Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e312e302f32342d3234203d3e203439393939.roa
File:                     37342e35302e312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier:          3jbmvHJBbEQ6VLQOQwuNqyfnU58299n3fvSthJsJOaI=
Subject key identifier:   8B:95:14:AD:53:CA:F9:CA:7E:1A:3F:A4:42:A6:A9:A5:9D:A6:2A:BD
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       CA9B6805A6791291979EAD40ABA58BE424716B
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e312e302f32342d3234203d3e203439393939.roa
Signing time:             Mon 18 Jul 2022 14:10:11 +0000
ROA not before:           Mon 18 Jul 2022 14:05:11 +0000
ROA not after:            Mon 17 Jul 2023 14:10:11 +0000
asID:                     49999
IP address blocks:        74.50.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ca:9b:68:05:a6:79:12:91:97:9e:ad:40:ab:a5:8b:e4:24:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:11 2022 GMT
            Not After : Jul 17 14:10:11 2023 GMT
        Subject: CN=8B9514AD53CAF9CA7E1A3FA442A6A9A59DA62ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:3d:df:fa:c6:4c:d3:f2:a8:ed:07:6a:ab:
                    9b:f6:9b:51:0f:d1:58:37:e8:cb:a5:3f:c4:c9:06:
                    c1:f1:f2:ce:aa:a3:8d:d7:67:7c:ed:d1:8a:2d:6e:
                    9d:9a:d3:ee:db:28:53:6f:1e:a0:ab:30:6a:04:fe:
                    c4:2b:5f:85:5f:dd:6f:f1:31:fc:0d:82:81:1e:bb:
                    c8:9d:66:65:22:b9:89:f7:de:8a:20:2f:ee:08:00:
                    64:54:07:b0:06:3e:c3:db:74:73:74:4d:f7:75:3b:
                    4f:ca:38:7c:9f:dd:9b:40:ca:5c:8f:f8:f4:82:22:
                    6a:83:fa:b7:a7:f3:dc:01:5d:4b:96:8d:25:55:13:
                    6a:6b:7b:6f:56:d4:7f:3d:49:82:d8:27:ef:8b:2e:
                    05:92:fd:8c:a9:a9:e1:f2:f4:ee:00:3c:8a:a2:1e:
                    25:3b:f4:a3:99:e3:b7:bc:a7:3b:0d:21:1f:cc:44:
                    95:a9:fd:58:85:55:68:83:e2:d7:e5:fb:98:23:65:
                    3d:67:82:a6:dd:3c:e6:b9:59:66:15:cc:c3:1c:f9:
                    7c:d6:bf:38:3f:5f:84:72:56:d8:b5:fc:11:ac:56:
                    54:80:d7:60:04:71:a5:1a:9a:19:14:cc:00:b5:e8:
                    e5:06:56:27:1b:33:0c:64:14:35:e3:b9:26:00:3b:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:95:14:AD:53:CA:F9:CA:7E:1A:3F:A4:42:A6:A9:A5:9D:A6:2A:BD
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e312e302f32342d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:da:f7:21:7e:58:77:55:34:e6:ec:ef:a4:b1:ed:87:cd:f3:
         ff:7a:49:eb:96:30:31:4e:5b:5f:db:b8:a9:cb:7e:8b:86:b7:
         54:21:ca:41:85:6c:ee:e7:e0:bc:47:ea:78:88:68:4c:8d:2a:
         3c:e5:1f:08:26:b0:01:07:ac:e4:bd:67:7a:bf:07:e2:b3:b4:
         e2:b4:72:53:2d:61:72:7f:f3:3f:2d:57:9c:15:6e:02:90:19:
         46:50:47:01:07:68:b7:06:6c:1d:23:f2:f7:86:23:0e:79:2c:
         e4:77:c2:6b:cf:92:6e:9c:c5:fa:4d:ee:f6:c0:9d:f0:cc:e9:
         9c:a1:57:5b:62:fd:2f:3f:24:7a:f3:2a:bb:7c:21:b2:ea:19:
         97:44:70:54:40:6e:f0:0e:c9:a2:40:95:f4:65:a1:fb:c5:99:
         e7:da:df:c9:1d:20:d7:0d:20:78:b1:35:bd:63:b9:c5:4f:67:
         19:39:5d:a7:34:4a:eb:47:9a:54:aa:ab:aa:86:52:08:b8:42:
         c3:65:81:a1:17:e4:6b:2d:27:1d:67:cc:b2:26:35:66:74:2c:
         6a:10:71:14:7b:d0:1b:79:e0:f3:2f:36:9e:da:c2:31:06:71:
         51:84:2b:53:3f:41:5c:e9:40:a3:f5:ae:d3:32:dc:03:f6:8f:
         bf:0a:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----