Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136302e302f31392d3234203d3e2031323339.roa
File:                     36342e35302e3136302e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          VWASve/OQQB5AZGs7w+OzmgDzN8A1A+BO2G+5XgXn3k=
Subject key identifier:   DE:61:2F:84:A4:A0:BA:C0:A6:F8:54:50:7A:23:94:3F:5A:61:23:20
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       7E82AD2542551F1EEEC9475590D9C0A8862C600E
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136302e302f31392d3234203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:10:07 +0000
ROA not before:           Mon 18 Jul 2022 14:05:07 +0000
ROA not after:            Mon 17 Jul 2023 14:10:07 +0000
asID:                     1239
IP address blocks:        64.50.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:ad:25:42:55:1f:1e:ee:c9:47:55:90:d9:c0:a8:86:2c:60:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:07 2022 GMT
            Not After : Jul 17 14:10:07 2023 GMT
        Subject: CN=DE612F84A4A0BAC0A6F854507A23943F5A612320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:99:a1:c1:c7:31:bd:58:9b:db:ac:b1:1f:
                    f6:a5:a8:5d:b3:d6:69:b7:69:be:05:29:cf:c3:00:
                    5c:df:97:ee:fa:b9:5c:9b:35:ab:fa:c1:eb:eb:68:
                    af:08:b3:2a:ae:7d:8a:99:da:03:aa:60:20:b3:ee:
                    92:9f:ae:4e:e7:94:45:b9:00:e7:b4:9b:25:ec:ea:
                    77:ef:96:d1:a2:72:df:09:87:9f:86:84:94:58:f7:
                    59:09:a2:66:04:9a:06:d9:d0:c1:f2:24:06:09:b2:
                    48:df:54:70:8d:4a:47:02:06:e1:54:86:49:8e:12:
                    33:5e:28:e9:58:c3:2a:6d:7a:61:b5:1b:19:e5:70:
                    42:1f:fb:65:18:37:f8:e0:04:8f:a0:5c:fa:c5:94:
                    09:0e:be:70:da:24:b9:03:b6:71:42:ab:c4:9b:f3:
                    56:90:9d:ff:b9:90:fd:41:1f:94:7f:37:5a:bd:16:
                    6c:5e:93:be:3f:35:61:8f:25:e6:83:fa:f0:b5:ef:
                    4b:d0:3e:ad:80:63:59:43:c2:e9:4a:aa:f4:30:67:
                    ce:cc:a5:bb:93:9d:72:6a:8b:bb:62:dc:f3:90:1c:
                    b2:b0:b4:79:24:f8:dc:db:1c:31:06:a5:0b:06:c4:
                    aa:8c:00:8e:8c:b7:c1:53:b4:9b:2f:97:6f:55:79:
                    07:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:61:2F:84:A4:A0:BA:C0:A6:F8:54:50:7A:23:94:3F:5A:61:23:20
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136302e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:57:f8:f3:f1:58:b3:8f:90:95:8d:7f:ee:4b:a7:93:6c:
         8e:f6:44:ff:8a:b3:b4:d6:e9:d3:9c:73:76:6a:ca:1b:9e:3a:
         b3:5f:88:5d:8f:6f:9a:92:ba:cd:47:aa:d6:05:d6:c3:cb:16:
         dc:99:b0:3c:e9:99:80:f5:46:6a:9d:10:db:a1:63:b5:86:1d:
         5b:24:95:66:ee:ee:1b:6d:b5:33:e1:26:dc:01:94:70:62:61:
         63:e8:b3:1d:36:a0:2a:0c:04:c3:26:da:35:b3:f5:56:e3:43:
         2e:59:95:d5:18:52:6f:04:58:5c:d4:fd:26:82:f8:91:4f:f9:
         62:cf:dd:fc:a6:e5:19:1f:6d:ff:c7:95:68:63:04:9f:fd:93:
         e5:39:98:e4:ad:5f:0b:7e:bf:0b:6f:1f:5e:57:ae:ee:5e:b7:
         e1:a3:58:5e:17:fa:49:d7:1e:c6:bf:5d:f4:5a:55:06:97:a9:
         91:e0:87:e6:e4:b6:61:dc:2e:d8:66:62:62:7f:25:40:84:55:
         9a:9f:76:92:4d:ec:f5:21:5c:c1:e7:fd:de:af:90:a3:10:08:
         75:e3:2a:9d:69:a2:12:c8:9c:e0:94:db:fd:cc:5f:4a:f4:44:
         7d:0f:4d:5a:f9:ac:14:e2:24:53:44:ad:22:85:c8:27:54:6b:
         5e:58:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----