Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS53340.roa
File:                     AS53340.roa (raw, json)
Hash identifier:          VxFO5fuyrpH5n2BdhsLMecEnsHA2w+lHehic6xMMtiA=
Subject key identifier:   F6:A0:49:36:CD:84:6F:65:FF:76:DE:38:61:C4:C7:85:69:A2:F8:C6
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       5FB6389182D0EFE3029863569EED0B7DA497FDE5
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS53340.roa
Signing time:             Wed 04 Jan 2023 10:16:27 +0000
ROA not before:           Wed 04 Jan 2023 10:11:27 +0000
ROA not after:            Wed 03 Jan 2024 10:16:27 +0000
asID:                     53340
IP address blocks:        45.89.254.0/24 maxlen: 24
                          181.214.47.0/24 maxlen: 24
                          181.214.81.0/24 maxlen: 24
                          181.214.87.0/24 maxlen: 24
                          181.215.249.0/24 maxlen: 24
                          191.96.178.0/24 maxlen: 24
                          191.96.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b6:38:91:82:d0:ef:e3:02:98:63:56:9e:ed:0b:7d:a4:97:fd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Jan  4 10:11:27 2023 GMT
            Not After : Jan  3 10:16:27 2024 GMT
        Subject: CN=F6A04936CD846F65FF76DE3861C4C78569A2F8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:3a:9f:df:df:6b:ca:78:06:b7:2e:67:fb:
                    9b:5c:9b:19:31:93:7b:7f:ef:2b:90:e6:c2:35:f2:
                    cf:68:45:34:34:82:50:5a:1d:cc:db:c1:7d:05:03:
                    a6:e9:f0:cf:b8:f1:ff:7b:e1:e7:f6:18:57:d1:5a:
                    12:94:b3:b6:75:15:70:d7:52:3f:d1:58:15:62:eb:
                    2a:e5:9f:df:2c:46:e8:a4:97:f3:e1:00:f8:39:2e:
                    bf:ee:8b:92:d7:cf:57:1f:a7:cb:b0:8b:2f:96:05:
                    6d:9a:f4:b4:b7:45:74:92:e8:32:57:47:a4:ae:b1:
                    89:65:12:c4:cb:4c:de:33:83:c7:fd:1d:c0:fb:79:
                    35:be:8d:a7:08:9a:e8:d4:09:f2:25:46:32:af:f1:
                    99:f4:47:df:46:4e:78:0b:bc:18:0d:30:2f:aa:f7:
                    55:00:04:29:32:48:fd:f1:5f:27:b1:46:5d:84:e0:
                    4d:22:e4:f4:72:6a:14:ac:90:99:75:f9:48:b9:72:
                    62:0d:93:62:6c:84:6e:18:6d:6a:1c:c6:ef:7c:2b:
                    83:93:8f:d9:e0:d0:5f:cb:b4:2b:d2:5e:31:1e:bb:
                    9f:53:10:5d:92:3c:91:7a:22:2f:db:51:56:8c:f6:
                    15:c2:8e:b0:c5:51:8f:12:84:83:1e:62:9c:9e:13:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A0:49:36:CD:84:6F:65:FF:76:DE:38:61:C4:C7:85:69:A2:F8:C6
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS53340.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.254.0/24
                  181.214.47.0/24
                  181.214.81.0/24
                  181.214.87.0/24
                  181.215.249.0/24
                  191.96.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:21:3b:c8:0e:2e:39:3c:e8:4b:f5:22:04:bd:7c:f9:80:15:
         49:7d:b6:25:d0:13:b9:f4:92:19:83:a4:f3:33:29:14:4b:dc:
         19:44:9b:fc:a1:3a:7c:1f:fb:39:ac:ff:2a:4a:ad:fc:ca:d9:
         9c:ad:c1:49:e5:08:fc:25:4f:f8:8b:30:33:94:3f:48:6d:25:
         d8:03:1a:bf:dd:84:3e:eb:22:b2:8f:56:d4:61:61:d5:3f:e9:
         e0:ce:bc:2e:01:fd:af:ba:fc:be:59:54:03:97:2e:bb:c4:2a:
         95:79:cb:4c:b6:e8:a4:e5:d9:4a:9f:bb:3a:6d:8a:f8:ec:3c:
         29:f7:95:ad:40:db:e0:f6:c3:0e:e0:f8:d6:a7:3e:25:e1:ad:
         2c:5e:ad:76:db:2a:c4:e3:76:62:9b:f7:97:14:44:a5:4e:4c:
         2c:b6:17:9d:19:5d:44:9c:91:0a:92:f6:7c:f5:8f:77:e0:91:
         f7:6d:bd:16:91:e8:a1:b4:21:1f:76:50:18:16:84:e6:3a:44:
         da:d2:0b:05:c1:10:f4:a7:b7:e0:58:15:d0:89:ea:d1:e1:e3:
         9c:51:72:13:5d:48:10:15:d9:b1:07:89:5a:7c:d8:86:79:73:
         ca:d7:c3:53:9c:db:71:d7:59:42:13:db:73:a1:67:4d:a9:75:
         dd:77:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org