Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS54252.roa
File:                     AS54252.roa (raw, json)
Hash identifier:          Uri1lyPuxc9fjV2HLsn6KKh9Wvdi7eDdiP26ePcjeT4=
Subject key identifier:   05:3F:6D:8D:3B:EB:89:74:93:19:A3:0D:84:EE:EC:DF:13:48:DB:95
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       784096B5CA05C38109E4B36C2FFBFD98D941A34D
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS54252.roa
Signing time:             Mon 28 Nov 2022 12:18:25 +0000
ROA not before:           Mon 28 Nov 2022 12:13:25 +0000
ROA not after:            Mon 27 Nov 2023 12:18:25 +0000
asID:                     54252
IP address blocks:        181.214.105.0/24 maxlen: 24
                          181.214.220.0/24 maxlen: 24
                          181.214.232.0/24 maxlen: 24
                          181.214.250.0/24 maxlen: 24
                          181.215.35.0/24 maxlen: 24
                          181.215.73.0/24 maxlen: 24
                          181.215.174.0/24 maxlen: 24
                          181.215.190.0/24 maxlen: 24
                          181.215.208.0/24 maxlen: 24
                          181.215.219.0/24 maxlen: 24
                          191.96.29.0/24 maxlen: 24
                          191.96.84.0/24 maxlen: 24
                          191.96.85.0/24 maxlen: 24
                          191.96.86.0/24 maxlen: 24
                          191.96.87.0/24 maxlen: 24
                          191.96.157.0/24 maxlen: 24
                          191.101.17.0/24 maxlen: 24
                          191.101.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:96:b5:ca:05:c3:81:09:e4:b3:6c:2f:fb:fd:98:d9:41:a3:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:25 2022 GMT
            Not After : Nov 27 12:18:25 2023 GMT
        Subject: CN=053F6D8D3BEB89749319A30D84EEECDF1348DB95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0e:b8:e6:f5:23:18:c3:43:5e:c7:7e:5a:65:
                    5e:32:35:79:ef:fe:7b:4f:ea:c8:ef:4b:6e:48:50:
                    77:fc:4f:4d:a4:0c:56:bf:87:c1:82:9a:91:86:78:
                    e4:c6:e2:c0:2e:8e:cc:21:71:70:17:e4:15:bb:9c:
                    80:0c:ff:29:1f:b4:9d:a1:43:49:be:0a:4c:a3:3a:
                    f0:0e:6b:a9:80:57:83:d5:4c:ec:ac:77:86:05:0f:
                    f8:85:70:4b:7d:67:13:64:1b:97:4e:c3:ce:52:65:
                    2a:db:9d:87:93:1a:93:fd:bb:51:d4:ce:e1:47:5d:
                    33:c7:62:da:59:94:72:47:c8:95:33:0e:f1:d7:27:
                    98:9b:93:8f:e4:f0:65:81:48:d1:71:9e:29:b8:db:
                    04:6a:ff:9d:8c:5e:84:86:cf:9e:3b:83:8d:4f:c0:
                    6a:5e:3d:02:90:ea:27:02:96:92:60:cf:df:5e:b4:
                    2a:d9:41:a0:ac:5f:29:b0:6e:f1:f5:df:38:40:31:
                    10:03:84:bc:58:5d:c2:d7:70:f7:9e:fb:2b:07:ec:
                    cf:ca:33:ad:b0:ae:cc:86:b2:7e:de:92:0e:10:bc:
                    b6:9a:fb:0c:13:dd:eb:2b:82:e7:49:e6:2f:36:b4:
                    91:55:cd:2b:6e:2a:9f:1e:b7:9a:0b:d3:b1:ab:15:
                    16:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3F:6D:8D:3B:EB:89:74:93:19:A3:0D:84:EE:EC:DF:13:48:DB:95
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS54252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.105.0/24
                  181.214.220.0/24
                  181.214.232.0/24
                  181.214.250.0/24
                  181.215.35.0/24
                  181.215.73.0/24
                  181.215.174.0/24
                  181.215.190.0/24
                  181.215.208.0/24
                  181.215.219.0/24
                  191.96.29.0/24
                  191.96.84.0/22
                  191.96.157.0/24
                  191.101.17.0/24
                  191.101.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:1b:59:8d:23:f1:1b:57:7c:04:32:86:d5:86:92:c0:d3:
         af:78:ef:ce:27:f5:ed:ec:b3:a3:6f:8e:16:c8:4b:0e:87:92:
         47:8b:da:1f:60:a6:fc:38:15:ad:c0:0b:76:e6:68:e4:f1:0c:
         a4:43:8b:54:be:61:5b:79:48:17:04:d5:d7:ae:c1:0d:5c:53:
         fe:a1:19:1e:da:5d:d7:1f:fd:df:c4:01:67:15:19:2c:db:4f:
         de:26:29:e9:96:1d:e1:f2:ef:80:b6:e9:c1:af:c6:d3:b4:87:
         6b:3e:29:3b:d7:0a:e8:32:71:a3:e8:d4:84:e0:cb:0d:e2:e7:
         39:0e:cc:af:bf:7f:56:da:af:bc:73:36:13:fc:fe:82:61:42:
         49:0e:49:68:19:98:19:db:16:fe:15:64:d8:28:c6:d0:65:7f:
         be:7b:33:cf:40:cd:99:e5:1f:40:43:20:99:f9:2a:57:c7:eb:
         19:a7:35:43:f3:6e:92:fa:d7:2f:50:e6:c7:c3:6c:9e:5f:5a:
         99:6f:3a:ab:59:40:1a:5b:a9:a9:25:76:1f:92:a7:8a:20:6b:
         5a:8a:f0:dc:ff:d3:9a:4a:a4:4d:db:ae:94:93:52:bb:0e:9c:
         c2:e0:8c:13:0e:70:12:a7:5d:1d:42:83:56:21:bb:f9:21:96:
         41:91:ad:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org