Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130342e302f32322d3234203d3e2037303138.roa
File:                     36372e3231302e3130342e302f32322d3234203d3e2037303138.roa (raw, json)
Hash identifier:          BkZKNqHcOcCMPw1trodsHd4mN2Q7AAZnaVW0O4YZKYk=
Subject key identifier:   4D:0F:BB:6A:BA:17:53:43:17:3A:29:CA:99:66:0C:2A:0C:4B:6F:62
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       7638A710EC872BF4228131C9156E73AB50A9F27D
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130342e302f32322d3234203d3e2037303138.roa
Signing time:             Wed 04 May 2022 08:09:25 +0000
ROA not before:           Wed 04 May 2022 08:04:25 +0000
ROA not after:            Wed 03 May 2023 08:09:25 +0000
asID:                     7018
IP address blocks:        67.210.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:38:a7:10:ec:87:2b:f4:22:81:31:c9:15:6e:73:ab:50:a9:f2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May  4 08:04:25 2022 GMT
            Not After : May  3 08:09:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:b8:ad:50:fa:4f:ee:84:84:0a:0d:90:55:
                    71:64:50:65:cd:43:6c:41:31:34:86:57:07:73:9e:
                    06:64:bd:20:0b:bc:1e:8e:7e:b9:08:74:e4:25:be:
                    3c:8d:be:bf:0b:ab:29:06:38:02:93:b7:9c:8b:ea:
                    e5:2a:a9:82:4a:c7:49:11:21:bf:32:26:b4:ed:a6:
                    23:89:36:7f:5a:36:ee:15:bb:ca:24:18:fc:6d:3e:
                    45:e9:4c:42:a4:c0:3a:dc:fb:d4:60:2b:64:12:f0:
                    50:17:5f:3c:f0:a2:58:95:24:d8:a1:0e:12:da:02:
                    e7:0b:46:65:de:8e:43:27:92:42:02:5d:74:bf:2e:
                    89:2a:66:15:45:f9:25:dd:2b:c3:c5:60:81:91:d4:
                    d8:3e:e3:1a:7c:db:61:a1:a0:c8:8d:66:75:96:ae:
                    14:f5:c8:15:29:77:db:12:95:47:27:c3:0e:0c:7c:
                    da:79:c3:de:5f:17:e4:09:7b:f6:9d:94:c9:e2:82:
                    a2:7c:59:a4:40:79:46:6e:0d:87:36:cd:71:ff:07:
                    8a:d9:81:fb:e8:e0:4d:43:b9:55:db:7c:e5:53:de:
                    ad:7c:79:c7:93:9e:0f:36:c3:87:b9:e2:4e:7f:78:
                    65:ac:75:42:bf:8d:ec:ca:ff:4d:51:be:7c:e8:f4:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0F:BB:6A:BA:17:53:43:17:3A:29:CA:99:66:0C:2A:0C:4B:6F:62
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/36372e3231302e3130342e302f32322d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:1a:d8:4e:86:66:fe:77:bb:93:dd:65:bb:99:d8:d8:81:d0:
         dd:e0:36:a8:0a:ff:6d:7d:f7:04:8e:ad:26:88:ca:5b:a9:5e:
         5f:47:b5:ac:cd:92:0e:ff:1f:63:f0:04:92:5a:58:5a:dc:6a:
         d2:ea:af:72:45:60:4b:94:a1:b6:64:2c:fd:e8:96:eb:72:06:
         18:f0:dd:17:73:82:c8:ea:a3:67:8c:60:0c:20:b0:75:33:cc:
         6a:ff:c5:ec:c5:15:6a:04:3e:4e:d0:15:bf:3e:71:60:e2:8c:
         a9:b9:51:47:18:ab:63:69:d0:e7:e2:51:83:51:bc:93:c9:15:
         b7:dd:91:b7:95:2d:11:25:85:38:41:0d:a1:29:30:6c:c3:15:
         3e:d4:d1:26:e0:e8:96:37:32:1a:c1:e5:9b:27:50:15:5c:fb:
         62:f7:83:a2:cf:6c:ac:52:c4:96:f3:44:02:43:49:5e:4c:1d:
         5f:b1:84:60:e8:79:a4:8d:99:51:fa:09:86:af:67:91:b6:dc:
         25:8d:2e:88:bf:f6:06:a5:ef:24:9b:61:a1:aa:64:4f:15:77:
         be:67:c4:ac:5c:fa:95:7f:82:1c:f9:b2:c4:fd:8f:97:e1:54:
         bf:90:a1:ff:e7:b9:d7:75:da:f6:23:6c:54:37:56:85:db:46:
         62:94:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org