Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31322e302f32342d3234203d3e203235333639.roa
File:                     37342e35302e31322e302f32342d3234203d3e203235333639.roa (raw, json)
Hash identifier:          98t3tlny5WUCkaDlOrTPmJd5tseRDeiO/f6EztwhNLw=
Subject key identifier:   E5:FA:25:D8:94:28:5E:66:C2:79:B9:EE:8C:BB:93:76:F9:16:7C:B1
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       0C470A564FCB01B22DC4B91FE04DF99C8AD47759
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31322e302f32342d3234203d3e203235333639.roa
Signing time:             Wed 18 May 2022 13:15:28 +0000
ROA not before:           Wed 18 May 2022 13:10:28 +0000
ROA not after:            Wed 17 May 2023 13:15:28 +0000
asID:                     25369
IP address blocks:        74.50.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:47:0a:56:4f:cb:01:b2:2d:c4:b9:1f:e0:4d:f9:9c:8a:d4:77:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May 18 13:10:28 2022 GMT
            Not After : May 17 13:15:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:d1:f4:32:51:e4:4d:5f:a7:04:33:b3:88:
                    72:29:5f:7a:e8:0d:1a:b2:4b:2e:17:e7:3e:1e:2c:
                    07:43:35:b3:a6:0f:31:4d:12:13:d8:bf:62:ce:d6:
                    50:aa:e7:2d:3f:aa:3a:e2:b1:85:e6:80:7d:8e:2b:
                    05:7f:54:a0:13:89:74:98:60:d1:ca:59:5f:a7:13:
                    e6:4b:bd:f9:2e:17:70:23:95:dc:54:96:50:13:77:
                    a5:6a:a0:1c:21:ac:b0:f3:42:bc:8a:39:69:68:16:
                    ea:cb:dc:2a:86:88:73:1d:a0:44:54:bd:41:73:b7:
                    aa:1f:ab:43:d9:4b:e6:cb:0d:8f:7f:ab:c4:5e:a3:
                    62:cc:28:6f:4c:de:85:fe:07:4a:f9:1d:3c:eb:c1:
                    a2:71:85:6a:98:a1:5e:4a:25:1c:1e:ad:d8:93:3b:
                    94:9e:cc:35:32:73:28:71:f8:65:9c:12:15:4e:06:
                    34:0e:96:e2:e2:a7:39:62:6b:98:2d:6b:99:81:bc:
                    5c:0c:d7:bb:ee:e4:18:44:f6:c8:63:62:97:3f:bb:
                    bd:9a:cf:a8:4d:ea:99:9f:4a:ae:5f:bb:ec:b2:d6:
                    2c:61:38:9d:0f:f9:06:46:92:49:30:93:8b:d4:77:
                    ae:a6:22:8d:54:8f:f7:4e:09:e6:79:d0:e3:48:b3:
                    ff:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FA:25:D8:94:28:5E:66:C2:79:B9:EE:8C:BB:93:76:F9:16:7C:B1
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31322e302f32342d3234203d3e203235333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:00:30:82:63:ae:90:59:e2:4e:ab:b8:f4:f2:ee:d7:74:58:
         2a:1c:94:62:e9:db:4c:53:44:ce:ad:a0:4f:16:9d:e6:c5:27:
         02:f9:2c:7b:c9:6a:f3:50:ae:df:35:21:16:ac:6b:8d:8c:c2:
         df:36:ed:dc:81:de:98:fc:0e:fd:25:89:5e:f3:38:f7:fe:8e:
         e3:8a:ec:c5:d7:80:86:6c:34:51:83:81:4e:1c:9f:c0:e7:42:
