Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e372e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e372e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          77Dp9AQeQzmezhL6kJkofCkLNw8gEHfdq3wGmyhV7Zo=
Subject key identifier:   3E:F0:84:6E:4A:AD:12:D6:AA:16:68:EC:45:55:CE:11:8C:A4:90:02
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       733BCA50EA19CC3E7CBD3AAB5244E62B7A1370A8
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e372e302f32342d3234203d3e20323039333731.roa
Signing time:             Thu 30 Jun 2022 16:18:06 +0000
ROA not before:           Thu 30 Jun 2022 16:13:06 +0000
ROA not after:            Thu 29 Jun 2023 16:18:06 +0000
asID:                     209371
IP address blocks:        74.50.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3b:ca:50:ea:19:cc:3e:7c:bd:3a:ab:52:44:e6:2b:7a:13:70:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Jun 30 16:13:06 2022 GMT
            Not After : Jun 29 16:18:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:f2:8a:67:e7:05:b0:db:ab:62:49:ed:f0:
                    98:39:ba:e3:ea:db:21:c9:4e:08:0e:f7:30:80:36:
                    58:0d:61:21:f3:6d:27:13:1a:bf:44:f4:27:f4:97:
                    58:52:b4:7b:59:8a:b9:24:97:32:65:9e:38:2c:e3:
                    52:f9:83:15:6b:1e:1e:4d:48:09:f2:0c:e4:81:3c:
                    db:24:5a:d3:05:e8:d8:c2:41:3f:58:ea:76:67:b0:
                    79:3a:06:96:53:2e:e4:c9:12:ab:68:84:a1:3d:20:
                    7d:09:d1:09:a7:d9:7d:5c:84:38:b4:02:c9:29:46:
                    75:ce:c6:67:e9:99:c1:9d:45:7d:96:b9:8a:d6:43:
                    45:a7:a1:d3:2e:4e:df:1c:09:95:4b:dc:44:65:0b:
                    42:de:7d:83:18:70:a8:a9:c9:f5:0e:71:88:9f:76:
                    d4:b7:5f:fb:a5:b0:cc:90:6a:cc:96:64:ab:81:98:
                    ab:00:1c:66:f0:0e:d3:5a:33:b4:7d:38:a8:70:49:
                    96:a5:7e:36:f3:2e:3e:cb:67:15:42:6d:3f:c8:53:
                    6f:91:1c:d3:d6:af:f0:cb:63:e3:60:15:16:60:34:
                    6c:47:34:e8:19:e9:43:2f:ca:61:07:bc:00:9c:56:
                    34:e1:18:f9:a9:86:03:a9:44:2d:b2:9f:7f:7c:8e:
                    e8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F0:84:6E:4A:AD:12:D6:AA:16:68:EC:45:55:CE:11:8C:A4:90:02
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e372e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:2d:2c:c8:2c:01:66:a9:96:d6:77:01:e8:e2:37:71:db:d4:
         2a:52:e0:2e:ca:cf:19:9e:f7:37:db:4e:7b:6c:d9:b0:c8:47:
         0c:8d:45:63:7f:6e:54:19:8a:e2:98:13:fb:e1:10:12:69:2c:
         48:41:cb:cd:63:86:48:a8:f2:72:72:6f:a0:33:5b:72:6d:72:
         4a:3b:9e:32:f0:7a:da:cc:cb:bd:ba:f4:c2:ba:86:f2:97:61:
         7e:a2:10:53:f2:8a:65:a9:a3:2a:94:f8:b0:45:26:ac:79:b1:
         19:60:1e:57:a1:ea:6f:18:1f:81:c0:d3:1b:85:a7:ff:f4:38:
         a8:3e:0c:45:88:cc:15:80:2c:69:b5:87:a7:0a:c1:06:e3:de:
         a9:07:96:04:35:d6:4c:fc:d6:43:e3:04:8c:8c:63:3a:be:b4:
         dc:9f:1f:d6:11:ab:d3:9d:7c:c6:4b:55:1d:f6:e2:54:36:59:
