Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3137352e302f32342d3234203d3e203631313338.roa
File:                     36342e35302e3137352e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          GvxPy0bzArkxzOHfHuO8k0saTINAZn/pcwxp0XWKUFA=
Subject key identifier:   B8:5C:12:2A:83:37:C2:F2:D7:22:AF:2D:E8:85:3F:C5:0D:AA:05:AE
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       3338B45809AB722544C84F4BF3C6AB52C45815A9
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3137352e302f32342d3234203d3e203631313338.roa
Signing time:             Mon 21 Nov 2022 10:56:15 +0000
ROA not before:           Mon 21 Nov 2022 10:51:15 +0000
ROA not after:            Mon 20 Nov 2023 10:56:15 +0000
asID:                     61138
IP address blocks:        64.50.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:38:b4:58:09:ab:72:25:44:c8:4f:4b:f3:c6:ab:52:c4:58:15:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 21 10:51:15 2022 GMT
            Not After : Nov 20 10:56:15 2023 GMT
        Subject: CN=B85C122A8337C2F2D722AF2DE8853FC50DAA05AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:be:d4:36:54:87:98:c1:f7:7d:4c:58:ae:
                    96:92:ca:cb:d2:bb:fd:1c:d9:eb:c7:4b:c5:33:11:
                    ac:7a:a6:46:d2:34:c0:95:d1:b6:90:cd:9e:ae:61:
                    64:02:97:26:2b:ef:7f:da:f8:b3:5b:5c:56:35:f7:
                    67:bd:f2:f0:af:01:2d:f7:c4:d2:ed:93:29:56:7d:
                    42:d5:5a:0d:47:71:43:4c:25:1a:df:5d:ad:69:03:
                    48:d9:1e:fb:c4:0d:33:fb:fe:fc:1a:52:a5:02:f0:
                    f9:f1:29:48:80:c1:6d:c6:ea:e0:3b:b3:a5:a7:19:
                    80:08:3f:79:b1:cf:5a:ce:38:0f:8f:22:b2:9a:ee:
                    e5:24:30:3a:0d:16:8d:a8:49:a1:f0:35:15:0c:5f:
                    a5:98:c7:37:22:67:fa:a1:6e:83:23:2c:71:70:ed:
                    3f:b3:ff:2a:39:41:78:68:61:cd:b9:c1:42:43:89:
                    37:02:e1:a9:89:7e:1f:1a:1b:83:c3:8f:a3:03:aa:
                    65:0c:6a:d7:c0:25:d7:3f:eb:e1:91:fb:92:45:a2:
                    cd:66:a5:41:c3:d0:98:2c:0b:9d:30:bb:90:85:12:
                    a4:ff:31:c5:55:85:5e:51:dc:db:10:6c:24:54:c0:
                    ae:70:70:aa:9f:3a:08:27:3d:f7:49:51:62:8e:dc:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5C:12:2A:83:37:C2:F2:D7:22:AF:2D:E8:85:3F:C5:0D:AA:05:AE
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3137352e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f7:d1:cb:30:5f:55:c9:b1:cc:70:c0:b3:e6:76:61:fc:43:
         57:b2:f1:7e:1f:60:1a:77:c2:3f:bb:ea:2d:69:22:46:6d:07:
         78:72:7b:dd:ba:df:5c:32:54:52:73:2f:0d:19:b3:d1:34:cb:
         54:ac:35:1c:df:34:27:aa:36:cd:98:5f:d3:ee:6b:bd:a6:01:
         5d:dc:e9:dd:01:76:07:49:84:27:fe:73:48:5a:db:91:5a:30:
         16:51:92:b6:f5:d0:c3:89:c1:9f:7a:b0:3e:87:e4:36:11:1c:
         6c:b7:8b:0a:c6:39:d7:81:27:a6:d5:e9:4e:29:c9:13:08:3d:
         4c:7b:d9:24:e7:a6:a0:4a:1f:23:7c:30:6e:11:f6:a1:16:55:
         da:bb:47:1d:6e:bd:4d:97:53:a1:4f:25:1b:d5:c9:e2:de:d5:
         76:0f:61:a1:83:e5:a3:73:7d:62:f0:e8:e1:73:e1:cf:cd:af:
         0f:b9:7f:5c:0a:f8:31:40:dd:17:12:f4:e7:0a:50:4e:a6:c9:
         f2:6f:d1:33:d3:e8:3f:6c:04:80:1e:c9:b5:12:e8:fa:3b:4b:
         d0:b9:7a:13:e4:cc:ca:01:5e:6d:cc:62:b0:b6:d1:de:e1:91:
         47:92:0b:f7:43:3d:47:c5:29:16:7a:ac:9a:d4:8c:0e:3d:e5:
         31:22:6b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----