Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS57935.roa
File:                     AS57935.roa (raw, json)
Hash identifier:          GiwdUjelbBTsEYPSXZ2NRD2NQ2/LPjRPO58Rdrh1BTI=
Subject key identifier:   87:11:19:AB:9D:58:35:82:09:59:C1:67:16:43:21:DB:F2:82:86:F5
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       47A25EDAC81E313B431731F352C052AC0DEA3CA2
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS57935.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     57935
IP address blocks:        185.137.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a2:5e:da:c8:1e:31:3b:43:17:31:f3:52:c0:52:ac:0d:ea:3c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=871119AB9D5835820959C167164321DBF28286F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:c5:8b:5e:8a:41:93:b3:61:39:85:e6:fa:
                    56:bf:40:ff:e5:a3:f9:1f:b2:61:4d:1b:11:8d:25:
                    6e:98:0e:01:d8:64:d1:3f:6c:58:09:81:f1:55:e4:
                    4e:2a:c1:67:55:b5:2f:a7:ec:53:e4:69:a2:e7:07:
                    14:ab:2b:76:66:53:b8:a4:03:74:6d:bb:11:67:f8:
                    5d:b3:48:04:ad:62:93:c2:eb:77:ac:4e:dd:e1:94:
                    3d:b5:d5:cd:68:25:84:de:1c:70:9d:c6:ae:76:73:
                    f0:81:26:ac:f9:f1:6c:0f:c6:b7:f7:8f:e8:33:a1:
                    e7:61:be:b1:f8:59:cc:48:f5:56:28:53:13:a5:eb:
                    50:cb:1c:a0:78:f9:3c:55:fa:ae:a5:10:55:92:a6:
                    37:bc:e6:ca:29:ce:a7:5c:89:84:c7:a2:d4:1a:88:
                    5b:de:f8:79:4b:3a:ae:6d:b5:09:43:73:16:83:db:
                    fd:9e:2c:8d:3f:e3:2b:fa:38:1d:b0:43:e4:dc:3f:
                    90:dc:bc:11:be:2e:03:c4:70:a7:f5:2c:e9:7e:43:
                    a2:0c:f5:29:96:eb:66:36:61:14:a7:da:d4:cc:1a:
                    d7:7c:85:53:4c:48:21:17:f0:53:bc:46:82:c2:35:
                    a8:9a:6f:39:46:e3:5c:4e:da:1c:e6:a1:1d:34:93:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:11:19:AB:9D:58:35:82:09:59:C1:67:16:43:21:DB:F2:82:86:F5
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS57935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:0f:c1:79:a4:9d:66:73:fc:4c:eb:9e:64:98:3a:73:ee:da:
         87:12:fd:91:dc:37:3c:2e:8e:60:11:ae:3e:04:e1:bc:2e:a6:
         77:1b:50:79:1c:07:87:3d:db:aa:24:a6:23:a2:50:7f:aa:4b:
         26:c3:dc:eb:99:2f:77:8a:45:df:4f:b9:2e:39:c6:bb:a0:58:
         d6:7e:22:9a:00:c1:17:27:0b:f3:fa:4a:e8:98:93:8a:b1:b0:
         f2:30:dc:65:0e:2b:76:fc:ab:5e:48:3b:e3:29:69:dd:5d:df:
         85:a6:44:52:0f:fd:7c:2d:90:64:5e:60:ea:21:77:2c:12:66:
         49:f2:a5:f0:cb:67:63:ac:00:21:62:38:7c:7f:e6:c3:2f:fd:
         ad:d8:b6:75:7e:7e:48:ba:4b:06:d1:20:89:42:5e:73:39:2d:
         72:3d:ab:fa:ef:a4:b8:68:ab:4d:0c:ac:0a:0a:90:10:d6:c2:
         46:2d:e1:02:c2:12:bf:35:e5:fc:61:55:9d:40:8a:2f:4d:1f:
         5a:de:0d:56:ee:10:f2:b8:85:6a:fb:80:6c:ed:f9:3b:d8:aa:
         b4:e8:d8:08:12:d7:a3:e9:cc:8a:81:b3:62:13:ac:f3:ed:a9:
         38:c5:7e:32:fc:65:7e:2d:97:57:86:0b:7c:3d:14:57:30:bf:
         94:f3:e2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org