Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32342e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e32342e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          fTcpc8swt46st5ULWuDEuei89gC+PE+kvq1go0kdoN0=
Subject key identifier:   0D:98:2E:A6:E5:61:64:B1:E7:D6:4F:85:2A:9C:29:0A:A2:78:C2:E0
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       76466A590431A25EA0CB46A3CF25FA307802E5DB
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32342e302f32342d3234203d3e20323039333731.roa
Signing time:             Wed 06 Jul 2022 14:18:00 +0000
ROA not before:           Wed 06 Jul 2022 14:13:00 +0000
ROA not after:            Wed 05 Jul 2023 14:18:00 +0000
asID:                     209371
IP address blocks:        74.50.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:46:6a:59:04:31:a2:5e:a0:cb:46:a3:cf:25:fa:30:78:02:e5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jul  6 14:13:00 2022 GMT
            Not After : Jul  5 14:18:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:15:1e:81:77:ae:b3:9e:6f:a6:a9:39:2f:
                    ab:d4:09:53:00:35:c2:43:30:a9:6a:2c:9e:4f:0f:
                    d2:fa:6d:85:a9:ba:5a:1a:6b:23:ad:a8:f3:4c:4f:
                    a4:c6:da:61:11:03:e5:ce:0c:45:d0:5c:1a:93:25:
                    58:59:11:7d:b0:fd:59:22:8c:8c:c7:20:58:5d:62:
                    11:98:83:94:e6:3c:d2:13:c1:0a:ea:43:c0:ec:a7:
                    75:17:7b:44:97:13:40:e3:72:6c:ef:d2:d0:c3:d5:
                    97:9e:1c:20:87:a0:0c:c4:a1:51:c6:31:fa:b3:ab:
                    93:c1:f9:ca:e8:40:0c:77:4b:db:08:c0:1f:da:5e:
                    63:5f:ec:93:1e:20:d2:a4:29:88:40:f4:64:28:cb:
                    6e:3b:76:e7:76:08:27:7a:17:a8:95:ad:2a:a3:9a:
                    60:78:06:6c:d2:60:2a:75:c0:9a:30:b9:b2:30:06:
                    59:a6:85:3f:40:df:ee:44:3c:f8:0b:49:14:7e:d1:
                    87:ce:64:5a:6a:3d:bb:12:fd:7c:de:8a:2a:6d:dc:
                    7d:30:28:8f:10:6c:73:a7:00:2b:9b:05:3a:60:ee:
                    25:df:e9:ec:83:0d:40:d4:3c:4d:ac:e3:d2:25:b1:
                    40:48:e8:85:39:6a:25:ba:f4:ea:9b:6b:d7:4a:53:
                    8f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:98:2E:A6:E5:61:64:B1:E7:D6:4F:85:2A:9C:29:0A:A2:78:C2:E0
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32342e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:03:57:42:9b:f4:a2:1e:7e:a7:ed:70:80:db:ab:41:68:ea:
         c1:82:62:69:7b:10:93:47:d8:0c:8a:92:81:7d:b0:34:cd:07:
         01:0c:47:c9:81:73:a4:7b:99:bc:11:1f:0c:d5:0a:8c:c7:e2:
         e7:d7:59:86:d1:ca:a0:7a:fb:17:83:88:2c:5a:d8:ec:04:a9:
         96:0d:b0:70:34:0b:bf:6f:b2:66:db:3e:24:5a:1f:07:b6:56:
