Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS50225.roa
File:                     AS50225.roa (raw, json)
Hash identifier:          k0llkH7dAT+V7eiliokuVt1Tb3Y8/eKs3y92paEFu90=
Subject key identifier:   AE:15:D2:FE:FD:5F:96:2F:2E:F0:24:C7:CD:89:B0:5E:52:37:73:A0
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       01AF153C2140A9C618ADB02688939C2D2DC6318B
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS50225.roa
Signing time:             Fri 03 Feb 2023 23:03:45 +0000
ROA not before:           Fri 03 Feb 2023 22:58:45 +0000
ROA not after:            Fri 02 Feb 2024 23:03:45 +0000
asID:                     50225
IP address blocks:        181.214.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:af:15:3c:21:40:a9:c6:18:ad:b0:26:88:93:9c:2d:2d:c6:31:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  3 22:58:45 2023 GMT
            Not After : Feb  2 23:03:45 2024 GMT
        Subject: CN=AE15D2FEFD5F962F2EF024C7CD89B05E523773A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:8a:a1:3c:1d:fa:7f:02:ae:d1:92:14:b0:
                    1f:ce:53:b8:94:24:a1:e7:8b:59:c7:94:0c:ca:09:
                    09:80:a3:b7:7b:ff:b0:36:78:00:29:9d:11:c6:6f:
                    15:fc:fc:69:48:f3:67:4d:fd:ed:13:ff:d4:6f:fa:
                    12:d7:0d:a1:25:07:ba:d1:53:65:50:47:b6:90:f2:
                    65:03:50:b5:8c:bb:db:0b:63:84:60:c9:65:e7:dc:
                    60:27:79:14:01:97:36:b4:bc:91:e8:c0:40:8b:22:
                    aa:bb:3d:4b:fd:14:7e:7a:be:7a:1e:cc:ab:c4:27:
                    8a:30:09:0a:01:70:bb:4b:7d:29:fd:de:be:aa:f6:
                    81:e1:06:83:eb:6d:c0:73:2c:5e:77:81:56:a8:7c:
                    9d:34:77:03:b1:ed:6e:5f:c9:11:47:fd:a7:c2:be:
                    e3:f8:8c:6d:8c:36:b5:59:5e:4a:0e:ab:62:63:d0:
                    ad:cd:43:1f:fd:cc:56:68:d2:2c:28:14:d2:0c:f0:
                    80:8d:73:8b:52:60:fc:21:ae:1c:71:9f:cc:34:63:
                    06:c3:56:47:1c:23:81:69:4a:46:e9:8d:0f:c5:99:
                    e8:da:42:e9:43:eb:0a:cc:14:78:c1:3d:53:29:ba:
                    03:12:de:fa:e8:a6:d0:ff:c5:24:19:ff:81:02:33:
                    46:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:15:D2:FE:FD:5F:96:2F:2E:F0:24:C7:CD:89:B0:5E:52:37:73:A0
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS50225.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:6f:c1:4e:93:16:0d:19:1b:76:e5:98:85:eb:cb:ba:02:cd:
         34:b1:f1:c4:cf:79:63:4b:50:87:fa:40:c5:a5:54:96:19:eb:
         e6:81:9e:db:f2:ce:b8:f2:b1:e8:81:f6:0d:e0:0f:ac:77:54:
         c1:16:1e:df:20:92:f1:4a:fa:68:73:f1:a8:e5:0c:31:c3:e8:
         27:22:bf:8e:cd:b6:6f:80:c0:c4:b9:d8:b2:59:7d:c1:21:e7:
         29:36:35:92:48:89:f6:fe:f7:8b:48:0b:8a:a3:f0:94:c2:ec:
         c5:4b:12:a1:db:88:18:2f:64:5d:42:38:30:31:23:e0:af:7a:
         a2:9f:9c:a6:22:cd:37:ce:06:3d:52:9b:33:c7:da:43:1a:ec:
         43:0a:96:d2:fc:6a:52:06:ab:19:30:e5:1f:bb:c8:f8:ae:dd:
         31:6f:a7:e8:a4:84:ec:27:e5:a9:eb:f1:7c:9e:ec:dc:2f:57:
         67:13:fc:38:81:14:8e:d2:bf:72:31:d0:b2:09:0d:bb:cc:3b:
         b0:0e:7c:a7:18:34:5e:29:c8:22:8c:34:80:5f:b9:69:01:1a:
         04:08:37:1f:47:6d:28:e6:4f:f0:2c:4e:e8:00:00:48:e1:30:
         96:7a:73:b8:99:4c:89:d5:20:77:2b:7b:95:79:ee:03:95:08:
         68:3c:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org