Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31372e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e31372e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          EsjxDoRHaWMVfpxqXNk/U0KbSAvCYKXF2dURieW6Trw=
Subject key identifier:   C2:09:54:A6:6E:9C:FC:04:EA:72:FA:4D:92:EE:4E:67:79:DA:D1:45
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       7660CB263245B820F9999CDCE8066394183A86F0
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31372e302f32342d3234203d3e20323039333731.roa
Signing time:             Wed 18 May 2022 13:15:26 +0000
ROA not before:           Wed 18 May 2022 13:10:26 +0000
ROA not after:            Wed 17 May 2023 13:15:26 +0000
asID:                     209371
IP address blocks:        74.50.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:60:cb:26:32:45:b8:20:f9:99:9c:dc:e8:06:63:94:18:3a:86:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May 18 13:10:26 2022 GMT
            Not After : May 17 13:15:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:b6:72:ea:af:10:52:84:b4:b7:6a:ac:2d:
                    ec:13:8b:a4:b4:c5:b8:e4:f4:26:b5:3e:d8:11:c2:
                    94:77:20:13:07:a9:64:56:05:7a:be:3e:a9:e8:68:
                    bf:f7:44:52:99:5a:04:8c:af:ba:53:41:5d:a4:5d:
                    04:62:47:28:46:39:4c:fe:47:29:b1:75:0f:b5:62:
                    9a:26:b6:50:8c:df:51:dd:94:11:91:1e:6e:77:e0:
                    7e:3a:5d:52:fb:a9:49:05:3b:1e:c0:14:7a:b4:06:
                    67:31:c4:8e:87:20:3c:6d:a1:12:71:94:a4:50:53:
                    74:07:59:b2:2f:cc:76:a1:4e:f6:51:73:ac:77:68:
                    14:8b:74:20:e8:72:a3:d3:c3:64:ff:e7:5a:7c:33:
                    c9:e8:69:4e:9b:e0:5d:37:dd:4d:09:41:f1:44:ff:
                    67:72:68:ea:9d:14:7d:68:1e:34:1f:6d:ae:f1:59:
                    bb:e5:db:24:8c:1d:74:78:9b:5a:f6:6b:cc:e0:aa:
                    6b:3c:bc:5f:34:b4:45:a3:27:92:f8:fb:47:5e:a0:
                    0b:13:a5:06:b7:80:11:a5:2a:21:8c:20:96:94:41:
                    d9:a4:40:7e:4f:e8:08:4a:4b:4f:78:88:fc:11:fa:
                    75:b0:3f:2c:ae:b1:29:e1:1c:13:f4:11:50:a5:50:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:09:54:A6:6E:9C:FC:04:EA:72:FA:4D:92:EE:4E:67:79:DA:D1:45
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e31372e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:2a:10:f6:80:97:26:ed:44:b9:78:ef:6e:63:f2:4c:9f:df:
         fc:8f:34:49:4b:d2:d4:30:a1:68:c0:b5:a3:18:e0:d7:9b:63:
         21:b7:d5:a3:4b:3f:f0:62:5a:04:1d:df:65:0b:f6:d0:e1:9f:
         12:b6:c2:c4:cf:72:0a:3e:0f:3e:84:58:b5:79:f5:47:a1:e4:
         00:06:38:ae:e2:c6:8d:4f:35:3b:14:bc:66:cb:95:84:be:af:
         ef:f3:6b:22:b7:b0:80:f7:87:c9:78:30:c9:6d:d3:f1:8f:de:
         1b:de:5e:c6:01:5b:43:61:6a:1e:b8:43:e4:0b:02:3f:98:16:
         92:8c:07:03:70:a7:d2:03:57:5a:0d:1a:43:6a:ec:88:36:78:
         b2:87:e3:6a:f8:54:02:cf:aa:dd:b7:67:e5:ab:9a:d8:c9:39:
         3a:71:d2:80:15:59:ed:67:96:bd:d2:0e:78:f1:25:9f:d6:1f:
         0b:41:db:b9:ee:35:fb:b6:57:aa:c5:01:bb:6e:f8:d2:91:98:
         44:bb:e0:5c:c5:b4:8c:a5:18:d5:4b:bb:ca:a9:d9:ae:c3:63:
         4a:2e:b5:35:7b:63:1c:ef:c9:55:68:83:90:c8:ad:f8:da:66:
         99:0b:af:7b:0a:ff:52:85:5c:97:5f:23:e0:0b:02:95:d8:78:
         7b:39:6b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org