         64:cf:eb:de:ac:d4:5a:9d:32:5e:46:0a:7f:11:b9:e2:90:70:
         4a:4f:14:1f:0f:11:7f:0f:b8:5c:15:ce:0c:2c:ee:a0:21:66:
         76:e1:c7:fb:58:dc:a6:6e:4b:e3:3c:36:37:ec:a2:bb:ce:9c:
         15:7c:99:0b:38:32:33:60:eb:91:d5:12:cd:93:fd:59:9c:c5:
         a1:10:91:7e:48:30:9d:b7:f6:2a:89:04:04:75:d7:25:75:3f:
         6b:a3:19:03:c7:ab:3b:0e:16:94:be:0c:71:81:5a:62:bb:9c:
         59:e9:8d:0c:58:01:f3:76:cc:f3:de:bf:0b:01:c2:1f:e9:ef:
         b5:f0:60:8f:a9:39:06:bc:6c:35:af:cb:49:85:f4:86:42:1a:
         86:32:d1:a9:31:b8:f7:5f:6f:27:97:10:e1:20:e3:a2:84:fc:
         3f:1a:c1:6a
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUdkZqWQQxol6gy0ajzyX6MHgC5dswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA3MDYxNDEzMDBaFw0yMzA3MDUxNDE4MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTg4MDE1MUU4MTc3QUVCMzlF
NkZBNkE5MzkyRkFCRDQwOTUzMDAzNUMyNDMzMEE5NkEyQzlFNEYwRkQyRkE2RDg1
QTlCQTVBMUE2QjIzQURBOEYzNEM0RkE0QzZEQTYxMTEwM0U1Q0UwQzQ1RDA1QzFB
OTMyNTU4NTkxMTdEQjBGRDU5MjI4QzhDQzcyMDU4NUQ2MjExOTg4Mzk0RTYzQ0Qy
MTNDMTBBRUE0M0MwRUNBNzc1MTc3QjQ0OTcxMzQwRTM3MjZDRUZEMkQwQzNENTk3
OUUxQzIwODdBMDBDQzRBMTUxQzYzMUZBQjNBQjkzQzFGOUNBRTg0MDBDNzc0QkRC
MDhDMDFGREE1RTYzNUZFQzkzMUUyMEQyQTQyOTg4NDBGNDY0MjhDQjZFM0I3NkU3
NzYwODI3N0ExN0E4OTVBRDJBQTM5QTYwNzgwNjZDRDI2MDJBNzVDMDlBMzBCOUIy
MzAwNjU5QTY4NTNGNDBERkVFNDQzQ0Y4MEI0OTE0N0VEMTg3Q0U2NDVBNkEzREJC
MTJGRDdDREU4QTJBNkREQzdEMzAyODhGMTA2QzczQTcwMDJCOUIwNTNBNjBFRTI1
REZFOUVDODMwRDQwRDQzQzREQUNFM0QyMjVCMTQwNDhFODg1Mzk2QTI1QkFGNEVB
OUI2QkQ3NEE1MzhGRDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqIAVHoF3rrOeb6apOS+r1AlTADXCQzCpaiyeTw/S+m2FqbpaGmsj
rajzTE+kxtphEQPlzgxF0FwakyVYWRF9sP1ZIoyMxyBYXWIRmIOU5jzSE8EK6kPA
7Kd1F3tElxNA43Js79LQw9WXnhwgh6AMxKFRxjH6s6uTwfnK6EAMd0vbCMAf2l5j
X+yTHiDSpCmIQPRkKMtuO3bndggneheola0qo5pgeAZs0mAqdcCaMLmyMAZZpoU/
QN/uRDz4C0kUftGHzmRaaj27Ev183ooqbdx9MCiPEGxzpwArmwU6YO4l3+nsgw1A
1DxNrOPSJbFASOiFOWoluvTqm2vXSlOP1wIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FA2YLqblYWSx59ZPhSqcKQqieMLgMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8G
CCsGAQUFBzALhoGCcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zNzM0MmUzNTMw
MmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzMzNzMxLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQASjIYMA0GCSqGSIb3DQEBCwUAA4IBAQAEA1dCm/SiHn6n7XCA26tBaOrB
gmJpexCTR9gMipKBfbA0zQcBDEfJgXOke5m8ER8M1QqMx+Ln11mG0cqgevsXg4gs
WtjsBKmWDbBwNAu/b7Jm2z4kWh8HtlZkz+verNRanTJeRgp/EbnikHBKTxQfDxF/
D7hcFc4MLO6gIWZ24cf7WNymbkvjPDY37KK7zpwVfJkLODIzYOuR1RLNk/1ZnMWh
EJF+SDCdt/YqiQQEddcldT9roxkDx6s7DhaUvgxxgVpiu5xZ6Y0MWAHzdszz3r8L
AcIf6e+18GCPqTkGvGw1r8tJhfSGQhqGMtGpMbj3X28nlxDhIOOihPw/GsFq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org