Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400229.roa
File:                     AS400229.roa (raw, json)
Hash identifier:          nI+SUOLaV+cGFiqQsotxhH8hIJRmYnwgOTaSFZ2gmhI=
Subject key identifier:   05:04:D7:AD:85:30:A5:B0:1D:9A:0F:92:EA:03:31:6F:AB:00:FD:3C
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       33266189E7F78869DD81004C9D9B1CC2F675DAAD
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400229.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     400229
IP address blocks:        181.215.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:26:61:89:e7:f7:88:69:dd:81:00:4c:9d:9b:1c:c2:f6:75:da:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=0504D7AD8530A5B01D9A0F92EA03316FAB00FD3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:05:15:cc:47:80:2f:eb:09:ee:6f:06:4e:5e:
                    54:f2:c0:8d:56:39:1a:33:91:77:4d:77:9f:5f:90:
                    15:9a:bd:3b:2e:c6:2c:d0:a9:d3:85:ba:d8:cd:5b:
                    5b:88:eb:af:99:ce:9b:34:ad:d4:f0:79:41:9c:c9:
                    1e:c3:07:82:58:f7:dc:31:f6:9a:18:33:e2:26:ec:
                    9b:9d:dd:32:fb:6c:87:f9:6e:04:ab:7d:51:a3:1b:
                    14:95:25:1f:b9:fd:4e:5f:17:5d:de:51:8f:fd:c2:
                    01:b8:7e:e8:79:d3:3a:9b:47:f4:f8:fa:0e:26:2f:
                    fa:eb:78:d5:6e:83:14:b6:ee:b3:ab:c8:0c:1b:86:
                    3b:27:e0:ff:eb:d2:42:33:f6:73:d8:8b:f6:46:c5:
                    37:06:3b:69:e2:8c:ea:87:03:d9:db:d3:79:b0:a4:
                    32:4a:2a:df:a6:f0:f5:34:3e:d3:b6:75:97:6e:2e:
                    ec:f5:7e:ed:af:d9:e0:ad:7e:36:d2:b5:b7:90:44:
                    c4:41:1b:58:6a:60:67:7f:23:5b:8b:e7:7e:7b:45:
                    74:25:2c:98:a7:a0:6a:08:b0:4f:50:39:66:d4:8b:
                    d9:c6:f3:2d:0f:b1:d9:09:bc:98:d1:58:66:d0:fd:
                    bc:af:1c:ba:fb:8b:43:58:50:87:31:a8:a1:0b:50:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:04:D7:AD:85:30:A5:B0:1D:9A:0F:92:EA:03:31:6F:AB:00:FD:3C
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS400229.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:30:84:f0:64:01:c2:4d:a1:62:cd:8d:53:14:a0:0c:48:40:
         53:d8:f9:ec:96:43:a8:ec:98:fb:5c:f6:7d:a0:67:5d:24:79:
         3b:d9:22:01:41:81:2f:9e:79:2f:5e:95:9f:91:77:60:7f:d2:
         4d:25:55:bf:46:af:96:11:7e:f7:53:88:ed:7a:62:66:6e:1c:
         75:06:a9:f4:01:52:0c:d7:54:a8:69:d7:31:3b:8d:1a:0c:f3:
         02:ce:98:d3:6b:87:a9:1b:8b:27:4e:12:6c:0a:c8:21:15:c7:
         bc:9f:d7:16:58:af:a8:df:28:d0:b6:9e:13:b4:2e:7c:b4:7d:
         33:d6:36:d7:b5:a4:4d:f3:9a:2c:c6:a8:62:5f:eb:a6:e6:06:
         d2:00:b4:aa:d3:c0:e1:9d:1c:93:4d:b1:36:e1:c5:1e:7b:d0:
         6a:36:91:4b:63:a7:8e:ac:e2:56:6c:10:1a:4a:01:42:ba:5c:
         7b:c6:96:98:47:e4:56:cc:6b:6c:56:f4:e9:03:76:de:31:2d:
         bd:34:78:bf:8b:a5:ee:c9:43:1e:d1:1e:31:fb:c6:74:f2:d5:
         6e:1d:2b:8d:4d:92:35:71:c5:ec:96:bc:36:3c:22:ca:48:c0:
         0e:eb:ab:93:bd:13:80:83:94:4b:56:03:09:d3:ff:eb:c6:07:
         2d:2a:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org