Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32382e302f32322d3234203d3e20323131353835.roa
File:                     37342e35302e32382e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          WlvcmK9ddjDOOdADYpsYGtFNoK04VS3aQwmpMeZW50o=
Subject key identifier:   71:39:0B:61:C4:25:97:43:98:93:3F:48:B6:D6:96:BC:F4:56:50:A9
Certificate issuer:       /CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
Certificate serial:       24BA9B62C6E95FC0884E9619DE4548E7F353AB85
Authority key identifier: 44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24
Authority info access:    rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32382e302f32322d3234203d3e20323131353835.roa
Signing time:             Tue 17 May 2022 14:09:25 +0000
ROA not before:           Tue 17 May 2022 14:04:25 +0000
ROA not after:            Tue 16 May 2023 14:09:25 +0000
asID:                     211585
IP address blocks:        74.50.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ba:9b:62:c6:e9:5f:c0:88:4e:96:19:de:45:48:e7:f3:53:ab:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475A6026E8818E9DF76E0A4685933FE33EEBA24
        Validity
            Not Before: May 17 14:04:25 2022 GMT
            Not After : May 16 14:09:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:96:bc:c4:78:93:bd:d9:b6:ed:af:5e:61:44:
                    21:f8:af:0e:b8:c4:d7:eb:6f:d7:b7:2b:35:34:03:
                    47:23:92:fe:1e:da:ad:b5:3a:58:96:45:36:b3:bd:
                    00:26:81:bd:f4:89:e3:b7:74:ad:29:85:a9:75:f6:
                    09:f5:eb:21:06:5c:8f:81:0e:5b:5c:83:95:70:7c:
                    80:30:92:25:4d:90:6c:b7:17:28:45:e2:4f:3c:2b:
                    b5:c2:2c:81:8c:92:74:de:e2:ec:49:c7:cf:a2:1e:
                    97:31:e1:de:82:85:dd:05:16:24:04:d8:02:ca:cf:
                    75:a5:27:ca:a3:b7:f7:e2:45:85:74:a2:9a:d6:9c:
                    63:b1:d7:cf:db:b9:cb:cd:15:04:7e:2d:53:cd:bf:
                    f4:84:47:23:1a:17:18:4b:cb:f0:aa:bb:f3:e3:37:
                    fa:5a:68:41:2b:ee:76:8d:ab:5d:2e:45:69:8f:97:
                    14:ad:11:2c:d6:fa:67:3b:a5:89:a7:e8:0e:f2:cb:
                    65:88:98:33:bb:62:00:5d:14:25:85:40:09:ef:9c:
                    f2:93:3a:07:ea:89:66:16:d1:9b:27:62:b4:12:aa:
                    00:df:22:27:fc:fd:37:b3:de:b0:bd:d4:6c:fc:14:
                    b9:89:3d:29:4f:ef:60:f4:b4:fd:35:2d:5d:44:7c:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:39:0B:61:C4:25:97:43:98:93:3F:48:B6:D6:96:BC:F4:56:50:A9
            X509v3 Authority Key Identifier:
                keyid:44:75:A6:02:6E:88:18:E9:DF:76:E0:A4:68:59:33:FE:33:EE:BA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-3/0/4475A6026E8818E9DF76E0A4685933FE33EEBA24.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/1c1bbb34-c162-4fd5-89c4-4a7e3263e450-4/0/37342e35302e32382e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:04:11:3d:9c:40:fc:cc:88:16:6e:77:7c:34:a5:fa:b7:ab:
         76:c9:ba:17:9d:06:13:ad:0d:d1:79:76:8c:58:16:ed:68:31:
         b9:d2:27:2b:7b:6f:b3:f0:22:fe:62:05:86:34:ba:c9:2d:9c:
         f0:b4:44:4f:f6:0e:ee:31:57:d1:c3:cb:7e:95:a5:e9:12:6a:
         88:0a:46:d8:ac:b5:71:f7:e9:f9:a0:20:f3:cd:3d:6f:e3:9e:
         b9:83:2e:e8:e9:6d:6d:a6:6a:16:05:7a:61:8f:d6:92:eb:f9:
         3f:17:cd:eb:32:e1:f9:ed:26:5b:40:69:b9:bc:af:01:f9:ef:
         82:f0:c6:d6:d9:af:e4:2d:18:f9:70:84:75:12:f4:a0:e2:9e:
         e8:23:61:6c:1a:d2:52:06:0d:dd:81:51:a0:8b:57:73:1b:23:
         18:e3:64:22:eb:9d:a1:ff:c1:f0:ad:3f:13:9c:60:62:24:37:
         5b:b6:0e:8a:c9:3b:8b:77:32:e1:0d:4e:93:2c:17:a6:a9:cb:
         1d:4e:ee:99:12:5c:65:5f:41:fd:dc:0d:22:5c:1c:96:37:ba:
         fb:98:43:5a:80:8e:b9:ec:62:3f:81:11:9e:f6:d4:6b:73:29:
         e4:89:f5:25:20:5b:84:a0:a3:68:7a:de:b4:e5:6c:a9:dd:03:
         f6:12:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 10:19:24 2023 by rpki-client on console.sobornost.net