Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS9280.roa
File:                     AS9280.roa (raw, json)
Hash identifier:          +u4qs1vbUnyiB/q8Wsy+lP/7OWdABLl1qnLomKiOE70=
Subject key identifier:   F1:7D:A2:D0:8D:D7:B1:5F:65:F0:EF:EE:C7:D1:72:BD:3D:EC:76:0F
Certificate issuer:       /CN=790bd238df7d45b7861545f2d03caf64232d3ff2
Certificate serial:       37C242C684C269D1FBA1DE61130DF0FB738F7549
Authority key identifier: 79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS9280.roa
Signing time:             Mon 28 Nov 2022 12:18:20 +0000
ROA not before:           Mon 28 Nov 2022 12:13:20 +0000
ROA not after:            Mon 27 Nov 2023 12:18:20 +0000
asID:                     9280
IP address blocks:        191.96.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c2:42:c6:84:c2:69:d1:fb:a1:de:61:13:0d:f0:fb:73:8f:75:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bd238df7d45b7861545f2d03caf64232d3ff2
        Validity
            Not Before: Nov 28 12:13:20 2022 GMT
            Not After : Nov 27 12:18:20 2023 GMT
        Subject: CN=F17DA2D08DD7B15F65F0EFEEC7D172BD3DEC760F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:d0:91:2c:b9:80:7c:64:0f:4a:7f:21:96:
                    26:cc:eb:86:c9:81:73:cc:df:38:79:31:d6:4f:43:
                    a3:0b:bb:96:73:3d:c6:82:80:96:2e:22:33:70:da:
                    21:63:11:5e:02:6a:05:9d:00:75:41:54:63:9e:34:
                    10:1a:b8:55:4e:f2:c0:f8:61:d2:3d:18:aa:08:1c:
                    87:8d:07:29:cd:6d:f8:b5:63:a2:21:eb:74:75:d4:
                    45:03:a3:ac:8f:76:a9:1f:52:f1:f2:25:6d:df:c6:
                    9e:a9:94:fb:a1:a4:4a:fe:2b:cd:11:67:06:b3:ca:
                    f9:f0:e8:51:94:52:39:9f:28:f8:11:75:4e:c5:a3:
                    08:d3:b1:0c:72:61:5e:cf:51:b0:1c:53:2f:71:59:
                    93:bb:0f:fb:f6:8d:a8:92:a0:78:01:76:44:09:5a:
                    89:14:f3:d5:ac:ca:c0:85:55:a7:f1:6b:f4:f0:4f:
                    57:7d:7b:7e:9d:9a:00:bd:ff:4b:66:33:db:b2:90:
                    cf:87:35:51:82:5d:03:b0:4a:ac:9a:c9:85:f0:0c:
                    61:7d:1f:99:59:9e:31:78:62:09:2f:b1:16:fc:cf:
                    b9:17:60:12:c0:c1:9d:3d:34:11:d6:47:f7:d8:63:
                    dd:ad:87:38:4d:11:0c:fa:d2:e2:6f:3e:21:0f:53:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7D:A2:D0:8D:D7:B1:5F:65:F0:EF:EE:C7:D1:72:BD:3D:EC:76:0F
            X509v3 Authority Key Identifier:
                keyid:79:0B:D2:38:DF:7D:45:B7:86:15:45:F2:D0:3C:AF:64:23:2D:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/790BD238DF7D45B7861545F2D03CAF64232D3FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvSON99RbeGFUXy0DyvZCMtP_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/1/AS9280.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d4:ac:7b:e4:d4:b8:25:86:a5:7b:c3:73:9a:fd:50:da:08:
