Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32312e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e32312e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          Jj3F+56Cz5tsKSAXBm9GpPfapgjc/cjouDNEg9ZlfZo=
Subject key identifier:   E5:36:EA:04:FF:62:4D:55:8F:47:CD:83:35:17:4A:68:08:E4:41:83
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       637F243A966C22FF01AA70D1A6B20925805D99CB
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32312e302f32342d3234203d3e20323039333731.roa
Signing time:             Fri 13 May 2022 14:42:00 +0000
ROA not before:           Fri 13 May 2022 14:37:00 +0000
ROA not after:            Fri 12 May 2023 14:42:00 +0000
asID:                     209371
IP address blocks:        74.50.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7f:24:3a:96:6c:22:ff:01:aa:70:d1:a6:b2:09:25:80:5d:99:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May 13 14:37:00 2022 GMT
            Not After : May 12 14:42:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:cd:73:d8:65:6c:bb:86:21:95:1f:12:0d:
                    6c:90:27:7c:8d:76:ff:51:67:97:2c:c5:6a:ce:58:
                    dc:dd:38:b1:9b:98:50:a3:28:66:fe:0f:66:44:79:
                    d9:d8:fc:18:2f:34:ad:27:a9:a6:d8:a2:c4:2f:78:
                    38:70:d9:92:71:a2:fb:d1:60:e9:ab:a6:d3:9a:c7:
                    c6:86:5c:13:b9:b1:67:bb:b5:69:bb:47:21:4f:26:
                    0f:af:f5:5c:59:a1:a1:dd:85:7b:da:7b:d0:7c:ca:
                    01:4b:66:76:0b:13:63:42:c8:8c:4c:62:2e:86:27:
                    43:00:0e:b1:1c:2b:88:63:70:7e:a7:46:83:65:58:
                    82:fa:27:01:03:3e:1a:0f:da:30:64:7f:23:af:f7:
                    85:a1:03:7a:c4:9c:e0:6b:4b:1b:29:c8:fb:ff:58:
                    a0:de:64:6b:33:28:35:f1:33:df:17:2b:fb:99:24:
                    b5:f4:bc:65:e9:16:2c:ea:6d:ef:c7:cd:63:f7:d0:
                    6e:93:59:5a:da:0b:78:45:46:b4:d9:c3:39:7e:95:
                    a0:62:39:5f:9d:7e:ad:2b:48:5d:a6:98:72:cb:eb:
                    9e:78:fc:fc:b4:d2:dd:3c:66:1c:d4:d1:15:e9:be:
                    64:4d:79:d6:0b:c6:c0:a2:99:97:dd:01:e9:95:f5:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:36:EA:04:FF:62:4D:55:8F:47:CD:83:35:17:4A:68:08:E4:41:83
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32312e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:9e:79:ec:5e:9a:8e:0e:77:6e:6c:47:43:d9:a9:5e:e5:0b:
         62:ae:52:72:35:8a:77:63:d6:5c:9b:7a:26:85:42:c0:34:6d:
         33:48:8c:25:50:ef:9d:7b:da:4f:9e:ba:97:95:13:32:f4:d3:
         03:95:43:33:ee:4f:99:1a:a9:fa:3b:bb:09:95:09:dc:7d:e6:
         8f:07:7b:95:f7:e0:ff:c3:2b:9b:df:eb:f0:d4:1d:33:e2:3e:
