Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31302e302f32342d3234203d3e203439393939.roa
File:                     37342e35302e31302e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          9aBXFWvf/H5pSRGdtcf//IgTMsrM+ModYtkUIjj4RRg=
Subject key identifier:   D5:6F:BE:C5:64:6A:C0:54:FC:66:D8:D3:0C:99:AC:9F:8D:FE:DD:5A
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       412D7C70E722D261BD1E8DFC07BB20D34C088902
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31302e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 29 Jun 2022 18:35:53 +0000
ROA not before:           Wed 29 Jun 2022 18:30:53 +0000
ROA not after:            Wed 28 Jun 2023 18:35:53 +0000
asID:                     49999
IP address blocks:        74.50.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2d:7c:70:e7:22:d2:61:bd:1e:8d:fc:07:bb:20:d3:4c:08:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 29 18:30:53 2022 GMT
            Not After : Jun 28 18:35:53 2023 GMT
        Subject: CN=3082010A0282010100BC1A743112815AEA4111B144CFEA43A9C98A6670221B16FD28A154F85E36A82C57C68658855567071C4FBC63CB301EEE5EDC1C3EA0F2538DC881FEDA2404DA56928B6009EB9570755C8793F0374DE292A66FB9848ED5A937A4715FC1C4F52C6DA527C3DC82E6393F333DC7E3561B85E3FC424C8A8F2B9461725612BFB3F8A4BCCB14C0DDF240B7BCD0D4B8DFA9B652294D7A7D2A27F43B15055563349659BDE0ED14EED3346C4905037AF1B9CC1D8CE94017C46BB670D9F16AA5626967BB9444358EF7574A764BAE8E48AAF6D2880011ED6F603E71EFFC7988DCDBF2F858C2D9F19CE18469702AC7E0C00A2A572EAF7C13CF0BE434A9F6AA48C076E280E5A2F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:74:31:12:81:5a:ea:41:11:b1:44:cf:ea:
                    43:a9:c9:8a:66:70:22:1b:16:fd:28:a1:54:f8:5e:
                    36:a8:2c:57:c6:86:58:85:55:67:07:1c:4f:bc:63:
                    cb:30:1e:ee:5e:dc:1c:3e:a0:f2:53:8d:c8:81:fe:
                    da:24:04:da:56:92:8b:60:09:eb:95:70:75:5c:87:
                    93:f0:37:4d:e2:92:a6:6f:b9:84:8e:d5:a9:37:a4:
                    71:5f:c1:c4:f5:2c:6d:a5:27:c3:dc:82:e6:39:3f:
                    33:3d:c7:e3:56:1b:85:e3:fc:42:4c:8a:8f:2b:94:
                    61:72:56:12:bf:b3:f8:a4:bc:cb:14:c0:dd:f2:40:
                    b7:bc:d0:d4:b8:df:a9:b6:52:29:4d:7a:7d:2a:27:
                    f4:3b:15:05:55:63:34:96:59:bd:e0:ed:14:ee:d3:
                    34:6c:49:05:03:7a:f1:b9:cc:1d:8c:e9:40:17:c4:
                    6b:b6:70:d9:f1:6a:a5:62:69:67:bb:94:44:35:8e:
                    f7:57:4a:76:4b:ae:8e:48:aa:f6:d2:88:00:11:ed:
                    6f:60:3e:71:ef:fc:79:88:dc:db:f2:f8:58:c2:d9:
                    f1:9c:e1:84:69:70:2a:c7:e0:c0:0a:2a:57:2e:af:
                    7c:13:cf:0b:e4:34:a9:f6:aa:48:c0:76:e2:80:e5:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6F:BE:C5:64:6A:C0:54:FC:66:D8:D3:0C:99:AC:9F:8D:FE:DD:5A
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31302e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:8e:2c:52:05:23:a4:98:d1:97:3d:b0:9b:f6:0f:2f:63:d1:
         89:6b:94:93:86:6b:29:cb:29:48:01:f5:31:fd:c5:c8:61:67:
         38:96:44:9d:3d:b0:5a:72:16:59:79:78:76:4a:ce:e0:fb:9a:
         8b:d9:ad:fe:a0:0a:4a:f3:ab:54:6f:f8:9a:93:ae:f8:9a:cc:
         e5:a8:c8:21:bb:a0:70:32:ad:62:f1:d8:9c:0d:8d:62:92:c4:
         45:7a:08:f2:74:d3:d9:19:d9:d2:ec:9a:e0:59:31:bc:05:12:
         a7:dc:81:bc:6f:9a:e5:bb:93:a6:11:96:5d:a5:b3:74:fd:56:
         21:e0:4b:40:b6:af:8e:e4:83:ec:c7:3e:c1:7b:42:0b:e8:46:
         0b:81:bc:13:9d:f9:c8:34:71:af:98:76:7d:a2:4a:04:04:86:
         50:c2:cd:53:43:ad:e1:41:8f:d9:36:a4:7d:00:59:ab:15:0a:
         67:6e:f6:51:c4:a8:a1:70:77:21:3a:72:ae:fd:70:d6:8e:b5:
         51:97:bd:f9:40:fc:ba:31:73:d6:7f:7d:ca:35:88:31:37:29:
         26:6e:c2:54:66:c7:26:a2:29:7f:b3:a7:10:97:6f:4b:df:91:
         39:1d:92:87:23:69:f1:80:77:c9:7b:e6:e1:39:37:b8:14:df:
         2b:75:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org