Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS48025.roa
File:                     AS48025.roa (raw, json)
Hash identifier:          gg+ZpoYyLCDT55Rg0QqxB4Cvs7wljz8GcVcODUUmP+8=
Subject key identifier:   E0:0A:BE:9B:34:92:50:A3:01:F1:C1:CB:3B:8F:67:1A:C6:47:94:85
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       3F99886E1985461C1AB95A49DC7EC0FC0B17C36D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS48025.roa
Signing time:             Mon 28 Nov 2022 12:18:21 +0000
ROA not before:           Mon 28 Nov 2022 12:13:21 +0000
ROA not after:            Mon 27 Nov 2023 12:18:21 +0000
asID:                     48025
IP address blocks:        45.88.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:88:6e:19:85:46:1c:1a:b9:5a:49:dc:7e:c0:fc:0b:17:c3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:21 2022 GMT
            Not After : Nov 27 12:18:21 2023 GMT
        Subject: CN=E00ABE9B349250A301F1C1CB3B8F671AC6479485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:9f:cd:f4:63:97:2f:52:74:b8:b8:8b:06:
                    ae:f9:73:0b:79:8d:d9:a6:75:40:5b:8f:41:2a:31:
                    b4:be:21:ae:df:5b:c7:ae:02:28:18:8b:5b:72:2d:
                    b7:61:f7:89:19:b9:c5:61:82:18:b5:4a:85:1a:8a:
                    27:4b:3d:9d:66:7b:0f:83:e8:6f:c2:63:48:08:ca:
                    d4:f9:fb:15:04:1d:03:5b:9d:e7:20:78:12:95:9b:
                    8d:62:29:8b:81:2e:84:02:1e:b6:58:e3:9c:2c:4d:
                    ff:ab:17:b7:95:eb:22:bc:63:03:d3:98:fb:29:54:
                    e1:e6:9b:bb:c6:c6:71:76:cb:ce:66:02:03:a3:6d:
                    6e:3e:8b:88:6d:1b:95:fc:46:b2:df:b4:15:89:13:
                    b9:22:fe:48:55:42:61:db:35:6d:2a:79:8a:16:5c:
                    11:2b:4b:d2:aa:81:6c:60:02:b8:b1:fa:c6:b7:6a:
                    ce:4f:63:a0:5f:fe:07:8c:0c:8f:bf:7f:6b:5d:c5:
                    01:4b:63:48:8a:e6:be:b3:ab:45:c8:2d:fe:ce:a5:
                    48:4a:d5:52:11:88:5e:8f:f2:f0:0f:96:96:8d:bb:
                    1a:6f:b1:44:f9:75:77:18:fb:6c:88:f9:7d:3b:7b:
                    14:d6:68:f0:ac:d4:11:df:af:c1:eb:d2:92:50:34:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0A:BE:9B:34:92:50:A3:01:F1:C1:CB:3B:8F:67:1A:C6:47:94:85
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS48025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:89:42:6e:bd:26:2a:95:27:8c:03:ab:4e:52:a2:92:b3:23:
         68:7d:b6:9c:c4:50:fd:e2:82:6d:59:ad:d3:39:27:c4:19:1c:
         7a:40:57:65:43:c8:df:52:a2:c5:de:19:95:23:75:b9:38:df:
         de:69:39:41:fc:cc:9f:5f:f4:bc:b6:a6:ea:58:5f:1b:a5:2d:
         3d:a6:40:4b:39:36:02:e8:8f:0f:a1:7d:e9:07:cd:ff:52:c9:
         a8:92:e7:47:0b:fe:42:12:8d:ea:af:0c:a5:5e:bc:e8:13:ce:
         72:3a:ab:8c:3f:db:09:7b:a9:5c:85:74:0f:e7:57:13:bc:61:
         ed:a4:54:67:8b:22:07:41:5d:0d:3a:96:f2:a4:cf:2d:dd:b7:
         c2:90:3d:0e:61:f4:35:d2:1a:4e:96:38:c3:f4:61:21:ea:15:
         1d:92:8d:b3:a9:69:eb:25:48:31:f5:d1:59:55:1e:5a:9f:06:
         6b:45:9a:7c:b6:f3:ac:81:95:2d:e8:41:95:86:e1:ed:c7:2f:
         75:4d:3b:ac:10:35:1a:7e:ff:85:0a:c9:66:41:1c:98:7f:59:
         9d:26:53:59:98:68:d9:e0:57:91:b1:b8:20:6a:fc:bf:dc:0f:
         ba:69:e4:8b:46:ad:2f:92:b2:88:ff:39:9a:b1:5d:4f:06:1c:
         35:e2:ac:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org