Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e302e302f32342d3234203d3e203439333932.roa
File:                     37342e35302e302e302f32342d3234203d3e203439333932.roa (raw, json)
Hash identifier:          vHHRIWtxcw30c2b0gXJh4KY9CJz10FDrLHlxo8C+FRg=
Subject key identifier:   A8:19:48:B9:A8:4D:DA:4F:01:52:48:AE:42:B3:5C:57:A0:07:D4:11
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       698A6E1020238A106E274ECC8BD9EBF580F28D27
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e302e302f32342d3234203d3e203439333932.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     49392
IP address blocks:        74.50.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8a:6e:10:20:23:8a:10:6e:27:4e:cc:8b:d9:eb:f5:80:f2:8d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=A81948B9A84DDA4F015248AE42B35C57A007D411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:fd:55:c0:a6:5b:bf:d1:57:63:71:09:2e:
                    df:67:63:a8:00:63:45:a3:4e:1c:2b:4a:3b:1e:c5:
                    d5:93:ce:45:7f:ec:0c:c0:86:8f:12:13:2f:f9:bc:
                    de:36:bc:64:d0:b4:18:83:c4:81:ce:3d:1a:58:99:
                    12:2d:88:8b:42:b8:13:18:da:15:e9:69:17:ba:52:
                    4a:e7:9e:d9:e5:86:f6:0e:37:e4:33:be:6d:4a:09:
                    11:3b:95:e9:1f:81:44:34:c8:79:0c:bd:55:fd:eb:
                    78:dc:d5:2c:39:df:1c:ab:62:23:0c:d6:1e:6b:42:
                    ee:65:c8:34:95:8c:79:4f:77:62:7a:da:22:bc:e0:
                    96:95:db:a0:32:5e:2a:81:2c:e7:e6:29:19:a7:fd:
                    e2:58:db:6d:68:40:e2:45:5d:74:c9:e8:14:cf:4c:
                    f2:f7:53:70:56:db:61:9d:97:aa:dd:5b:d2:62:b2:
                    66:51:0c:0c:8c:fc:e6:e4:72:6b:9e:74:87:cd:88:
                    ed:dd:a4:9d:02:ef:c0:90:de:65:2c:3d:b2:6a:6c:
                    ee:4e:f4:11:2c:33:bc:55:cb:6f:69:68:c1:8c:d8:
                    72:b3:06:83:26:d7:23:3a:31:b6:80:6f:4a:4e:8e:
                    3a:fa:52:44:92:bf:4d:5e:b9:1a:2b:bc:78:68:d7:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:19:48:B9:A8:4D:DA:4F:01:52:48:AE:42:B3:5C:57:A0:07:D4:11
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e302e302f32342d3234203d3e203439333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a0:7f:88:a2:38:c6:bc:d0:53:4b:32:cb:83:d2:3a:33:77:
         98:57:43:22:24:8b:7e:aa:b7:f6:f7:29:8b:12:c9:e5:ae:67:
         3f:28:8b:00:7f:df:ed:23:0b:03:c9:54:ed:18:00:f5:5a:00:
         dd:c9:c4:3e:52:3b:fa:cb:1f:c5:b4:6d:7a:0e:d9:59:59:74:
         18:86:76:42:38:f6:d0:1d:51:2d:e0:16:05:a6:21:e0:1d:1e:
         52:66:86:16:9c:e4:17:48:f6:8c:e1:67:c9:63:b4:ca:73:14:
         b7:33:5d:e4:9a:95:88:07:cf:11:25:78:b5:a8:b5:90:ea:e2:
         eb:03:48:46:73:3b:6f:e8:49:7f:21:cd:30:66:bc:22:f6:1f:
         58:7f:e2:a1:e3:cf:fb:89:a9:14:c9:21:cf:cd:d8:88:bc:9e:
         7c:53:be:de:5f:6e:b9:df:af:e7:27:ca:da:43:6f:4b:e0:8c:
         ab:c7:f8:3b:d7:81:9e:f9:fd:17:b1:d5:66:b6:32:97:36:8e:
         90:ff:db:bd:15:d8:8e:ed:76:f8:cb:b7:db:13:ff:37:46:b9:
         8b:2c:c8:92:c0:75:f7:74:ba:37:9a:62:57:f5:e0:ac:2c:09:
         a4:f9:30:6b:2f:a7:dc:a8:60:31:19:93:f1:28:68:6d:93:c1:
         88:95:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----