Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS42831.roa
File:                     AS42831.roa (raw, json)
Hash identifier:          E9hjwbVQg1X7mU5lVGtSrJAW3A++Qciy3Bu0PVHqPkc=
Subject key identifier:   F1:B4:A7:93:17:AF:9B:DA:02:2D:DE:23:44:F3:96:21:4A:41:5D:A2
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       38B6786435E10BFD5E08DCEFA6A6A589D06DA084
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS42831.roa
Signing time:             Mon 28 Nov 2022 12:18:25 +0000
ROA not before:           Mon 28 Nov 2022 12:13:25 +0000
ROA not after:            Mon 27 Nov 2023 12:18:25 +0000
asID:                     42831
IP address blocks:        5.181.124.0/24 maxlen: 24
                          5.252.78.0/24 maxlen: 24
                          37.143.61.0/24 maxlen: 24
                          181.215.25.0/24 maxlen: 24
                          181.215.226.0/24 maxlen: 24
                          181.215.229.0/24 maxlen: 24
                          191.96.110.0/24 maxlen: 24
                          191.96.209.0/24 maxlen: 24
                          191.101.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:78:64:35:e1:0b:fd:5e:08:dc:ef:a6:a6:a5:89:d0:6d:a0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:25 2022 GMT
            Not After : Nov 27 12:18:25 2023 GMT
        Subject: CN=F1B4A79317AF9BDA022DDE2344F396214A415DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:ad:20:93:5f:72:25:1b:f6:3d:b4:e1:9a:
                    42:cd:9b:c3:2e:b9:39:91:d2:ec:ae:f3:a2:a5:0f:
                    1c:61:df:1c:1e:c8:af:28:63:96:bd:6e:9e:77:0a:
                    0c:03:ca:63:4f:a2:04:7e:36:2b:a5:db:df:bc:ef:
                    ff:07:58:70:84:74:3f:e7:10:cf:52:79:f3:7a:8c:
                    08:43:09:d3:36:12:07:30:65:d4:f4:c9:51:d1:90:
                    83:e4:10:e5:90:31:69:05:8a:96:d4:71:90:32:58:
                    77:b9:9e:ee:4d:c7:26:c2:d9:bc:29:cd:52:1a:63:
                    65:2c:c7:a4:05:2a:53:75:83:73:4c:1d:00:58:39:
                    3b:a3:65:10:56:ea:47:e4:ae:6d:cf:54:f9:c5:c4:
                    bb:fb:f8:7b:43:81:cf:5e:0a:93:36:fb:7d:f9:41:
                    b9:18:0f:c8:f3:86:6d:55:08:83:31:d8:ca:17:3e:
                    38:5f:c0:e5:41:f1:e8:09:86:ac:d7:ee:8f:6a:66:
                    9d:5b:ec:de:d8:72:74:f9:7f:f4:a2:94:33:63:0d:
                    9a:21:0e:4a:2f:1e:6a:41:25:7f:94:cc:06:04:3b:
                    8e:d4:d0:4b:48:c0:1a:58:20:a1:b5:a4:aa:08:6e:
                    b2:a3:4b:44:f6:97:b5:a3:68:3d:5e:0a:75:23:52:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B4:A7:93:17:AF:9B:DA:02:2D:DE:23:44:F3:96:21:4A:41:5D:A2
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS42831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.124.0/24
                  5.252.78.0/24
                  37.143.61.0/24
                  181.215.25.0/24
                  181.215.226.0/24
                  181.215.229.0/24
                  191.96.110.0/24
                  191.96.209.0/24
                  191.101.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:ef:b1:23:90:d6:a5:a1:64:19:ea:62:66:e1:b0:0e:03:5d:
         5b:34:7d:43:6a:75:9a:cf:bb:d3:c6:7b:36:05:ac:18:b6:a8:
         d9:9c:a9:ac:37:84:a3:09:27:8a:d1:25:bf:7c:96:c0:52:37:
         da:5b:b5:1a:d8:d6:4b:05:8e:2f:d8:75:78:35:b7:97:f1:53:
         85:14:9a:68:4d:4c:20:16:2d:96:4e:a8:9e:37:09:14:a6:c8:
         5f:d5:81:cd:a9:6d:e2:9b:6e:c5:11:34:e7:4c:6f:37:98:51:
         b5:5b:71:cf:c8:d8:87:ac:0c:94:ba:c4:09:d8:00:ba:4c:bf:
         ea:7e:35:8c:72:b7:06:35:39:98:61:f2:bb:08:94:17:0b:8a:
         16:2e:08:21:b6:ba:7e:45:26:87:10:00:24:cd:fb:d8:aa:56:
         7a:4f:21:28:c4:92:00:dd:f3:75:d3:63:65:53:5c:5f:71:d5:
         d9:8a:f4:70:3f:a7:03:f8:d5:eb:e9:e9:aa:0c:83:5e:b0:1e:
         58:db:5d:19:3b:43:43:ee:c7:0d:d7:8c:cd:b5:f6:50:3f:33:
         d8:81:7c:cf:ca:cf:6d:13:9c:81:0c:1f:1e:0f:77:04:09:c3:
         f8:c0:60:54:0c:6c:9b:0e:86:e2:e1:75:d4:ab:90:09:e5:67:
         40:7e:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org