Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31312e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e31312e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          1xLFKxYGv2Q+SW/ipZfmF4Q3FMLy7Fz0eYR6sAtEArw=
Subject key identifier:   7E:BC:FC:A2:67:54:58:03:13:75:B8:77:4D:D4:A6:D6:11:C7:8C:D4
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       61AEED112AFB230A64637F1DD791E7A139BCD580
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31312e302f32342d3234203d3e20323039333731.roa
Signing time:             Thu 16 Jun 2022 05:25:57 +0000
ROA not before:           Thu 16 Jun 2022 05:20:57 +0000
ROA not after:            Thu 15 Jun 2023 05:25:57 +0000
asID:                     209371
IP address blocks:        74.50.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ae:ed:11:2a:fb:23:0a:64:63:7f:1d:d7:91:e7:a1:39:bc:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 16 05:20:57 2022 GMT
            Not After : Jun 15 05:25:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:7b:d2:5e:e4:24:11:e8:de:51:02:86:3c:
                    fd:71:e7:13:3b:80:f7:2f:a6:53:60:67:10:d7:2e:
                    ff:68:16:bc:a5:63:4f:80:ea:02:6d:1f:01:ab:88:
                    c2:85:55:6b:17:a3:04:bb:57:03:db:09:ba:4a:83:
                    58:64:38:d0:ec:9f:f3:c7:c0:69:cb:1f:db:ba:53:
                    85:78:d7:fa:e5:d3:a5:7b:cc:b2:f3:51:30:8b:e0:
                    41:8d:52:68:6d:c8:fc:93:c1:f3:17:09:bf:83:a0:
                    90:f7:c6:24:d0:19:06:ac:87:04:ef:fe:cf:66:63:
                    56:00:0e:81:05:91:18:07:77:98:e9:28:99:86:0d:
                    d0:06:d9:a5:d6:48:2f:1d:ab:d9:1e:02:53:f8:33:
                    66:82:12:51:64:98:37:93:8c:b3:f6:26:34:7b:71:
                    96:16:91:cf:4f:dd:73:68:42:7e:ab:cb:51:4c:e3:
                    be:cd:fd:2c:13:b7:f7:20:58:ca:aa:ff:07:bb:52:
                    f2:84:5e:b2:f2:ce:f7:9c:4a:9c:5f:1f:53:8e:a0:
                    a1:a5:2b:b2:dc:2c:24:38:df:ed:96:33:de:eb:e8:
                    e5:94:80:85:60:5a:54:ab:7a:ad:a4:25:3e:16:19:
                    8c:87:84:3a:6b:3f:cc:e7:bc:8f:5c:89:49:73:af:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BC:FC:A2:67:54:58:03:13:75:B8:77:4D:D4:A6:D6:11:C7:8C:D4
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31312e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:89:60:9f:d5:c1:25:87:ba:90:cf:99:5a:23:59:77:bb:6f:
         3b:35:df:b8:eb:66:df:dc:b6:a5:f0:fb:c5:2b:ea:fe:ea:84:
         c9:71:fb:7d:f4:50:6c:e9:d6:96:a9:74:4f:ea:f8:86:00:28:
         16:78:1f:61:f3:96:6d:99:9a:a1:32:7f:2d:9e:10:1f:a5:e4:
         08:0f:84:d8:97:53:8a:fb:73:7a:6a:ad:2c:6f:8c:7a:3d:43:
         e0:3a:b2:7b:70:4d:14:df:69:36:37:14:8d:c2:19:5f:ca:61:
         85:69:ed:44:36:03:88:04:74:59:b3:5c:66:49:cb:a1:5a:8d:
         cb:50:86:2d:c7:4a:a9:de:ca:67:34:8d:61:e6:d0:79:82:ab:
         24:41:80:e7:a8:81:f6:59:ec:26:12:9f:0a:d4:0b:25:d0:cd:
         24:81:e6:7d:ec:db:ae:f2:87:bc:a6:54:21:3c:21:e3:fd:7a:
         13:7e:fd:10:a8:06:33:34:11:6a:53:9d:ce:64:4a:94:54:e1:
         f5:06:57:2c:67:c1:0f:2c:bb:03:67:8b:b7:aa:a2:2e:b8:b0:
         25:8a:a0:32:1e:d1:73:5e:95:a9:bd:cc:be:a2:75:96:8c:18:
         ae:25:ba:3f:f0:3f:49:b3:83:fc:21:f6:99:77:0d:a2:74:38:
         b0:d9:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org