Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43927.roa
File:                     AS43927.roa (raw, json)
Hash identifier:          M4X3Sd4ILrAmF4BDQp65rGQl81xY+7/N5r5X0Of/eQc=
Subject key identifier:   2C:61:32:35:E7:3C:8D:3B:7B:78:B7:55:4F:57:1E:8B:22:98:56:B2
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       4A19A4CF5D8B0FBF5060897CCD4778E03AC432E7
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43927.roa
Signing time:             Fri 06 Jan 2023 14:07:44 +0000
ROA not before:           Fri 06 Jan 2023 14:02:44 +0000
ROA not after:            Fri 05 Jan 2024 14:07:44 +0000
asID:                     43927
IP address blocks:        45.95.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:19:a4:cf:5d:8b:0f:bf:50:60:89:7c:cd:47:78:e0:3a:c4:32:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan  6 14:02:44 2023 GMT
            Not After : Jan  5 14:07:44 2024 GMT
        Subject: CN=2C613235E73C8D3B7B78B7554F571E8B229856B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:4d:8d:87:1f:2b:6f:5e:68:bf:dc:df:38:
                    cd:4b:a1:9d:6a:a5:c8:78:02:4a:6d:bd:c2:d6:07:
                    03:d3:55:7a:30:96:65:30:71:e0:97:a6:d3:16:02:
                    ea:95:ce:ab:f6:3c:ee:a4:bd:e3:b9:33:89:f7:0c:
                    b6:3c:9b:af:1f:1c:73:1e:98:db:7f:c4:a8:24:86:
                    97:85:63:b9:aa:e0:a0:59:68:fa:e2:a5:31:1b:e1:
                    92:0c:b9:d8:c7:5d:4a:ad:d1:94:ec:c1:08:4c:42:
                    b7:fd:94:42:fc:1e:82:91:71:a8:45:cf:92:48:e6:
                    f8:c9:af:cd:49:ce:b0:a4:6e:cd:87:c3:f7:34:56:
                    84:cd:85:dc:df:0d:c1:5c:fd:52:ee:ce:e5:b6:cf:
                    01:a4:4c:c7:da:ae:e9:5b:d5:33:fd:44:2a:69:91:
                    63:97:af:c6:94:a2:ba:1f:5a:93:38:8b:2e:b8:91:
                    32:07:d4:53:95:74:7a:8c:4d:01:8b:90:c9:c0:43:
                    1c:30:5e:c1:c6:8d:04:e1:7c:68:2d:21:d0:ae:a1:
                    74:1e:0b:60:13:91:e4:02:3a:3b:14:79:0f:90:78:
                    94:3b:85:6a:9d:19:c0:21:e5:dd:d4:a1:ce:6e:2f:
                    d8:9b:c1:6c:9a:a2:9b:9b:ab:f3:1a:b3:4c:7a:b7:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:61:32:35:E7:3C:8D:3B:7B:78:B7:55:4F:57:1E:8B:22:98:56:B2
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS43927.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:04:4e:36:c6:67:c1:7a:8b:5b:c5:08:7c:1b:92:94:a5:89:
         49:bc:9f:cd:45:7a:05:b2:bd:42:4a:f0:83:23:59:08:02:d5:
         ea:e4:3e:4a:f2:8f:87:fa:13:37:3a:23:c3:3b:14:4e:60:51:
         68:4d:a3:08:a5:b2:7a:83:03:93:7b:c5:e9:eb:25:46:98:ce:
         4f:82:ee:d1:fa:3b:d0:9b:73:89:41:3f:c9:a6:21:d4:e5:5c:
         e6:48:f1:ad:57:3c:f0:1e:cc:d8:0c:50:65:35:58:a3:54:0a:
         18:ba:4e:56:45:5e:ed:7e:02:f2:e5:ae:31:8d:a2:9b:4b:62:
         e3:9c:85:85:2a:25:85:79:26:aa:16:e6:65:78:a7:9f:79:ea:
         c5:6f:cd:05:b3:59:e2:8f:b4:3a:85:e5:bf:c4:21:c0:54:33:
         af:d0:6d:6b:12:59:1b:7d:55:88:9b:65:ab:c7:a3:da:bd:c2:
         bd:c1:31:77:a8:90:c3:16:00:0a:84:67:c5:04:15:2a:b9:79:
         20:94:ca:f7:0d:66:42:31:39:48:60:b5:b4:13:8b:76:bc:ba:
         c5:0f:a8:9b:d6:de:fe:a0:8d:52:13:7f:ae:45:10:b7:1c:4e:
         96:30:90:9c:c6:69:be:2c:31:21:43:af:78:40:4d:42:24:bf:
         58:6d:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org