Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e332e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e332e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          8DNc+GIlRSKzjvRb7BovitWe3Z6zxK9iPkb2H+3kauY=
Subject key identifier:   3E:6B:5C:F9:D3:C6:25:4F:EC:D0:F2:B2:02:7F:D1:31:D2:06:68:E9
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       58D7C420C51BE310A2290993EE23640948A3D2DA
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e332e302f32342d3234203d3e20323039333731.roa
Signing time:             Thu 16 Jun 2022 05:29:56 +0000
ROA not before:           Thu 16 Jun 2022 05:24:56 +0000
ROA not after:            Thu 15 Jun 2023 05:29:56 +0000
asID:                     209371
IP address blocks:        74.50.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d7:c4:20:c5:1b:e3:10:a2:29:09:93:ee:23:64:09:48:a3:d2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 16 05:24:56 2022 GMT
            Not After : Jun 15 05:29:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:15:14:c1:79:bc:dd:88:a3:fa:98:5e:d4:
                    90:ca:5b:21:f8:fc:28:ea:98:bf:dd:21:5e:42:05:
                    cb:d5:b9:c3:3d:b9:be:d7:0f:01:47:e1:b7:3c:a0:
                    bd:b0:50:ec:c2:31:ba:4f:34:db:4f:63:2a:f5:37:
                    e2:83:0b:bf:71:68:4f:97:37:5c:87:d5:b7:18:9e:
                    07:91:c7:88:1b:ce:15:1e:c1:69:1b:3f:64:ec:4d:
                    a5:3a:7f:34:b0:5b:0c:f3:2b:0d:40:d8:71:9c:dc:
                    98:82:17:81:b0:e4:6e:ca:5a:72:63:fc:7d:b8:ce:
                    86:93:dd:9b:ef:b4:d1:25:85:86:3d:a2:4e:06:4c:
                    04:a7:59:c4:c4:4f:7f:0c:38:8a:0c:3b:d3:2f:c2:
                    7b:b0:b4:e7:33:5e:d7:03:16:a5:91:37:54:73:bf:
                    5e:9c:14:88:17:d9:1d:d6:f4:a7:a9:9b:e5:6a:ee:
                    d9:12:80:74:70:60:80:a1:62:41:23:f6:8d:58:e0:
                    c0:f2:37:1a:2a:e0:73:d5:55:b8:0f:83:cb:5f:9d:
                    e4:d3:8f:ce:8c:14:9d:8b:a6:2a:26:b9:99:14:7b:
                    a4:50:7c:83:7a:27:c9:73:bb:bc:0f:65:0a:8a:83:
                    f5:52:d1:45:6b:da:15:43:e8:1e:bd:43:d4:95:2d:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6B:5C:F9:D3:C6:25:4F:EC:D0:F2:B2:02:7F:D1:31:D2:06:68:E9
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e332e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:45:14:ec:fa:c2:88:6c:d4:52:a8:29:33:b5:44:3c:94:29:
         fa:51:82:e9:00:31:93:35:a0:86:48:4b:1a:f8:3c:59:5f:75:
         98:03:7a:cd:98:ab:6c:37:ee:a2:a0:07:bb:f6:dc:65:52:61:
         5e:6c:e3:90:4a:67:5b:7a:3b:77:1c:a8:ca:fd:25:47:57:1f:
         6f:b5:77:69:42:72:f1:14:6f:84:81:dc:3c:69:ba:51:ad:81:
         b6:08:14:1e:46:cb:32:b9:23:ad:dd:06:01:60:7d:28:1e:45:
         27:52:28:cc:76:4d:1a:aa:55:eb:f9:75:1c:1b:0c:90:bf:1e:
         86:81:90:b9:b9:86:2c:3e:cd:d9:30:b6:39:07:1f:1e:37:be:
         bd:e0:da:79:b8:dd:9e:6e:df:b0:27:51:72:e1:e0:23:2b:9c:
         91:f4:cf:5d:58:26:c3:a9:f8:21:30:22:e3:7a:99:ee:db:c5:
         31:d2:34:74:40:d3:b5:8b:20:5f:02:8e:ce:95:0c:43:24:9a:
         08:d8:9c:a8:96:bf:4a:dd:46:9d:1a:d5:c2:29:d2:c8:18:97:
         43:bd:5e:aa:72:ee:14:5c:75:1a:ae:06:72:28:0f:10:ad:2e:
         ab:25:2d:c5:43:19:96:e4:f1:01:61:de:b9:50:41:16:a2:35:
         a0:5b:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org