Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e312e302f32342d3234203d3e203439393939.roa
File:                     37342e35302e312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          q4xn/3ClE4+Mea0tPtPCwGqfoK3gRWkKAUg9Aps3txg=
Subject key identifier:   CF:84:EC:77:CF:CE:9F:BD:56:4F:05:1C:98:C3:79:B6:6C:C0:9A:04
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       629E7F3CB44E4A9199C659EFDE67345BD5122ABC
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e312e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 29 Jun 2022 18:35:25 +0000
ROA not before:           Wed 29 Jun 2022 18:30:25 +0000
ROA not after:            Wed 28 Jun 2023 18:35:25 +0000
asID:                     49999
IP address blocks:        74.50.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9e:7f:3c:b4:4e:4a:91:99:c6:59:ef:de:67:34:5b:d5:12:2a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 29 18:30:25 2022 GMT
            Not After : Jun 28 18:35:25 2023 GMT
        Subject: CN=3082010A02820101009E4FBA50F30450CFA1258D818B53BD26A39FFDC16FF5AA0CA0A6E6F0A2755CA771F89CA0DB31921BC82C9EC0A24C80AB2566B10474795CA208669686D60040A8D0818C8ADD8ADD46066C8CDAEAFD96879E1B98A03E60F910EF5C570D282A04D19FA182338007D444986D0A929D33BFD5FCBCE6E26644C660B19012F1DD6C8DD83558D7F0D16A759BE48552704BE917B45751E0C0B8B50B1CF17991194A09D26E8135810D54A7FC17423D54121B3B1B445E3D40D4312DDC82234036A52B8AFC15423578C987DDA34D7B471A578C2CB2F82B1DEBDB1BEA17718F023373F6FC25E158D3D5429560E6EF09F9310419D29A357BC02159365264F39A782A2CE5BD27A70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:ba:50:f3:04:50:cf:a1:25:8d:81:8b:53:
                    bd:26:a3:9f:fd:c1:6f:f5:aa:0c:a0:a6:e6:f0:a2:
                    75:5c:a7:71:f8:9c:a0:db:31:92:1b:c8:2c:9e:c0:
                    a2:4c:80:ab:25:66:b1:04:74:79:5c:a2:08:66:96:
                    86:d6:00:40:a8:d0:81:8c:8a:dd:8a:dd:46:06:6c:
                    8c:da:ea:fd:96:87:9e:1b:98:a0:3e:60:f9:10:ef:
                    5c:57:0d:28:2a:04:d1:9f:a1:82:33:80:07:d4:44:
                    98:6d:0a:92:9d:33:bf:d5:fc:bc:e6:e2:66:44:c6:
                    60:b1:90:12:f1:dd:6c:8d:d8:35:58:d7:f0:d1:6a:
                    75:9b:e4:85:52:70:4b:e9:17:b4:57:51:e0:c0:b8:
                    b5:0b:1c:f1:79:91:19:4a:09:d2:6e:81:35:81:0d:
                    54:a7:fc:17:42:3d:54:12:1b:3b:1b:44:5e:3d:40:
                    d4:31:2d:dc:82:23:40:36:a5:2b:8a:fc:15:42:35:
                    78:c9:87:dd:a3:4d:7b:47:1a:57:8c:2c:b2:f8:2b:
                    1d:eb:db:1b:ea:17:71:8f:02:33:73:f6:fc:25:e1:
                    58:d3:d5:42:95:60:e6:ef:09:f9:31:04:19:d2:9a:
                    35:7b:c0:21:59:36:52:64:f3:9a:78:2a:2c:e5:bd:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:EC:77:CF:CE:9F:BD:56:4F:05:1C:98:C3:79:B6:6C:C0:9A:04
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e312e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:46:0c:0c:23:5a:c7:de:dd:19:59:94:8b:5f:c8:b9:15:
         1e:11:27:1d:69:a8:03:df:57:61:78:44:6a:4a:0b:44:cc:65:
         01:fc:4d:f7:16:8e:22:9e:92:59:5a:c3:58:86:57:ee:68:e4:
         01:8f:40:6e:f5:0a:6e:6b:2c:28:22:19:34:ac:d4:f0:d6:a7:
         e6:5a:ed:fe:25:5a:26:94:17:0c:2f:0f:67:34:38:ba:9e:cc:
         58:f7:57:f5:71:07:15:24:4e:f7:e3:07:51:f8:cb:46:ce:e8:
         4e:c8:b2:6a:df:9d:fd:d0:90:a5:e5:86:77:01:9f:80:26:f8:
         41:9e:51:4e:a2:a3:f7:f0:6e:0d:8f:99:57:9b:52:9e:5a:3a:
         6b:c4:51:56:7a:9c:cb:b2:fa:29:e6:69:1d:31:79:23:7e:cb:
         2b:82:d6:f0:74:59:3f:02:38:0a:0e:d3:68:46:74:02:b1:82:
         86:c1:f1:aa:47:eb:67:89:dc:9c:ca:b4:eb:66:4f:4f:48:cc:
         78:df:85:0e:26:0f:b0:0a:c9:c8:5e:12:12:e1:5d:25:95:86:
         f2:70:55:40:e2:9c:42:9a:7f:98:e1:01:00:19:eb:a4:7a:b8:
         86:82:b0:10:0a:f0:02:e2:d4:00:87:6a:e2:0f:be:43:65:ec:
         c8:b3:e6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org