Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32362e302f32342d3234203d3e203436363634.roa
File:                     37342e35302e32362e302f32342d3234203d3e203436363634.roa (raw, json)
Hash identifier:          XYHg1MroaBLG4h6/JEUebDLtXu/69sJxThykd1Ny3SQ=
Subject key identifier:   D3:84:1C:EB:39:B3:C5:CF:27:D9:6F:50:99:DE:70:E8:92:2E:15:BC
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       3A6717032216BCA1E8D3541BD8DCD792CF9443F1
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32362e302f32342d3234203d3e203436363634.roa
Signing time:             Thu 30 Jun 2022 09:10:52 +0000
ROA not before:           Thu 30 Jun 2022 09:05:52 +0000
ROA not after:            Thu 29 Jun 2023 09:10:52 +0000
asID:                     46664
IP address blocks:        74.50.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:67:17:03:22:16:bc:a1:e8:d3:54:1b:d8:dc:d7:92:cf:94:43:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 30 09:05:52 2022 GMT
            Not After : Jun 29 09:10:52 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:50:28:ea:67:d4:7f:f6:9e:46:38:3e:48:ff:
                    47:e3:bf:08:0d:c2:9b:85:3d:d3:e5:7d:3c:ce:d0:
                    ce:bc:02:c0:db:3a:ac:7f:04:91:09:f5:a1:cb:73:
                    0e:6a:71:75:6d:fc:96:31:b1:f7:57:7e:3a:30:06:
                    8e:7e:66:53:6f:af:ac:90:d8:53:b3:c1:d6:9f:75:
                    e0:c9:75:91:60:8b:4c:ff:1f:16:bf:20:bc:3e:ee:
                    07:f9:a9:61:63:b1:4e:77:67:f3:b0:8f:5a:55:f0:
                    0c:ba:da:61:f0:1e:d0:5e:95:91:34:53:49:7e:56:
                    ae:69:87:c7:74:52:1d:4b:66:c5:fc:79:c9:2d:17:
                    7f:95:93:3c:00:8c:9f:06:e1:13:39:25:52:32:b1:
                    a8:24:cd:55:17:94:c1:8d:70:14:37:6c:b9:26:31:
                    9b:5c:ba:ae:76:7e:78:ee:34:66:be:84:ca:bf:89:
                    91:a7:54:c1:89:90:98:6b:21:6f:c3:25:d1:2d:4a:
                    8b:0b:4a:40:e1:fb:66:5f:8e:a2:de:68:3b:c2:2d:
                    37:ec:55:12:da:1e:7e:1b:ee:89:e3:95:bc:42:8c:
                    87:f9:82:d2:26:66:a4:87:22:fc:a9:a7:d2:2b:9e:
                    79:02:d8:7c:de:40:cb:a7:8f:2c:75:e9:d6:54:7b:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:84:1C:EB:39:B3:C5:CF:27:D9:6F:50:99:DE:70:E8:92:2E:15:BC
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32362e302f32342d3234203d3e203436363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:31:c0:e6:8b:88:10:6a:25:97:6e:23:7a:53:52:05:69:86:
         b6:e4:56:57:18:01:be:b1:01:16:28:16:7b:fb:ad:c5:d3:88:
         9b:d6:01:82:96:f5:7f:f8:50:cd:13:aa:6f:d4:f0:cd:1e:56:
         18:ea:3b:2f:32:51:45:55:83:d0:26:e2:34:61:95:06:62:6e:
         2d:db:ad:79:34:92:fa:15:0b:c8:72:a3:7c:d6:05:5d:8f:a3:
         7e:f2:ef:6b:80:6f:81:17:59:91:a5:d5:35:63:84:9b:90:e1:
         d7:1f:1d:56:bd:5f:65:5c:35:0b:11:75:55:ae:fe:f9:8a:32:
         fa:e5:8f:4e:c0:f3:8f:cb:86:8a:a3:4e:f3:42:aa:1e:39:06:
         d8:c4:26:c5:0e:d3:72:3b:94:47:1d:c3:76:7d:00:2d:3b:9b:
         fd:88:cb:85:0b:d4:f9:da:8f:8c:4d:80:5d:a8:02:f5:3b:29:
         e1:1f:65:c0:9c:64:57:8e:69:b4:0f:04:0a:79:55:d6:6f:7c:
         8e:ce:86:36:d4:b4:fb:d9:54:22:d0:08:f2:18:e2:e7:bb:20:
         fb:7b:ce:59:b1:8a:88:e3:67:3d:bb:c3:4a:47:85:68:5f:44:
         71:66:80:ce:28:8c:43:09:8a:f6:de:a2:54:19:d9:ee:4e:43:
         b1:b3:02:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org