Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e342e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e342e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          CjpslUynocAUBLjDEsbqA/GN8ZCpbPWHbHih7v9hkCQ=
Subject key identifier:   08:90:E1:B5:8C:75:9C:A2:C6:70:EF:E1:A6:A1:81:42:8A:4C:B4:3F
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       6B06CD38F6CFB76AE7EE94E557CAED3F67511A32
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e342e302f32342d3234203d3e20323039333731.roa
Signing time:             Wed 18 May 2022 13:15:07 +0000
ROA not before:           Wed 18 May 2022 13:10:07 +0000
ROA not after:            Wed 17 May 2023 13:15:07 +0000
asID:                     209371
IP address blocks:        74.50.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:06:cd:38:f6:cf:b7:6a:e7:ee:94:e5:57:ca:ed:3f:67:51:1a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May 18 13:10:07 2022 GMT
            Not After : May 17 13:15:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:f9:13:bc:14:e9:bc:4a:7e:98:9c:ae:3f:
                    c6:97:c2:83:f9:71:fe:26:da:6b:69:aa:6f:d6:65:
                    13:43:7e:b7:a4:84:80:2b:33:9f:2a:36:f8:5d:e8:
                    f2:aa:56:f5:49:b3:e4:e0:49:1b:4f:9f:22:22:45:
                    98:b1:b6:80:69:c8:5f:d3:a6:25:cf:c4:f6:46:5e:
                    54:dd:de:2a:cc:07:43:20:01:86:84:51:a5:8f:01:
                    f4:c9:65:3f:92:98:77:90:14:10:63:b6:39:2d:8b:
                    f5:3c:14:ed:98:ce:07:14:65:d6:c8:4a:6a:37:fc:
                    62:5b:7a:72:cc:70:2d:6e:0d:95:6e:1b:88:e4:54:
                    7b:05:15:77:dd:05:3b:c2:d0:bd:13:18:4e:fb:76:
                    bf:0c:79:21:db:f7:d2:6e:9f:57:f8:62:ef:07:8c:
                    d6:93:cd:73:95:24:54:e2:da:07:c6:2e:63:f0:d7:
                    5e:4c:0f:89:ff:3a:6b:8d:16:1d:49:56:8a:c5:66:
                    e3:97:d2:45:9d:85:bd:e5:cf:2d:ad:f6:e2:66:93:
                    c4:4d:30:5f:da:f9:15:94:40:2c:01:7c:d1:27:bb:
                    a3:fc:df:a5:f7:a2:c2:10:13:a3:a4:c0:30:f0:95:
                    e3:4c:a9:67:03:cd:2f:bb:8b:7e:3e:4b:dd:5e:fa:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:90:E1:B5:8C:75:9C:A2:C6:70:EF:E1:A6:A1:81:42:8A:4C:B4:3F
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e342e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:6e:df:48:28:28:fb:6d:45:55:8f:3f:01:7a:81:d4:04:
         af:c4:d7:ad:71:c9:38:f2:79:64:ac:9d:69:da:8c:29:97:2b:
         43:77:1b:57:f6:48:ab:15:bd:55:42:0b:be:80:e3:9d:8e:7d:
         1c:35:ff:f6:4c:01:5c:79:fc:79:62:db:71:6b:40:06:90:d2:
         4a:fd:34:c9:1c:31:da:0d:4a:8e:92:48:d6:98:ba:de:19:de:
         34:5d:bc:dc:b5:8a:b3:e6:ac:a6:94:76:d0:5f:72:87:92:02:
         df:07:a5:58:a6:2b:fc:12:03:eb:be:c9:7f:94:38:66:dd:0c:
         2f:73:fb:f1:a0:19:c0:bb:63:d5:bc:76:41:c1:b9:32:01:ef:
         f8:61:3f:04:a3:81:37:18:5a:f4:ea:c9:fb:a6:dc:e7:16:b5:
         30:e0:c6:3a:1b:9e:51:61:25:5e:01:01:73:cc:bd:94:67:70:
         4e:36:61:42:f6:f4:32:32:c0:65:ef:0b:c4:0f:df:93:97:a0:
         c4:74:38:d5:f8:ec:63:0d:b7:5d:1e:ec:45:bf:4e:4b:9a:98:
         0b:fa:41:2e:24:62:50:8a:f5:05:34:9e:bb:74:83:a2:bd:06:
         8e:6d:8b:58:3a:7e:86:e8:d6:40:c3:8d:92:b4:68:e3:2f:94:
         5a:9f:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org