Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS51043.roa
File:                     AS51043.roa (raw, json)
Hash identifier:          xpnUe7Af7JsxHjR6bqXghp9sYWd0o9I640qSxoyFxK0=
Subject key identifier:   0C:0C:31:F6:38:E1:EC:68:57:44:57:F4:79:DD:D5:C2:2B:E2:C0:A0
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       6FA6EBA10C487D67E454C185EAC2DE5196B6D588
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS51043.roa
Signing time:             Mon 28 Nov 2022 12:18:26 +0000
ROA not before:           Mon 28 Nov 2022 12:13:26 +0000
ROA not after:            Mon 27 Nov 2023 12:18:26 +0000
asID:                     51043
IP address blocks:        45.88.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a6:eb:a1:0c:48:7d:67:e4:54:c1:85:ea:c2:de:51:96:b6:d5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:26 2022 GMT
            Not After : Nov 27 12:18:26 2023 GMT
        Subject: CN=0C0C31F638E1EC68574457F479DDD5C22BE2C0A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fc:77:fc:88:99:f9:cc:41:c8:70:73:8c:f0:
                    16:71:73:4e:7b:d5:9c:a9:d1:79:c9:ee:72:e5:b6:
                    bf:c3:7f:9a:03:84:b4:50:2b:b5:fb:6d:53:44:45:
                    bf:20:47:d3:5b:82:13:be:ca:63:e9:74:95:a6:1e:
                    83:6f:26:01:b4:8e:95:e1:3b:da:a3:72:27:bf:22:
                    03:d2:5e:15:29:c5:16:94:18:60:31:66:c0:1a:02:
                    d9:2c:90:b8:15:71:46:bd:5d:98:04:84:bf:dd:f6:
                    a8:e7:a0:ab:f5:97:0f:d0:a5:fd:1f:33:28:6b:6d:
                    4f:6a:bd:ff:8c:7b:76:7d:15:0e:59:43:69:22:fb:
                    b3:9a:85:25:02:82:c8:58:cf:98:ba:73:a6:fb:e8:
                    88:6e:0e:d5:c8:4f:d6:d0:df:e4:ba:00:1f:e5:2f:
                    31:a4:8b:53:cd:81:85:39:dd:db:01:2f:5c:74:22:
                    e4:1e:b2:dc:6d:c4:8e:94:e1:c9:13:ad:c1:77:83:
                    f0:b2:e6:23:8c:e8:1b:19:b0:2e:b1:d2:28:ce:1c:
                    c8:e6:bf:b0:57:51:aa:f3:75:78:46:01:d9:82:fd:
                    36:b0:12:1a:a9:de:7c:24:16:1b:ce:6f:5c:f8:52:
                    0e:b1:cd:96:7a:7d:5b:25:bd:f0:00:39:45:22:54:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0C:31:F6:38:E1:EC:68:57:44:57:F4:79:DD:D5:C2:2B:E2:C0:A0
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS51043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d3:e4:64:cc:ba:34:4c:4d:9d:2a:8c:b8:88:33:2e:6f:57:
         f2:6d:57:17:81:52:7a:a3:a9:d6:44:85:22:08:62:72:85:36:
         fb:b5:28:57:37:22:97:51:01:d5:50:01:5b:c5:0e:ce:1c:c4:
         40:11:e8:63:5f:e8:fe:32:06:38:1b:5b:ff:0f:18:1d:66:ee:
         68:39:90:0b:12:93:af:ec:35:6a:79:e6:99:13:ae:eb:3d:72:
         3e:a2:7f:69:18:97:79:d5:8a:8b:d6:5e:05:02:de:2c:40:9f:
         6a:5d:11:9a:75:ca:8d:f2:dc:d5:85:ed:77:82:ac:a2:19:f2:
         b6:98:63:fb:85:87:57:72:7c:8d:6a:eb:a6:04:f4:9d:be:8c:
         53:f6:b3:b1:65:5e:81:50:42:5e:18:51:a9:cd:da:17:1f:2b:
         80:d9:42:3e:23:ff:eb:d9:11:f8:80:1b:35:6b:91:cd:9e:34:
         30:28:fe:39:82:8f:68:16:78:c9:06:04:84:1a:1c:e5:1a:d9:
         3b:93:6d:7a:0a:ba:60:ee:3d:8c:bb:62:f1:a5:da:fa:eb:e2:
         2c:48:30:1e:23:6d:f1:f3:eb:af:f1:7f:c1:6e:29:db:b9:12:
         b6:8b:55:c7:3d:4c:60:05:b0:7e:9e:1d:fd:a5:4e:fe:bb:f9:
         99:31:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org