         ae:aa:23:e4:27:dd:7c:01:5d:d2:2d:da:82:15:da:07:ef:ac:
         06:43:f7:3b:ab:93:4b:8d:38:ad:ea:75:b8:20:97:8a:a3:a9:
         88:d5:60:db:e0:ee:63:fa:ac:85:11:52:19:6d:bb:43:c6:d2:
         94:dc:8a:c9:86:c8:55:39:30:fa:1a:ac:c7:9b:cf:53:7f:9a:
         6c:d7:87:77:5c:16:b9:0d:7e:b6:ce:2d:72:3e:97:75:03:92:
         c6:8b:c8:d8:66:f4:6c:1e:7e:31:8c:0b:ba:b3:37:52:f7:17:
         8d:d7:91:31:32:a0:9a:c1:23:1f:03:c9:97:21:29:6c:76:3f:
         bc:65:e6:98:5a:74:ec:01:f8:9a:33:d7:0d:96:cb:de:e5:d9:
         27:45:c9:ba:86:51:d9:68:04:20:80:20:49:d3:13:1f:50:32:
         ec:25:9a:72:88:4a:61:c7:f7:47:10:a2:b3:1d:27:e4:2b:6f:
         6d:5c:a8:03:5a:6c:49:11:73:ed:56:8f:83:2b:b3:98:dc:66:
         01:9c:f1:ee:f2:28:65:c4:3a:b5:2b:f0:d8:95:3d:ba:fa:cb:
         e5:ba:83:42:0f:67:b4:4f:cc:71:79:b6:7e:9d:34:c7:f9:41:
         cf:c6:9f:36
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUN8JCxoTCadH7od5hEw3w+3OPdUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkwYmQyMzhkZjdkNDViNzg2MTU0NWYyZDAzY2FmNjQy
MzJkM2ZmMjAeFw0yMjExMjgxMjEzMjBaFw0yMzExMjcxMjE4MjBaMDMxMTAvBgNV
BAMTKEYxN0RBMkQwOEREN0IxNUY2NUYwRUZFRUM3RDE3MkJEM0RFQzc2MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPNCRLLmAfGQPSn8hlibM64bJ
gXPM3zh5MdZPQ6MLu5ZzPcaCgJYuIjNw2iFjEV4CagWdAHVBVGOeNBAauFVO8sD4
YdI9GKoIHIeNBynNbfi1Y6Ih63R11EUDo6yPdqkfUvHyJW3fxp6plPuhpEr+K80R
Zwazyvnw6FGUUjmfKPgRdU7FowjTsQxyYV7PUbAcUy9xWZO7D/v2jaiSoHgBdkQJ
WokU89WsysCFVafxa/TwT1d9e36dmgC9/0tmM9uykM+HNVGCXQOwSqyayYXwDGF9
H5lZnjF4YgkvsRb8z7kXYBLAwZ09NBHWR/fYY92thzhNEQz60uJvPiEPU4bFAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU8X2i0I3XsV9l8O/ux9FyvT3sdg8wHwYDVR0j
BBgwFoAUeQvSON99RbeGFUXy0DyvZCMtP/IwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMS83OTBCRDIz
OERGN0Q0NUI3ODYxNTQ1RjJEMDNDQUY2NDIzMkQzRkYyLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZVF2U09OOTlSYmVHRlVYeTBEeXZaQ010UF9JLmNlcjBwBggr
BgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzEvQVM5MjgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAv2DWMA0GCSqGSIb3DQEBCwUAA4IBAQCg1Kx7
5NS4JYale8Nzmv1Q2giuqiPkJ918AV3SLdqCFdoH76wGQ/c7q5NLjTit6nW4IJeK
o6mI1WDb4O5j+qyFEVIZbbtDxtKU3IrJhshVOTD6GqzHm89Tf5ps14d3XBa5DX62
zi1yPpd1A5LGi8jYZvRsHn4xjAu6szdS9xeN15ExMqCawSMfA8mXISlsdj+8ZeaY
WnTsAfiaM9cNlsve5dknRcm6hlHZaAQggCBJ0xMfUDLsJZpyiEphx/dHEKKzHSfk
K29tXKgDWmxJEXPtVo+DK7OY3GYBnPHu8ihlxDq1K/DYlT26+svluoNCD2e0T8xx
ebZ+nTTH+UHPxp82
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:42 2023 by rpki-client on console-fra.rpki-client.org