Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e302e302f31392d3234203d3e203139343337.roa
File:                     37342e35302e302e302f31392d3234203d3e203139343337.roa (raw, json)
Hash identifier:          mTHtMDlOiS/i/l9YHaoMQ+U2UlptlqezSW1Tl8q2PHU=
Subject key identifier:   85:02:8F:B9:B4:7E:AC:1B:EB:4C:A7:79:52:39:72:E0:E9:D7:77:78
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       6F87B6AFF8D8C6994AE8CA4ABEFFA42B8899889C
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e302e302f31392d3234203d3e203139343337.roa
Signing time:             Tue 14 Dec 2021 07:37:19 +0000
ROA not before:           Tue 14 Dec 2021 07:32:19 +0000
ROA not after:            Tue 13 Dec 2022 07:37:19 +0000
asID:                     19437
IP address blocks:        74.50.0.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:b6:af:f8:d8:c6:99:4a:e8:ca:4a:be:ff:a4:2b:88:99:88:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: Dec 14 07:32:19 2021 GMT
            Not After : Dec 13 07:37:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:2b:9e:85:4f:f3:3c:65:08:ca:a0:3f:74:
                    1f:ce:54:01:be:f3:33:c4:96:52:6b:51:94:17:61:
                    92:4f:43:cd:69:8b:0c:c1:30:3e:86:23:85:92:f0:
                    b1:7e:ee:1f:74:16:74:ba:f4:4f:20:01:8d:8f:7d:
                    5d:8e:2e:6e:62:8a:29:93:38:6b:bb:d7:09:23:17:
                    81:8b:6a:1a:be:a1:18:b8:0a:b8:91:b9:aa:ec:1a:
                    1c:35:60:8a:f0:a0:9d:ae:c4:29:b7:cf:80:06:16:
                    85:46:76:e6:ca:1a:39:c6:ee:22:9f:25:11:49:b8:
                    57:4e:96:41:62:06:c2:d6:8f:b4:95:f1:44:c4:ca:
                    2a:81:21:7b:7d:75:f3:35:03:10:fe:e7:a8:ed:cd:
                    0c:63:23:f5:b3:2f:81:71:5e:b0:74:43:43:3d:66:
                    c9:34:e7:bd:22:15:98:23:a4:1d:73:65:f8:98:8c:
                    e6:36:a6:df:f1:33:87:be:4e:f3:dc:fe:15:e6:17:
                    aa:69:5b:16:b8:af:81:90:56:92:6c:54:83:21:5f:
                    23:3b:b0:04:6f:e4:75:93:f9:8e:d4:0e:88:18:cf:
                    5f:c7:04:57:84:05:c3:77:18:58:f1:3b:a0:e8:ca:
                    c2:f7:90:5b:dc:4b:49:9b:e1:7c:f7:7e:5f:96:ef:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:02:8F:B9:B4:7E:AC:1B:EB:4C:A7:79:52:39:72:E0:E9:D7:77:78
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e302e302f31392d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:5d:17:ad:23:64:6d:d2:b0:af:0d:3b:e8:53:71:d9:f1:c7:
         26:04:dc:05:74:6c:53:ad:39:29:42:ce:2f:a2:e3:cb:11:65:
         4a:9d:d0:a1:eb:ed:fe:88:de:91:95:72:10:0d:5e:78:d1:17:
         75:a8:69:10:c2:1c:fe:9b:a0:b4:35:9a:b1:d1:85:ac:bf:ea:
         aa:a3:86:fe:7d:d4:2b:a5:31:1b:c9:09:d6:0b:9e:08:1d:aa:
         28:75:07:f8:93:4c:fc:3f:46:a3:ef:0d:2e:70:61:19:b2:bf:
         a2:bb:b4:62:c3:f2:ca:08:24:52:32:0a:c8:7e:55:e8:a5:d2:
         92:7e:e5:12:66:a7:2a:ab:19:3a:28:21:0a:2b:e3:7a:62:6f:
         28:ba:03:e0:1a:1e:44:9d:90:bc:41:4f:db:ed:51:61:5d:16:
         a1:4e:e3:2b:2b:60:46:94:03:2c:7f:21:4a:ed:71:65:b1:1d:
         39:7c:12:de:58:35:ed:23:c3:8c:ef:03:f7:28:fc:7b:ea:12:
         ff:64:6d:4b:6b:7c:68:aa:18:e5:d2:01:4a:fd:d6:0b:19:e9:
         48:fe:d1:1d:6f:54:0d:35:c6:9c:02:e4:1a:c8:95:81:ad:a2:
         f5:0f:b6:2a:ee:eb:47:4f:00:16:63:0f:1d:f8:76:21:c4:77:
         73:02:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:23 2023 by rpki-client on console.sobornost.net