         5b:76:8d:d3:40:ad:06:8b:d5:86:e5:d6:4e:64:01:5f:2a:d7:
         f8:86:21:14:d5:35:2d:75:51:d7:52:ba:87:8d:02:9c:06:18:
         46:b8:37:63:9c:17:f1:ba:c0:f3:66:b7:e5:6f:13:0f:e1:34:
         3e:70:e4:00:22:64:c3:0d:ba:e8:ae:0e:b8:8f:8b:28:b0:fc:
         44:9e:f3:5b
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUczvKUOoZzD58vTqrUkTmK3oTcKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1OTMzRkUz
M0VFQkEyNDAeFw0yMjA2MzAxNjEzMDZaFw0yMzA2MjkxNjE4MDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkEyMEYyOEE2N0U3MDVCMERC
QUI2MjQ5RURGMDk4MzlCQUUzRUFEQjIxQzk0RTA4MEVGNzMwODAzNjU4MEQ2MTIx
RjM2RDI3MTMxQUJGNDRGNDI3RjQ5NzU4NTJCNDdCNTk4QUI5MjQ5NzMyNjU5RTM4
MkNFMzUyRjk4MzE1NkIxRTFFNEQ0ODA5RjIwQ0U0ODEzQ0RCMjQ1QUQzMDVFOEQ4
QzI0MTNGNThFQTc2NjdCMDc5M0EwNjk2NTMyRUU0QzkxMkFCNjg4NEExM0QyMDdE
MDlEMTA5QTdEOTdENUM4NDM4QjQwMkM5Mjk0Njc1Q0VDNjY3RTk5OUMxOUQ0NTdE
OTZCOThBRDY0MzQ1QTdBMUQzMkU0RURGMUMwOTk1NEJEQzQ0NjUwQjQyREU3RDgz
MTg3MEE4QTlDOUY1MEU3MTg4OUY3NkQ0Qjc1RkZCQTVCMENDOTA2QUNDOTY2NEFC
ODE5OEFCMDAxQzY2RjAwRUQzNUEzM0I0N0QzOEE4NzA0OTk2QTU3RTM2RjMyRTNF
Q0I2NzE1NDI2RDNGQzg1MzZGOTExQ0QzRDZBRkYwQ0I2M0UzNjAxNTE2NjAzNDZD
NDczNEU4MTlFOTQzMkZDQTYxMDdCQzAwOUM1NjM0RTExOEY5QTk4NjAzQTk0NDJE
QjI5RjdGN0M4RUU4RTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuiDyimfnBbDbq2JJ7fCYObrj6tshyU4IDvcwgDZYDWEh820nExq/
RPQn9JdYUrR7WYq5JJcyZZ44LONS+YMVax4eTUgJ8gzkgTzbJFrTBejYwkE/WOp2
Z7B5OgaWUy7kyRKraIShPSB9CdEJp9l9XIQ4tALJKUZ1zsZn6ZnBnUV9lrmK1kNF
p6HTLk7fHAmVS9xEZQtC3n2DGHCoqcn1DnGIn3bUt1/7pbDMkGrMlmSrgZirABxm
8A7TWjO0fTiocEmWpX428y4+y2cVQm0/yFNvkRzT1q/wy2PjYBUWYDRsRzToGelD
L8phB7wAnFY04Rj5qYYDqUQtsp9/fI7o4wIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FD7whG5KrRLWqhZo7EVVzhGMpJACMB8GA1UdIwQYMBaAFER1pgJuiBjp33bgpGhZ
M/4z7rokMA4GA1UdDwEB/wQEAwIHgDCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5j
Oi8vci5tYWdlbGxhbi5pcHhvLmNvbS9yZXBvLzFjMWJiYjM0LWMxNjItNGZkNS04
OWM0LTRhN2UzMjYzZTQ1MC00LzAvNDQ3NUE2MDI2RTg4MThFOURGNzZFMEE0Njg1
OTMzRkUzM0VFQkEyNC5jcmwwgZUGCCsGAQUFBwEBBIGIMIGFMIGCBggrBgEFBQcw
AoZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMxYmJiMzQtYzE2
Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTMvMC80NDc1QTYwMjZFODgxOEU5REY3
NkUwQTQ2ODU5MzNGRTMzRUVCQTI0LmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0G
CCsGAQUFBzALhoGAcnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8vMWMx
YmJiMzQtYzE2Mi00ZmQ1LTg5YzQtNGE3ZTMyNjNlNDUwLTQvMC8zNzM0MmUzNTMw
MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTMzMzczMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAEoyBzANBgkqhkiG9w0BAQsFAAOCAQEAwy0syCwBZqmW1ncB6OI3cdvUKlLg
LsrPGZ73N9tOe2zZsMhHDI1FY39uVBmK4pgT++EQEmksSEHLzWOGSKjycnJvoDNb
cm1ySjueMvB62szLvbr0wrqG8pdhfqIQU/KKZamjKpT4sEUmrHmxGWAeV6Hqbxgf
gcDTG4Wn//Q4qD4MRYjMFYAsabWHpwrBBuPeqQeWBDXWTPzWQ+MEjIxjOr603J8f
1hGr0518xktVHfbiVDZZW3aN00CtBovVhuXWTmQBXyrX+IYhFNU1LXVR11K6h40C
nAYYRrg3Y5wX8brA82a35W8TD+E0PnDkACJkww266K4OuI+LKLD8RJ7zWw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:54 2023 by rpki-client on console-ams.rpki-client.org