Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS8100.roa
File:                     AS8100.roa (raw, json)
Hash identifier:          aJcv8pcWoMs2L2Gsocu1Y/j8wq3aN1A/SxSbgl4wMnA=
Subject key identifier:   BE:9A:F8:32:40:07:00:CB:3F:8C:AE:6F:E0:51:A5:60:D6:AC:56:00
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       541F2D03302FC3C3E5ECFE5710B0F1AE5640EA44
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS8100.roa
Signing time:             Thu 09 Feb 2023 06:59:03 +0000
ROA not before:           Thu 09 Feb 2023 06:54:03 +0000
ROA not after:            Thu 08 Feb 2024 06:59:03 +0000
asID:                     8100
IP address blocks:        185.137.14.0/24 maxlen: 24
                          191.101.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1f:2d:03:30:2f:c3:c3:e5:ec:fe:57:10:b0:f1:ae:56:40:ea:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Feb  9 06:54:03 2023 GMT
            Not After : Feb  8 06:59:03 2024 GMT
        Subject: CN=BE9AF832400700CB3F8CAE6FE051A560D6AC5600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a0:b1:72:52:8a:5d:f5:21:4c:53:4c:64:86:
                    0d:5e:b7:30:db:9b:b9:b0:bc:5b:2f:bb:4b:77:45:
                    70:73:1e:22:df:cd:53:78:f0:ea:52:ea:a0:83:28:
                    fb:9e:2f:e5:6b:22:72:a6:54:00:c6:0d:4c:a4:94:
                    37:b4:32:49:ed:d4:36:5a:80:7d:5f:73:71:f8:7a:
                    40:c8:c2:99:31:23:96:1b:ae:22:24:7e:6e:59:60:
                    e8:28:f7:d5:f5:3e:5f:b6:26:5b:fd:f5:bd:65:71:
                    c6:4b:f3:e3:b3:85:51:fa:17:d3:eb:82:db:de:cb:
                    26:b9:87:cc:6d:8c:df:d1:eb:0f:0d:33:cd:ff:9c:
                    61:75:8e:ed:ec:e2:1e:75:e2:eb:b1:e3:6b:0b:b0:
                    12:4c:5d:96:cb:16:53:0b:a5:17:37:b5:b7:2d:af:
                    7c:e7:b1:4f:96:5a:38:10:d7:44:20:4e:11:32:05:
                    a3:41:e7:3a:b8:95:26:8f:ca:f3:29:02:6a:da:63:
                    38:ff:d5:fa:c7:36:dc:15:07:da:34:a0:7a:0e:42:
                    96:aa:a0:39:04:38:01:c4:32:d2:91:cc:86:80:67:
                    40:8e:9c:8e:6e:f8:4d:53:8a:14:4e:7a:e7:13:47:
                    37:5d:3c:0f:ac:73:f5:8b:b4:2c:79:18:43:b7:1a:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9A:F8:32:40:07:00:CB:3F:8C:AE:6F:E0:51:A5:60:D6:AC:56:00
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS8100.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.14.0/24
                  191.101.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:48:58:81:cf:93:8c:fd:95:a7:2d:94:c8:18:e0:76:41:94:
         b0:ef:18:32:7c:ea:1c:17:4f:34:bf:36:7e:8b:23:6c:40:c0:
         57:f6:b3:c8:3a:9d:93:40:e2:0e:1f:31:ab:22:4f:b4:70:26:
         45:fb:4e:ee:ef:4d:55:6e:f9:c1:3d:ab:04:ef:89:f3:b5:44:
         37:65:73:5a:86:c1:8a:74:76:a5:83:bc:d3:f2:ac:c1:0a:11:
         80:f1:73:ef:b3:42:99:fa:1b:18:6d:c3:83:24:8a:b8:57:bb:
         a7:83:88:8f:c4:cf:a1:e1:8e:8d:c7:20:e2:69:ff:ce:4d:54:
         03:84:13:08:6a:38:6f:9f:76:8a:ed:f1:55:92:3d:74:a8:3a:
         70:cf:ec:82:c7:fb:cd:2f:24:a2:4b:99:b9:70:00:b4:eb:1d:
         6b:17:21:62:8f:04:84:c8:f0:0a:26:bd:2f:ba:a9:be:b9:54:
         9d:8f:20:b5:4b:47:30:16:e0:11:21:8a:04:35:02:82:0f:5e:
         2e:04:dd:72:e5:71:04:1a:e9:31:cf:d9:65:d8:c7:73:8c:14:
         de:b8:78:3c:c1:4e:72:74:a0:71:4f:16:38:88:01:9c:f6:3f:
         62:a4:b1:31:25:5d:2d:99:08:6d:c2:f9:ac:5c:96:67:f0:e4:
         54:7d:af:61
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUVB8tAzAvw8Pl7P5XELDxrlZA6kQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMzAyMDkwNjU0MDNaFw0yNDAyMDgwNjU5MDNaMDMxMTAvBgNV
BAMTKEJFOUFGODMyNDAwNzAwQ0IzRjhDQUU2RkUwNTFBNTYwRDZBQzU2MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjoLFyUopd9SFMU0xkhg1etzDb
m7mwvFsvu0t3RXBzHiLfzVN48OpS6qCDKPueL+VrInKmVADGDUyklDe0Mknt1DZa
gH1fc3H4ekDIwpkxI5YbriIkfm5ZYOgo99X1Pl+2Jlv99b1lccZL8+OzhVH6F9Pr
gtveyya5h8xtjN/R6w8NM83/nGF1ju3s4h514uux42sLsBJMXZbLFlMLpRc3tbct
r3znsU+WWjgQ10QgThEyBaNB5zq4lSaPyvMpAmraYzj/1frHNtwVB9o0oHoOQpaq
oDkEOAHEMtKRzIaAZ0COnI5u+E1TihROeucTRzddPA+sc/WLtCx5GEO3GsLZAgMB
AAGjggH4MIIB9DAdBgNVHQ4EFgQUvpr4MkAHAMs/jK5v4FGlYNasVgAwHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBwBggr
BgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVM4MTAwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAuYkOAwQAv2WEMA0GCSqGSIb3DQEBCwUAA4IB
AQBQSFiBz5OM/ZWnLZTIGOB2QZSw7xgyfOocF080vzZ+iyNsQMBX9rPIOp2TQOIO
HzGrIk+0cCZF+07u701VbvnBPasE74nztUQ3ZXNahsGKdHalg7zT8qzBChGA8XPv
s0KZ+hsYbcODJIq4V7ung4iPxM+h4Y6NxyDiaf/OTVQDhBMIajhvn3aK7fFVkj10
qDpwz+yCx/vNLySiS5m5cAC06x1rFyFijwSEyPAKJr0vuqm+uVSdjyC1S0cwFuAR
IYoENQKCD14uBN1y5XEEGukxz9ll2MdzjBTeuHg8wU5ydKBxTxY4iAGc9j9ipLEx
JV0tmQhtwvmsXJZn8ORUfa9h
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:57 2023 by rpki-client on console-ams.rpki-client.org