Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31322e302f32342d3234203d3e203235333639.roa
File:                     37342e35302e31322e302f32342d3234203d3e203235333639.roa (raw, json)
Hash identifier:          7PYBHxjJbToyPLFptJBd8iOUO0YL4XK1TOFf93SR/qE=
Subject key identifier:   57:EB:F5:30:14:D5:9A:4C:1A:6A:18:6E:12:0C:1B:52:D5:D7:C0:95
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       2EE02915AAC574C54362DC98B80FADFE8CC3C6C1
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31322e302f32342d3234203d3e203235333639.roa
Signing time:             Mon 18 Jul 2022 14:09:57 +0000
ROA not before:           Mon 18 Jul 2022 14:04:57 +0000
ROA not after:            Mon 17 Jul 2023 14:09:57 +0000
asID:                     25369
IP address blocks:        74.50.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e0:29:15:aa:c5:74:c5:43:62:dc:98:b8:0f:ad:fe:8c:c3:c6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:57 2022 GMT
            Not After : Jul 17 14:09:57 2023 GMT
        Subject: CN=57EBF53014D59A4C1A6A186E120C1B52D5D7C095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:59:ed:d6:3c:df:7c:c9:1a:48:4a:b8:b1:
                    bb:85:d8:2c:f1:8d:33:47:44:0b:cd:6c:73:23:a6:
                    0c:9e:6b:8c:2f:17:48:41:55:4c:93:29:f4:f6:8a:
                    b9:65:2e:17:60:a2:09:d3:cd:26:fd:0c:80:cc:f0:
                    f2:c0:27:67:b6:d8:df:01:eb:f5:22:90:d1:25:8b:
                    2d:99:99:27:d8:32:21:68:a2:63:ea:d0:e2:aa:40:
                    b1:47:ba:54:f4:31:c8:b5:6d:a7:ea:be:f0:3c:fe:
                    8e:18:9b:7c:2c:9c:82:29:e1:6e:e6:fa:cd:0e:0c:
                    2a:6c:50:86:97:c3:f1:d1:b5:88:e8:81:23:b7:a2:
                    6d:9b:5d:2f:c5:bf:0a:01:ef:d8:db:fc:de:c5:46:
                    d4:97:18:7f:0d:5f:ca:09:6a:27:98:16:6c:04:0b:
                    ab:89:13:69:b1:26:d0:3d:5e:a0:ac:4e:59:7a:e8:
                    00:52:f6:d6:22:03:d2:a9:d8:37:f4:b0:0a:c4:ae:
                    1b:aa:a2:b2:23:c3:e4:96:ce:98:9b:58:94:15:41:
                    2f:b2:6d:ea:4c:af:05:23:f5:36:bd:50:ef:18:d7:
                    65:00:9b:f9:8e:35:d9:cf:db:a2:ec:c6:9c:f2:50:
                    30:8c:de:33:01:b3:ed:80:d2:48:b4:89:84:83:34:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EB:F5:30:14:D5:9A:4C:1A:6A:18:6E:12:0C:1B:52:D5:D7:C0:95
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31322e302f32342d3234203d3e203235333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:30:14:d2:1d:04:45:4f:73:0b:f4:88:6b:78:02:a3:30:3d:
         e7:d9:70:76:9b:ee:42:fa:31:e6:33:d9:95:50:02:38:67:79:
         7d:5b:af:94:8d:e2:78:47:20:04:02:a2:87:33:e4:20:6e:82:
         98:fb:03:93:ce:90:71:55:3c:43:df:e6:e9:43:0b:11:4f:bd:
         1a:f9:d6:6b:9b:af:4d:65:65:eb:fc:aa:a6:50:10:59:0d:ed:
         6d:ef:55:d3:bc:5c:bd:8f:8b:cb:d8:53:eb:5e:3c:32:26:b4:
         89:9f:f8:a1:f5:5d:6d:dd:43:f2:bf:92:87:de:a8:9d:4a:c1:
         d1:5f:ce:2e:eb:bf:d1:67:45:07:82:81:5b:c5:19:33:02:a6:
         95:44:ab:d8:55:e2:12:07:9c:5b:10:e3:fa:69:05:50:88:88:
         70:8c:ed:09:02:b6:8d:83:3f:53:27:4b:f4:ee:db:61:97:d6:
         92:00:57:1c:74:5c:15:81:d6:f1:30:d9:ef:5a:35:0e:dc:a7:
         ad:3e:88:bb:c6:f6:94:3c:9f:7f:4d:41:78:9f:2d:b4:ef:a0:
         51:e9:bb:22:d8:e1:fa:ba:0e:9f:1c:df:14:18:22:aa:74:4f:
         ef:7f:a9:9e:c2:11:29:d8:0b:c4:60:83:d5:a6:17:13:0f:8c:
         6a:a7:ed:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----