Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60458.roa
File:                     AS60458.roa (raw, json)
Hash identifier:          jG85hj2KV9xctS6ZmtO5ulpiBlvX4L+kC6OnaHk3LKY=
Subject key identifier:   9D:2F:97:E5:0A:F8:77:56:94:18:82:5A:9D:C3:25:B1:7D:A9:BE:74
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       304ED000FC6AC230721D12AD1E790F320B5EC602
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60458.roa
Signing time:             Mon 28 Nov 2022 12:18:19 +0000
ROA not before:           Mon 28 Nov 2022 12:13:19 +0000
ROA not after:            Mon 27 Nov 2023 12:18:19 +0000
asID:                     60458
IP address blocks:        191.101.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4e:d0:00:fc:6a:c2:30:72:1d:12:ad:1e:79:0f:32:0b:5e:c6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:19 2022 GMT
            Not After : Nov 27 12:18:19 2023 GMT
        Subject: CN=9D2F97E50AF877569418825A9DC325B17DA9BE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:61:82:9c:17:0d:38:ec:16:77:34:5d:be:
                    9b:91:1e:40:92:ad:8b:ae:4b:fe:30:95:67:e9:38:
                    6d:ab:30:87:e6:9d:ae:2c:e9:ab:bb:75:e5:ae:50:
                    45:05:f4:4d:95:eb:6a:13:b4:f1:44:91:23:05:1e:
                    ac:cc:46:eb:c9:3a:6c:58:a7:99:6c:d4:4c:2d:39:
                    44:f7:29:9a:98:a2:05:b3:4e:74:4a:3c:04:86:9c:
                    73:fc:f0:c9:b5:84:c7:f5:59:bf:56:b1:46:61:26:
                    fa:0f:09:aa:bf:3b:48:83:c6:a8:66:97:b3:05:3f:
                    04:5b:04:74:c9:7c:4b:b1:4f:10:07:7a:ee:c2:04:
                    87:7f:a5:68:4a:8d:c4:5a:b7:7a:6b:b7:59:54:12:
                    38:dd:1b:a8:6b:15:68:9a:f6:62:26:67:a7:61:e0:
                    6d:10:70:a5:cb:43:7d:1d:be:b3:0b:33:18:82:6d:
                    c8:0b:ac:9d:d1:ae:af:2d:c0:7c:62:20:fc:3f:15:
                    ff:d3:5e:b6:cf:8b:1c:7b:81:b4:28:de:df:05:9b:
                    ee:86:ba:44:4a:19:a0:bd:28:65:52:9b:92:7b:85:
                    ae:dd:07:7b:3f:85:81:0d:eb:00:70:b7:0b:80:0f:
                    de:ee:b1:23:23:37:a6:f9:cd:6d:d1:de:61:65:61:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2F:97:E5:0A:F8:77:56:94:18:82:5A:9D:C3:25:B1:7D:A9:BE:74
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS60458.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1c:df:80:8b:dd:9c:47:28:bd:94:f3:cf:5b:a8:62:3a:e4:
         b0:56:8f:08:41:5b:75:44:77:9a:88:46:a6:90:3f:f4:b3:41:
         aa:17:d0:6e:2c:9f:40:67:72:bd:37:eb:7c:de:a1:46:f0:97:
         5b:fd:44:18:ba:a4:c1:c4:24:b0:1b:e5:6c:94:66:42:0c:16:
         16:ba:0c:b7:39:b5:27:e0:44:76:4b:46:87:f4:0e:19:07:9e:
         3c:c7:82:8c:60:63:60:88:9a:5a:39:cc:0c:0b:1a:fb:66:ca:
         d1:af:83:8a:5e:72:e8:12:3f:22:53:f3:fd:81:5d:6f:31:70:
         28:69:bf:19:0a:07:fa:d6:e6:06:80:e1:4d:72:77:98:62:84:
         94:3a:c5:4e:2a:de:ce:ed:a3:f5:3f:fb:2b:0c:4b:51:41:4e:
         37:64:d0:c9:1b:88:24:36:c7:0d:d4:3f:12:2c:1f:63:6d:58:
         89:b0:65:50:76:7e:01:43:4f:a0:a2:8e:62:16:f1:46:56:0b:
         b1:fc:f1:4d:83:4d:b1:58:ff:6b:8c:fa:d5:a8:4f:d4:57:4c:
         dc:8f:28:1b:6c:41:04:4f:ec:4d:41:5e:10:4d:89:72:28:c9:
         ff:be:ec:23:54:53:67:16:70:71:00:ae:7b:8f:21:a8:55:c1:
         e1:e8:92:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org