Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3138392e302f32342d3234203d3e203439393939.roa
File:                     36342e35302e3138392e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          EcIbMsbvqw59P45atTIUlE7rjm0raMXHgzWh7bHsbms=
Subject key identifier:   CB:D2:78:6A:F2:C1:15:E1:BB:18:1E:38:61:86:DD:7B:00:65:AA:50
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       358B5F87A6A5A3A67A2D256633447438C07524FF
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3138392e302f32342d3234203d3e203439393939.roa
Signing time:             Wed 16 Nov 2022 11:29:05 +0000
ROA not before:           Wed 16 Nov 2022 11:24:05 +0000
ROA not after:            Wed 15 Nov 2023 11:29:05 +0000
asID:                     49999
IP address blocks:        64.50.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8b:5f:87:a6:a5:a3:a6:7a:2d:25:66:33:44:74:38:c0:75:24:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:05 2022 GMT
            Not After : Nov 15 11:29:05 2023 GMT
        Subject: CN=CBD2786AF2C115E1BB181E386186DD7B0065AA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:57:dd:a9:ad:b6:e3:a3:6a:cc:0d:07:95:
                    f9:90:e6:bf:c8:4b:bb:c7:30:2a:5b:bd:a9:a4:e8:
                    9b:ac:35:22:b6:3b:2e:23:47:27:73:18:60:a6:b4:
                    8f:84:f7:b4:bf:21:ae:49:1c:f4:67:ae:ae:6e:e3:
                    0b:98:b4:50:38:4a:c0:56:bd:5d:4b:8d:52:cc:95:
                    54:51:96:70:bc:73:11:ee:80:be:a3:70:68:de:90:
                    33:40:3f:e8:1d:3f:1d:f0:65:43:eb:33:5b:c4:4e:
                    cd:6b:12:9e:cb:7b:92:8c:d8:e4:76:af:94:8c:9c:
                    50:06:a6:70:17:22:ab:24:d0:0e:7c:9b:43:3b:bd:
                    ac:2c:5a:d2:3b:76:f5:21:32:85:0e:94:36:08:24:
                    b0:31:f9:89:1d:ec:7d:1b:09:78:7f:5c:fc:27:13:
                    f6:3d:73:53:ff:1e:06:f6:0b:ff:cd:0a:f2:ce:62:
                    8e:28:c0:59:6f:2f:1a:a5:3e:9e:73:c3:69:ec:3d:
                    13:1b:85:83:f6:82:70:e2:0e:4b:d5:0d:8b:1f:a5:
                    7b:ed:c5:df:68:f8:89:c7:6c:9d:eb:3b:0e:ac:d3:
                    68:c7:34:c4:fe:fa:18:44:9b:ef:af:85:4c:e8:a7:
                    9d:d2:d3:be:76:90:a3:06:ef:93:04:3b:86:be:52:
                    7b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D2:78:6A:F2:C1:15:E1:BB:18:1E:38:61:86:DD:7B:00:65:AA:50
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/36342e35302e3138392e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b2:28:e8:8c:13:52:73:e1:b7:e9:0c:f5:26:e4:a6:a4:3b:
         03:16:61:44:3d:6b:0b:3c:11:e3:94:8a:39:1f:a7:60:9e:ef:
         a5:3a:1d:66:e0:f8:e6:a0:73:7d:7c:9a:c9:61:24:be:d3:68:
         0b:1e:12:89:65:87:f7:a4:9b:33:7d:ab:c8:91:e5:13:0f:b2:
         f5:f9:f7:9c:94:48:74:09:a7:ec:4c:3e:68:c1:37:85:fc:69:
         b9:f4:86:b1:67:c1:39:68:e4:62:dc:95:06:e4:22:f1:47:4a:
         50:6c:08:3a:a4:76:a4:8c:0b:ee:48:bd:a6:49:75:47:4d:a1:
         3a:0a:6d:23:5a:3c:f7:0d:89:0f:c6:d9:6d:95:a6:d5:ed:aa:
         59:bc:1f:e1:56:ef:3a:a8:60:a4:1b:19:b0:2e:c6:98:a7:70:
         3f:4a:08:fe:c1:63:b5:de:49:97:fa:4d:ad:a6:0c:38:d6:63:
         91:5c:89:41:1e:45:46:64:e4:cd:66:87:e2:79:82:54:8d:64:
         9b:4f:8a:e3:ad:d7:71:6d:f7:11:03:82:74:82:68:df:c5:f3:
         d4:e2:f7:07:76:9d:bd:cb:55:24:8d:4e:9a:44:b2:69:6b:b9:
         8c:87:24:a0:31:f8:41:0c:7a:fe:bb:e1:63:ec:31:76:df:da:
         c6:8c:67:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:25 2023 by rpki-client on console-ams.rpki-client.org