Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136302e302f32322d3234203d3e203439393939.roa
File:                     36342e35302e3136302e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          0b9XY5/fsgepyob3Rs0Q5VzjpH+ckg9iUNU0SEdiITU=
Subject key identifier:   DF:91:15:9D:0C:8E:CB:96:DC:62:3B:35:12:0B:00:E5:B2:BF:66:30
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4B2D78432CA69A5346E339E14B46BFC98EE8ACE3
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136302e302f32322d3234203d3e203439393939.roa
Signing time:             Wed 16 Nov 2022 11:29:05 +0000
ROA not before:           Wed 16 Nov 2022 11:24:05 +0000
ROA not after:            Wed 15 Nov 2023 11:29:05 +0000
asID:                     49999
IP address blocks:        64.50.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2d:78:43:2c:a6:9a:53:46:e3:39:e1:4b:46:bf:c9:8e:e8:ac:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:05 2022 GMT
            Not After : Nov 15 11:29:05 2023 GMT
        Subject: CN=DF91159D0C8ECB96DC623B35120B00E5B2BF6630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:83:0e:a3:57:ff:ff:48:32:07:9c:6a:f7:0a:
                    91:56:99:1c:ba:64:35:5b:ba:b6:a3:62:19:da:79:
                    3a:d5:9d:f2:12:1f:29:1e:fd:1e:85:45:35:f0:7e:
                    b1:1a:9c:6b:a1:bc:54:ce:b1:73:54:8c:db:5c:ff:
                    37:f8:bb:85:dc:5c:8a:32:a3:87:93:ab:f0:8a:5d:
                    b3:52:35:4f:99:f3:ae:12:0e:cb:5e:cf:12:80:67:
                    92:34:b6:cd:6c:e7:a5:28:d4:d8:a3:17:09:c8:1b:
                    d0:3b:86:c5:84:ba:3b:9f:ac:2d:77:d6:ba:0c:9f:
                    9f:9f:07:46:51:54:d6:a0:e5:69:04:7b:14:f4:da:
                    58:0d:64:f1:fd:ee:63:15:5f:82:66:08:46:eb:25:
                    19:76:e1:f3:f9:fd:5f:ec:63:16:37:65:2b:25:41:
                    08:47:89:aa:de:f1:86:6e:49:54:4a:ea:d0:17:aa:
                    d5:3f:a2:c0:8b:93:9d:8b:a8:88:54:b6:cc:9b:c9:
                    a0:a8:4b:01:26:fd:45:cb:cd:f4:d1:0a:3d:dc:9a:
                    99:d9:f7:af:04:26:ae:4c:28:71:c9:1f:1e:c1:1e:
                    79:44:c1:f0:3f:78:da:b7:48:a3:7a:cd:1b:e2:1e:
                    d7:e4:e3:d7:49:f0:80:38:ee:59:cc:03:9b:12:28:
                    88:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:91:15:9D:0C:8E:CB:96:DC:62:3B:35:12:0B:00:E5:B2:BF:66:30
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3136302e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:92:51:57:70:1c:cc:2f:61:5b:2e:af:f6:62:ee:db:43:02:
         1d:6d:97:d2:1f:27:1a:57:e7:52:20:5b:40:e2:f3:74:18:ce:
         ef:a4:23:48:8d:eb:cb:b7:44:7f:23:97:19:ee:0b:3d:2b:d2:
         c4:dc:69:6f:76:62:d4:c6:a2:4c:d8:21:2f:19:2a:96:c9:9a:
         99:d1:28:03:74:78:04:07:2f:9a:f3:47:7c:35:3c:28:df:10:
         7d:a0:31:d4:d0:ed:2f:20:6a:99:0a:1c:92:ee:95:47:65:3d:
         94:39:c6:27:4c:e8:5e:0c:9e:76:4e:75:a1:c6:99:0b:bd:62:
         da:ed:ac:34:05:20:67:30:09:17:d1:37:3f:c9:72:04:75:41:
         b8:46:3f:6e:7b:7a:9d:1d:9f:b9:d9:52:6d:cc:14:c6:91:1d:
         fa:9d:75:e1:f4:7c:e2:cb:7e:af:f4:43:43:79:5a:d2:5a:7e:
         ae:6a:41:db:a4:db:93:34:64:75:f7:68:5d:24:e7:36:05:8c:
         be:f2:f8:19:48:37:ae:ef:61:8f:c6:be:33:24:32:62:93:27:
         20:35:4b:77:fb:86:e3:8f:ad:7a:01:6d:18:cd:18:fd:c8:4d:
         11:32:84:0e:1f:53:ea:a9:32:68:d1:33:08:65:47:c9:5d:76:
         73:d5:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----