         3e:2e:ef:aa:d8:f9:d2:98:a7:1e:3c:2d:82:a3:f2:f2:82:b5:
         ae:24:08:2e:c6:18:0f:52:8f:74:35:24:4f:83:24:0b:34:18:
         f3:ad:df:64:89:be:5e:39:26:5a:87:9f:c2:0a:d5:61:3c:fa:
         2a:02:66:c4:39:94:a7:20:a9:f7:9a:e4:90:19:7b:a4:4b:78:
         4f:38:57:8a:10:75:08:ed:ff:0d:52:fe:6d:8e:2b:47:81:99:
         3e:5c:c5:68:44:e1:a5:54:dc:5d:42:22:46:65:61:a1:e0:45:
         cb:87:0a:ae:c5:c0:6c:01:e8:45:f7:98:d3:dd:23:1f:9d:b3:
         20:e4:6a:27:d1:c8:87:cb:29:2d:ae:df:df:8c:da:e4:d7:25:
         23:64:d5:2e:b8:a4:d0:79:87:6f:16:d1:d3:95:a2:f4:cd:59:
         cd:a5:51:dc
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUY38kOpZsIv8BqnDRprIJJYBdmcswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA1MTMxNDM3MDBaFw0yMzA1MTIxNDQyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDJFNENENzNEODY1NkNCQjg2
MjE5NTFGMTIwRDZDOTAyNzdDOEQ3NkZGNTE2Nzk3MkNDNTZBQ0U1OERDREQzOEIx
OUI5ODUwQTMyODY2RkUwRjY2NDQ3OUQ5RDhGQzE4MkYzNEFEMjdBOUE2RDhBMkM0
MkY3ODM4NzBEOTkyNzFBMkZCRDE2MEU5QUJBNkQzOUFDN0M2ODY1QzEzQjlCMTY3
QkJCNTY5QkI0NzIxNEYyNjBGQUZGNTVDNTlBMUExREQ4NTdCREE3QkQwN0NDQTAx
NEI2Njc2MEIxMzYzNDJDODhDNEM2MjJFODYyNzQzMDAwRUIxMUMyQjg4NjM3MDdF
QTc0NjgzNjU1ODgyRkEyNzAxMDMzRTFBMEZEQTMwNjQ3RjIzQUZGNzg1QTEwMzdB
QzQ5Q0UwNkI0QjFCMjlDOEZCRkY1OEEwREU2NDZCMzMyODM1RjEzM0RGMTcyQkZC
OTkyNEI1RjRCQzY1RTkxNjJDRUE2REVGQzdDRDYzRjdEMDZFOTM1OTVBREEwQjc4
NDU0NkI0RDlDMzM5N0U5NUEwNjIzOTVGOUQ3RUFEMkI0ODVEQTY5ODcyQ0JFQjlF
NzhGQ0ZDQjREMkREM0M2NjFDRDREMTE1RTlCRTY0NEQ3OUQ2MEJDNkMwQTI5OTk3
REQwMUU5OTVGNUZCQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0uTNc9hlbLuGIZUfEg1skCd8jXb/UWeXLMVqzljc3Tixm5hQoyhm
/g9mRHnZ2PwYLzStJ6mm2KLEL3g4cNmScaL70WDpq6bTmsfGhlwTubFnu7Vpu0ch
TyYPr/VcWaGh3YV72nvQfMoBS2Z2CxNjQsiMTGIuhidDAA6xHCuIY3B+p0aDZViC
+icBAz4aD9owZH8jr/eFoQN6xJzga0sbKcj7/1ig3mRrMyg18TPfFyv7mSS19Lxl
6RYs6m3vx81j99Buk1la2gt4RUa02cM5fpWgYjlfnX6tK0hdpphyy+ueePz8tNLd
PGYc1NEV6b5kTXnWC8bAopmX3QHplfX7twIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FOU26gT/Yk1Vj0fNgzUXSmgI5EGDMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zNzM0MmUzNTMw
MmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzMzNzMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQASjIVMA0GCSqGSIb3DQEBCwUAA4IBAQASnnnsXpqODndubEdD2ale5Qti
rlJyNYp3Y9Zcm3omhULANG0zSIwlUO+de9pPnrqXlRMy9NMDlUMz7k+ZGqn6O7sJ
lQncfeaPB3uV9+D/wyub3+vw1B0z4j4+Lu+q2PnSmKcePC2Co/LygrWuJAguxhgP
Uo90NSRPgyQLNBjzrd9kib5eOSZah5/CCtVhPPoqAmbEOZSnIKn3muSQGXukS3hP
OFeKEHUI7f8NUv5tjitHgZk+XMVoROGlVNxdQiJGZWGh4EXLhwquxcBsAehF95jT
3SMfnbMg5Gon0ciHyyktrt/fjNrk1yUjZNUuuKTQeYdvFtHTlaL0zVnNpVHc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:58 2024 by rpki-client on console-fra.rpki-client.org