Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31332e302f32342d3234203d3e203631333137.roa
File:                     37342e35302e31332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          OHchOqr4yrTxUTx/RrAF/tUiFy+E10P/C4/VGDGytdA=
Subject key identifier:   C8:90:A5:BF:F9:B4:93:00:6F:12:21:F6:D6:09:69:E7:C3:8B:3E:A7
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       634CA34CFCBAA6A5302C46D625AA1F04DE5700D2
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31332e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 21 Jun 2022 15:03:14 +0000
ROA not before:           Tue 21 Jun 2022 14:58:14 +0000
ROA not after:            Tue 20 Jun 2023 15:03:14 +0000
asID:                     61317
IP address blocks:        74.50.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4c:a3:4c:fc:ba:a6:a5:30:2c:46:d6:25:aa:1f:04:de:57:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 21 14:58:14 2022 GMT
            Not After : Jun 20 15:03:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5f:60:8b:bb:89:90:d0:33:80:83:26:23:91:
                    09:ce:1c:fc:7c:5d:89:fe:3a:69:c5:32:31:69:b0:
                    db:91:77:35:c3:ae:e5:1e:18:34:c4:62:e0:be:33:
                    f2:18:19:ea:e7:e6:63:95:4f:2e:ee:92:1f:c3:8c:
                    1f:21:3f:91:9f:90:41:35:3c:7e:6b:38:2f:71:48:
                    83:31:8b:1e:a0:33:50:56:1a:4f:41:99:69:f9:35:
                    89:0d:a3:a8:27:a0:df:e9:85:ae:17:ce:52:35:1f:
                    b7:77:52:ce:50:d8:16:07:fc:ed:67:09:0e:0c:bc:
                    51:20:0a:d4:97:a0:54:9a:13:d0:ec:22:6f:55:b3:
                    5a:57:1b:64:2c:c1:47:4e:b4:f1:de:39:96:6a:30:
                    1a:57:70:7b:48:ff:b7:a7:a1:cc:c2:df:be:22:2d:
                    26:a4:da:74:43:fd:f6:4a:6f:84:c5:23:9e:7f:58:
                    c5:42:e7:45:0d:97:ad:ea:32:b3:87:d9:74:e1:20:
                    9c:ef:9f:db:cc:2f:6d:49:bb:85:a6:6c:b6:bc:58:
                    c7:84:13:19:3d:af:2e:10:1c:ab:48:81:e5:6e:8c:
                    de:97:fd:0b:a7:e1:61:50:86:71:8a:dd:74:0c:21:
                    3e:5d:10:56:13:1a:8c:9a:40:43:14:f1:f6:32:35:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:90:A5:BF:F9:B4:93:00:6F:12:21:F6:D6:09:69:E7:C3:8B:3E:A7
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b7:8d:4b:3b:06:7b:64:2b:a7:93:c3:e1:af:29:af:7d:bc:
         e8:04:0c:44:3b:2b:e4:8f:ca:41:ba:29:76:67:07:26:cc:5c:
         2f:60:01:40:15:d7:1c:43:96:be:71:fe:ae:09:3f:d0:ba:5c:
         74:a9:83:5c:94:a0:0c:c5:d7:47:e4:ca:22:c5:e8:b8:d0:e4:
         b9:2f:b0:1e:12:54:35:aa:c1:2c:ce:47:23:d3:aa:b7:4e:75:
         43:8b:7b:19:dc:62:2f:41:dd:4c:94:6e:95:b2:26:cc:c0:e3:
         a7:cd:74:9f:f9:15:fb:e8:a7:1f:bb:82:7a:f8:f4:de:ac:09:
         fd:d1:3d:a7:f7:57:ce:33:a1:a8:89:6f:17:2c:d6:34:d4:ea:
         32:da:c1:29:e4:11:53:d7:3c:30:4f:44:8c:46:04:e6:2d:64:
         47:a2:40:cf:14:da:4e:b9:9d:a1:49:e0:4f:4f:1e:61:e3:44:
         c2:0e:59:93:10:90:9a:ff:26:5d:70:fc:39:c9:21:e4:7e:3a:
         ec:69:10:34:c5:c5:1f:60:6f:01:e5:b6:5e:9f:a1:d8:6f:6d:
         12:4c:a9:7e:b4:ee:45:f6:5b:f8:51:49:f9:cb:86:a7:0f:06:
         bc:21:6d:06:1a:c9:e2:d3:06:1f:37:d5:87:12:9e:36:1e:48:
         d7:14:b1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org