Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46562.roa
File:                     AS46562.roa (raw, json)
Hash identifier:          H7LFialqemkafYlB6HQihVVsXfhFsZAOFrznhqWVpoo=
Subject key identifier:   C1:3C:D7:C6:03:73:54:E3:67:BF:27:2F:55:03:D1:40:10:BE:93:82
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       17359C20B5B594CF0B6FAAEAF65894023CE91A29
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46562.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     46562
IP address blocks:        45.95.37.0/24 maxlen: 24
                          179.61.206.0/24 maxlen: 24
                          179.61.216.0/24 maxlen: 24
                          181.214.5.0/24 maxlen: 24
                          181.214.45.0/24 maxlen: 24
                          181.214.122.0/24 maxlen: 24
                          181.214.195.0/24 maxlen: 24
                          181.214.247.0/24 maxlen: 24
                          191.96.37.0/24 maxlen: 24
                          191.96.103.0/24 maxlen: 24
                          191.96.215.0/24 maxlen: 24
                          191.96.236.0/24 maxlen: 24
                          191.96.237.0/24 maxlen: 24
                          191.96.238.0/24 maxlen: 24
                          191.101.237.0/24 maxlen: 24
                          193.227.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:35:9c:20:b5:b5:94:cf:0b:6f:aa:ea:f6:58:94:02:3c:e9:1a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=C13CD7C6037354E367BF272F5503D14010BE9382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:50:a2:8c:4c:a0:ce:f4:a5:6d:f4:93:ef:
                    cc:69:6a:61:fe:35:eb:ec:99:a8:1b:3b:f5:a0:fb:
                    ae:68:c5:b3:d7:0a:36:3f:2c:aa:d2:58:d1:d4:83:
                    19:b7:59:40:b7:7b:bb:f0:34:52:34:c7:ce:41:60:
                    89:b6:a8:0e:0a:53:f8:e9:9e:44:f1:0f:f6:64:8a:
                    84:a0:fb:f9:56:9a:d9:90:49:0f:f8:29:79:ff:6b:
                    f0:ac:c5:3f:a9:eb:37:28:ca:10:58:18:b6:34:f7:
                    1d:21:f9:8e:e7:98:7e:a8:2c:ba:32:f9:d2:8e:e6:
                    11:5b:3d:07:87:05:b0:9a:7b:ef:96:73:cb:65:91:
                    7d:0f:1b:3a:7f:49:79:67:f5:f7:43:54:4e:f0:82:
                    f4:5a:ce:5d:cf:0e:25:b5:01:4d:56:e6:c5:cd:a4:
                    6c:e5:f7:30:8b:e2:55:05:66:9e:0c:43:e9:ea:9d:
                    52:08:08:4c:b4:29:d6:e8:3f:f1:53:3f:86:60:72:
                    1a:af:17:fb:c0:c6:31:16:81:f7:5b:69:fe:62:9a:
                    32:6a:40:66:96:f7:29:00:4d:f2:6f:44:97:f4:18:
                    f6:53:d2:41:ff:c6:66:fe:2c:6f:e3:2b:fc:82:65:
                    98:f4:eb:ed:7a:e5:5d:f8:1f:b1:80:ef:73:cd:a3:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3C:D7:C6:03:73:54:E3:67:BF:27:2F:55:03:D1:40:10:BE:93:82
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS46562.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.37.0/24
                  179.61.206.0/24
                  179.61.216.0/24
                  181.214.5.0/24
                  181.214.45.0/24
                  181.214.122.0/24
                  181.214.195.0/24
                  181.214.247.0/24
                  191.96.37.0/24
                  191.96.103.0/24
                  191.96.215.0/24
                  191.96.236.0-191.96.238.255
                  191.101.237.0/24
                  193.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:46:26:3c:7b:d0:50:a4:94:7f:70:48:c5:4f:95:92:13:7b:
         49:96:80:ab:99:00:a5:d6:54:23:16:7b:95:c2:53:96:e7:0e:
         fa:2b:b1:6e:26:26:df:fc:7d:0b:fb:39:93:41:40:9e:06:63:
         5d:02:41:21:c5:8e:6d:25:36:dd:9c:f1:f8:6d:e4:b6:a1:1e:
         65:38:a4:17:d2:5c:e6:57:ac:be:20:e7:06:b1:3a:17:c6:1c:
         bc:e9:be:59:60:20:7b:84:54:03:e8:38:94:5f:17:a1:48:f3:
         fa:ea:d0:74:f1:31:9d:64:b8:66:ca:72:0f:ce:2f:d5:b4:eb:
         45:24:a6:6c:87:3d:2c:4c:d3:33:24:6a:29:10:d3:ad:20:47:
         dd:d1:ad:31:a4:59:84:4d:9c:77:56:3b:86:e2:71:0d:89:19:
         99:a3:0f:06:bc:ab:b7:f7:01:be:90:5c:cf:b3:b0:fc:e6:08:
         e6:69:62:55:58:6c:39:cc:00:bd:69:7a:fe:9e:4e:07:2c:b6:
         49:59:ab:02:2e:75:64:3f:0d:73:60:96:0f:f1:a5:40:ad:89:
         4a:0a:dd:ec:65:71:92:44:4c:43:2f:1e:f6:da:77:ce:66:f3:
         53:98:79:5f:9d:d1:c1:0a:f7:67:7d:4b:9c:32:3f:30:f5:65:
         bf:c4:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org