9e:1e:2a:
         a9:96:36:f8:af:e9:9c:59:1b:9f:ef:a0:c2:c0:52:70:44:37:
         92:a6:6c:3e:26:ee:1f:a5:8d:7c:42:09:bb:76:ca:94:56:02:
         19:4b:47:52:18:da:75:d2:c8:f2:19:cb:0d:57:bb:97:a2:aa:
         f8:3f:6a:25:2d:e0:3f:76:cc:10:93:6a:3a:93:46:51:90:67:
         69:65:e6:96:49:f3:8f:7c:ef:b7:37:ea:88:f8:9b:d9:9b:ca:
         85:af:db:0b:3b:3f:f0:90:a3:cd:65:f5:01:1b:e8:65:b2:5c:
         9e:e2:c7:52:bb:6c:9b:4b:ba:66:aa:6b:40:e6:c8:8a:d7:dd:
         14:8b:22:e6:fa:c3:66:b1:91:da:e3:9e:78:64:e8:de:f3:e3:
         e1:a0:e2:d8:8b:bf:2e:cd:3e:0c:a2:9d:41:2d:04:46:88:30:
         eb:c7:8b:a5:64:08:c0:a1:4f:59:28:d3:c0:a0:f6:a5:9e:70:
         dc:a4:42:40:37:d2:2b:a5:f8:d0:6f:d0:00:a2:a3:78:dc:ff:
         7f:74:e6:c5:48:e5:43:48:8f:e4:8e:38:16:4f:0a:29:eb:1b:
         30:b7:34:9b:60:a0:a4:e0:5d:91:cf:b9:ff:f2:aa:5c:b8:7a:
         e6:e4:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org