Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31332e302f32342d3234203d3e203631333137.roa
File:                     37342e35302e31332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          g02gfCN1KyAY6fxK0fXrBqy8khyrjO79j9aYzbx/Aqs=
Subject key identifier:   41:E2:E9:E5:C8:E3:C0:56:97:72:CC:F3:69:85:7A:3A:8D:8E:6A:6E
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       5A92E77A2A70EDBBAD354B57B31FE7644725A007
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31332e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 18 Jul 2022 14:09:54 +0000
ROA not before:           Mon 18 Jul 2022 14:04:54 +0000
ROA not after:            Mon 17 Jul 2023 14:09:54 +0000
asID:                     61317
IP address blocks:        74.50.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:92:e7:7a:2a:70:ed:bb:ad:35:4b:57:b3:1f:e7:64:47:25:a0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:54 2022 GMT
            Not After : Jul 17 14:09:54 2023 GMT
        Subject: CN=41E2E9E5C8E3C0569772CCF369857A3A8D8E6A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:97:70:4f:ac:e1:42:25:61:27:d3:33:22:
                    8a:00:56:e5:53:69:d7:f8:92:e9:bd:53:be:12:13:
                    62:35:e1:e0:f1:82:b0:d6:f3:ff:51:d9:b4:0c:56:
                    03:cd:6c:1a:89:81:de:62:ab:32:52:a0:bc:fb:87:
                    1f:fb:0a:8e:89:30:f8:25:12:fc:c5:d1:f1:aa:81:
                    fd:bb:ea:6d:f7:96:09:79:ef:16:a4:ad:a2:ff:ad:
                    a3:ef:0f:4c:b2:63:63:5d:19:96:84:38:f7:37:bb:
                    15:f9:b4:59:07:b1:85:fe:36:e8:81:09:0a:1e:25:
                    2f:74:6b:4f:ef:01:62:6f:37:bf:6a:72:e8:60:88:
                    6f:d4:51:8a:a4:7f:1a:5e:58:b1:60:14:e0:e1:a7:
                    36:2f:20:96:35:82:42:1c:18:62:54:d5:93:70:20:
                    92:3c:dd:e1:bf:da:ae:66:38:8e:29:69:bd:05:6a:
                    6a:c1:79:61:30:89:bf:82:88:af:61:0d:34:57:ee:
                    5a:d0:0d:4d:16:12:46:b7:77:ab:cf:66:55:58:af:
                    ac:be:3d:bd:ca:dd:56:01:37:01:aa:c1:ee:55:07:
                    1d:52:84:fe:08:a3:36:59:9f:7b:19:25:5f:6f:03:
                    e2:4f:67:12:ff:52:45:8d:4c:cc:5d:0d:be:f1:ba:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:E9:E5:C8:E3:C0:56:97:72:CC:F3:69:85:7A:3A:8D:8E:6A:6E
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31332e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:e2:83:f1:4f:31:66:17:be:15:f9:de:8a:72:92:30:e0:
         3d:1a:2f:8c:e2:c1:3c:9d:2e:b5:64:1a:54:fb:e1:0c:88:7c:
         7c:0e:bc:a1:3a:e5:52:78:47:aa:34:e2:c4:5b:40:22:26:82:
         31:68:3c:c6:7c:9f:32:63:85:e4:e4:87:a0:a7:02:6d:5f:52:
         87:82:d4:37:96:2e:e9:16:68:c3:4e:80:50:af:ed:af:e8:c5:
         7b:12:e9:18:18:cb:ca:64:fa:74:9e:6b:86:9d:ed:28:bd:b5:
         3f:c3:25:43:34:47:d6:44:c2:a3:a9:e9:36:8d:bd:07:94:d6:
         2b:91:f7:62:50:e2:9b:02:ab:f3:7f:38:ca:c1:01:e8:67:08:
         ed:c8:49:9e:3c:2f:db:fd:d1:7c:7a:85:ca:19:b0:39:42:9e:
         65:45:be:38:0f:b5:8e:0d:c0:02:fd:fe:16:ac:f0:9e:2d:19:
         19:f2:d8:e0:cc:e4:a4:a1:b5:f3:d8:d1:44:9b:6b:e1:71:03:
         22:3d:e5:e2:5e:74:8f:fa:e0:f3:dd:76:5b:cc:81:89:c2:1a:
         45:d0:d0:7c:95:7d:5d:8a:c2:52:85:af:cd:6e:f9:45:12:fe:
         65:81:9c:57:29:af:8d:b7:25:24:d6:e4:9d:b5:66:39:24:a7:
         2e:1e:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----