         70:39:22:4b:90:ec:b2:5b:2f:f8:34:f0:31:d4:38:6f:6b:62:
         be:8c:73:e3:4c:77:b2:7c:d1:a8:3b:5a:98:f2:c7:e3:05:ae:
         87:be:96:1e:4f:f6:ad:85:ac:6c:79:fa:80:c5:bf:8d:ba:b8:
         a8:d3:2c:91:2d:31:53:4e:c2:3c:af:e3:a8:89:8d:d1:39:84:
         10:22:0b:7e:89:f3:d2:68:66:6e:d5:cd:d5:cd:2d:b9:9c:d4:
         e1:2f:c1:40:2c:01:1f:4d:fa:fb:b9:aa:6a:22:73:26:cd:de:
         9f:86:b8:7e:ad:87:ca:16:7b:a5:42:45:39:38:48:00:a3:56:
         82:e5:e8:d3:5b:9e:8b:33:5c:f5:70:31:2b:f1:e8:ea:5d:57:
         2c:ea:0a:d5:cd:f8:98:18:4c:51:20:c9:a5:4e:a6:14:31:b4:
         4d:d7:f3:fb
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUDEcKVk/LAbItxLkf4E35nIrUd1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA1MTgxMzEwMjhaFw0yMzA1MTcxMzE1MjhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI5RkQxRjQzMjUxRTQ0RDVG
QTcwNDMzQjM4ODcyMjk1RjdBRTgwRDFBQjI0QjJFMTdFNzNFMUUyQzA3NDMzNUIz
QTYwRjMxNEQxMjEzRDhCRjYyQ0VENjUwQUFFNzJEM0ZBQTNBRTJCMTg1RTY4MDdE
OEUyQjA1N0Y1NEEwMTM4OTc0OTg2MEQxQ0E1OTVGQTcxM0U2NEJCREY5MkUxNzcw
MjM5NURDNTQ5NjUwMTM3N0E1NkFBMDFDMjFBQ0IwRjM0MkJDOEEzOTY5NjgxNkVB
Q0JEQzJBODY4ODczMURBMDQ0NTRCRDQxNzNCN0FBMUZBQjQzRDk0QkU2Q0IwRDhG
N0ZBQkM0NUVBMzYyQ0MyODZGNENERTg1RkUwNzRBRjkxRDNDRUJDMUEyNzE4NTZB
OThBMTVFNEEyNTFDMUVBREQ4OTMzQjk0OUVDQzM1MzI3MzI4NzFGODY1OUMxMjE1
NEUwNjM0MEU5NkUyRTJBNzM5NjI2Qjk4MkQ2Qjk5ODFCQzVDMENEN0JCRUVFNDE4
NDRGNkM4NjM2Mjk3M0ZCQkJEOUFDRkE4NERFQTk5OUY0QUFFNUZCQkVDQjJENjJD
NjEzODlEMEZGOTA2NDY5MjQ5MzA5MzhCRDQ3N0FFQTYyMjhENTQ4RkY3NEUwOUU2
NzlEMEUzNDhCM0ZGQUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwp/R9DJR5E1fpwQzs4hyKV966A0asksuF+c+HiwHQzWzpg8xTRIT
2L9iztZQquctP6o64rGF5oB9jisFf1SgE4l0mGDRyllfpxPmS735LhdwI5XcVJZQ
E3elaqAcIayw80K8ijlpaBbqy9wqhohzHaBEVL1Bc7eqH6tD2Uvmyw2Pf6vEXqNi
zChvTN6F/gdK+R0868GicYVqmKFeSiUcHq3YkzuUnsw1MnMocfhlnBIVTgY0Dpbi
4qc5YmuYLWuZgbxcDNe77uQYRPbIY2KXP7u9ms+oTeqZn0quX7vsstYsYTidD/kG
RpJJMJOL1HeupiKNVI/3TgnmedDjSLP/rQIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FOX6JdiUKF5mwnm57oy7k3b5FnyxMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0G
CCsGAQUFBzALhoGAcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zNzM0MmUzNTMw
MmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMzMzYzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAEoyDDANBgkqhkiG9w0BAQsFAAOCAQEArgAwgmOukFniTqu49PLu13RYKhyU
YunbTFNEzq2gTxad5sUnAvkse8lq81Cu3zUhFqxrjYzC3zbt3IHemPwO/SWJXvM4
9/6O44rsxdeAhmw0UYOBThyfwOdCcDkiS5Dsslsv+DTwMdQ4b2tivoxz40x3snzR
qDtamPLH4wWuh76WHk/2rYWsbHn6gMW/jbq4qNMskS0xU07CPK/jqImN0TmEECIL
fonz0mhmbtXN1c0tuZzU4S/BQCwBH036+7mqaiJzJs3en4a4fq2HyhZ7pUJFOThI
AKNWguXo01ueizNc9XAxK/Ho6l1XLOoK1c34mBhMUSDJpU6mFDG0Tdfz+w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org