Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e302e302f32342d3234203d3e203439333932.roa
File:                     37342e35302e302e302f32342d3234203d3e203439333932.roa (raw, json)
Hash identifier:          oi96W4Al+dmY4yaukjfxSi18gujgUGiG0uUfavsLVkE=
Subject key identifier:   7D:BB:22:F6:54:E2:0A:C9:3C:77:8F:DF:E9:D1:5E:A5:B2:0A:00:B5
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       2A6F8F505C315A72489D777B3539BEF0BA00A9CD
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e302e302f32342d3234203d3e203439333932.roa
Signing time:             Tue 10 May 2022 12:49:05 +0000
ROA not before:           Tue 10 May 2022 12:44:05 +0000
ROA not after:            Tue 09 May 2023 12:49:05 +0000
asID:                     49392
IP address blocks:        74.50.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6f:8f:50:5c:31:5a:72:48:9d:77:7b:35:39:be:f0:ba:00:a9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May 10 12:44:05 2022 GMT
            Not After : May  9 12:49:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3e:09:4e:cf:2e:5d:42:56:55:e7:66:9e:4b:
                    75:fc:a4:a8:1a:49:90:8e:69:25:a2:c1:40:67:b9:
                    5f:b6:72:cf:4e:7e:8f:b2:ad:5d:2d:7e:9e:4b:f8:
                    3c:b1:b3:21:fa:80:fc:56:82:d4:6d:5f:de:0a:80:
                    3f:8b:8b:0e:c6:2a:35:0d:8b:ad:79:fd:f3:be:54:
                    30:60:fd:1a:f7:95:08:52:64:e1:1b:db:4b:d5:88:
                    6f:26:d8:63:e1:99:f8:d4:bb:ad:22:c2:24:d8:bd:
                    04:49:82:63:65:ca:65:47:1d:40:69:bd:65:32:02:
                    99:f0:a4:0f:87:e5:d3:91:09:95:e4:ee:f4:d4:1d:
                    bb:06:05:cf:d5:60:54:f3:13:2e:0f:fc:e8:be:90:
                    ec:65:7a:19:ef:9d:0e:c9:3e:83:ad:d3:f0:fe:e6:
                    6c:72:9c:bf:fc:2e:80:bf:f6:54:d7:ad:64:79:22:
                    c2:37:e0:4b:e8:e7:d7:90:75:fc:83:7b:4e:82:77:
                    9e:02:f8:b9:28:17:b4:f8:17:c7:1e:56:f8:b2:d5:
                    ce:8a:39:12:77:df:42:27:98:91:66:73:8b:ab:d8:
                    05:5d:f3:57:82:65:f3:1d:cc:74:57:b6:a7:09:e6:
                    25:c7:a4:bd:06:8a:a4:a2:40:ee:df:65:88:2e:47:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BB:22:F6:54:E2:0A:C9:3C:77:8F:DF:E9:D1:5E:A5:B2:0A:00:B5
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e302e302f32342d3234203d3e203439333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:2f:62:56:82:34:b3:b0:5a:00:38:e0:1d:d9:02:96:c5:
         75:74:26:92:52:8f:f4:ab:5a:ac:25:f6:80:8e:6e:89:15:92:
         b8:25:af:ed:2a:e5:95:24:48:16:1a:82:7b:17:b8:0b:ff:70:
         53:df:70:c5:55:53:55:69:b0:dd:9a:6b:9c:20:e0:a7:68:eb:
         6b:79:c8:5d:de:4f:f0:45:62:ef:9c:d9:53:c4:b3:68:89:ef:
         38:f3:fe:cf:ee:43:92:4e:b5:97:b2:c5:0f:b4:9f:c3:82:33:
         22:d8:97:44:6b:72:49:8e:8e:e4:60:2a:7e:c3:10:81:29:20:
         b6:62:89:06:0a:a0:55:d4:ce:f8:36:60:8d:c2:07:4c:4d:af:
         62:d6:e6:1b:89:0b:46:7f:80:fa:39:46:83:33:39:69:09:46:
         c8:b2:93:02:32:22:1a:c7:0d:be:c9:86:df:be:f5:78:f2:e8:
         78:6f:e6:da:92:b5:f8:d7:b6:39:78:0f:dd:9c:45:f2:97:96:
         0c:39:9f:d2:11:4d:01:4c:85:46:38:d5:7b:49:da:74:80:dd:
         f8:c1:15:21:83:6f:c8:b6:a0:34:73:c7:f5:a7:b5:6c:7d:9e:
         fd:9c:33:9b:c8:3c:e2:63:ad:a1:47:e3:1d:06:3d:b8:84:cd:
         2c:1e:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org