Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS55720.roa
File:                     AS55720.roa (raw, json)
Hash identifier:          Z8ehCdOgAdeJ2VLmXFIZkutOu0sgJj9ux8m7CEVkEbU=
Subject key identifier:   50:D3:90:1C:5D:EE:42:1C:13:5F:81:F5:D9:89:8C:2A:10:40:66:AD
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       6881F708A0D6EE53714C45637D3B670FA83AAC72
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS55720.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     55720
IP address blocks:        5.181.132.0/24 maxlen: 24
                          181.215.14.0/24 maxlen: 24
                          181.215.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:81:f7:08:a0:d6:ee:53:71:4c:45:63:7d:3b:67:0f:a8:3a:ac:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=50D3901C5DEE421C135F81F5D9898C2A104066AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:9d:24:ec:18:8f:c4:cb:67:31:bf:b0:56:
                    d9:dd:4b:12:78:72:fe:95:3a:70:3d:20:5e:21:83:
                    1d:da:2e:bb:11:96:2e:24:9d:53:10:7d:44:1c:e5:
                    ee:72:7c:3d:e0:0e:cc:d0:68:a2:18:80:af:37:91:
                    ce:59:6d:71:2c:a5:65:a7:a3:86:db:2b:62:97:60:
                    92:2b:ca:11:c6:4e:bb:f0:cb:8e:de:f3:4f:6f:b9:
                    04:db:95:f8:7b:9c:e8:b1:4a:f9:17:8b:f6:79:21:
                    5d:ab:b1:8f:8f:c9:76:85:00:f2:da:21:5b:2c:28:
                    a8:0f:ac:56:78:8d:5d:f6:2f:5a:28:6f:4f:fc:af:
                    f5:be:be:25:dd:de:50:45:a9:d2:55:31:b4:f7:b7:
                    d3:70:78:9f:36:cb:40:c5:37:c0:8d:54:ee:65:70:
                    c1:ef:34:df:b4:e3:14:6c:c0:68:08:0f:6a:16:27:
                    1a:3f:30:13:1e:51:c5:24:5d:bc:2b:a9:7c:55:4f:
                    85:74:b5:1b:e1:4d:e1:38:fe:dc:38:af:97:2a:26:
                    45:c8:92:0e:2a:fb:b0:70:0c:82:a8:9a:d6:aa:3b:
                    b1:f0:0c:08:73:09:bb:d5:63:0c:e7:9a:2f:15:83:
                    5a:18:60:c8:80:12:0d:8d:13:ac:25:b7:5b:db:1e:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:90:1C:5D:EE:42:1C:13:5F:81:F5:D9:89:8C:2A:10:40:66:AD
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS55720.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.132.0/24
                  181.215.14.0/24
                  181.215.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:98:a7:82:89:53:b8:af:6a:cb:27:92:d9:ce:22:a4:ea:56:
         61:05:f2:2c:94:62:5c:14:43:a6:be:89:55:ee:df:38:55:3f:
         e9:d1:b8:66:ca:34:5c:0f:71:05:75:b0:1d:60:cd:c0:42:ef:
         17:26:a7:f3:0f:05:db:77:bb:8a:70:76:eb:ad:a6:03:91:ea:
         a1:5b:88:60:ed:91:56:a6:da:41:79:84:eb:dd:95:3c:12:5a:
         d8:4d:a9:5e:13:6d:40:e6:98:c1:90:6c:0a:30:43:52:94:01:
         ab:94:be:e6:3c:31:b8:f7:01:62:43:94:40:68:4d:9b:d0:7b:
         27:7c:a0:1a:58:cd:3c:c8:f3:2c:3c:76:41:eb:f2:37:11:92:
         16:d4:6c:5f:e6:8c:53:7e:3b:4c:b0:6e:13:56:ef:50:f8:f7:
         6e:0b:a0:85:d1:1d:ce:77:9c:c9:54:cc:5d:de:2c:af:4e:ac:
         28:ea:8b:ac:68:80:d3:c4:19:ef:1a:b3:46:b0:5a:e2:15:20:
         95:60:0d:8f:b5:3f:5f:7e:46:f9:41:24:36:65:3f:fe:46:f5:
         e9:28:8e:05:b4:41:c3:e1:c3:80:56:e2:30:56:ad:4a:55:a1:
         82:f2:bd:e1:1f:3a:23:d0:1e:4c:0b:3a:6f:96:2c:ba:7a:91:
         03:d7:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org