Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31362e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e31362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          LQQ6xe3tXgOIEvvTN69T1MCVD6scYHvZ5/zTk27eVV0=
Subject key identifier:   32:C6:14:7B:51:75:0D:8B:E5:A4:44:A8:63:ED:CE:78:92:D7:60:ED
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       59223EEED48D4223E4D959CB6FB4A118028B7C53
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31362e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 25 Nov 2022 04:13:10 +0000
ROA not before:           Fri 25 Nov 2022 04:08:10 +0000
ROA not after:            Fri 24 Nov 2023 04:13:10 +0000
asID:                     60721
IP address blocks:        74.50.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:22:3e:ee:d4:8d:42:23:e4:d9:59:cb:6f:b4:a1:18:02:8b:7c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 25 04:08:10 2022 GMT
            Not After : Nov 24 04:13:10 2023 GMT
        Subject: CN=32C6147B51750D8BE5A444A863EDCE7892D760ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0a:ea:b0:c6:59:57:3d:8f:49:dd:b8:4e:57:
                    a4:03:7b:48:e1:be:63:f3:d6:15:f9:a7:c9:d9:c1:
                    97:a3:b6:4a:39:70:8a:c3:81:9e:a3:82:16:9f:5c:
                    90:d2:33:54:31:67:1d:b0:b6:ec:27:75:53:18:d5:
                    57:65:a2:0a:27:39:72:fb:83:b7:f7:b0:e8:0d:23:
                    5c:6f:9f:74:03:ab:d4:29:b4:1f:8f:5c:88:c2:3d:
                    7d:d7:88:1a:53:c5:5d:a5:e4:0e:34:16:78:8a:fd:
                    f8:cd:f0:36:3e:2c:e2:fe:d1:d9:0a:fa:e9:f9:aa:
                    1c:cb:6c:ea:59:77:3f:2d:dc:2e:2b:91:86:d4:21:
                    e7:c6:0a:0b:54:95:e7:be:a8:8e:4a:fe:1f:66:c3:
                    50:f0:db:52:6c:9b:60:2d:67:c5:d6:15:45:cd:52:
                    13:70:30:9b:23:9c:b6:01:9c:a7:9e:0a:4a:37:df:
                    ba:21:94:11:09:51:38:38:42:f6:1e:c7:64:ec:9d:
                    ba:7c:86:2f:77:19:40:f0:49:6f:1e:4c:00:33:83:
                    c6:0d:f9:02:db:f8:95:51:bb:66:e1:4d:a7:42:df:
                    10:fe:48:c2:43:5f:57:f0:10:66:8c:df:37:bc:d6:
                    98:1d:26:b5:bd:e2:10:4a:00:ea:fa:bb:5a:23:84:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:14:7B:51:75:0D:8B:E5:A4:44:A8:63:ED:CE:78:92:D7:60:ED
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31362e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:78:56:b3:46:a0:eb:0c:05:96:a3:01:b1:bd:ef:00:d3:0d:
         d5:67:2e:14:04:39:7a:68:a8:16:8c:e9:48:c2:d5:34:bf:05:
         67:cc:68:15:50:b5:a0:7e:81:6d:aa:05:22:ae:3d:56:29:a3:
         0e:fd:be:96:3a:1f:12:c6:aa:e0:3b:5c:28:32:64:07:0c:f1:
         8a:c1:d8:e6:52:75:a8:07:50:a4:3a:2a:e7:ff:e0:2b:87:bb:
         8b:26:25:d3:10:83:68:79:a3:c9:52:d1:e1:ca:4e:3e:dc:b1:
         94:8b:10:a2:4d:e3:f6:c8:2a:1c:23:23:f5:e4:f6:26:90:9d:
         74:b0:e9:55:74:84:f7:27:fb:c6:09:4c:52:ef:a7:ec:07:15:
         34:a5:09:07:44:27:05:41:41:d0:0f:59:19:29:eb:61:29:4c:
         bd:99:9b:a9:61:43:e7:44:d8:0d:c0:4e:0c:e2:85:ee:98:b4:
         c0:0a:6e:f5:1d:4c:58:6a:16:c5:cc:11:bb:80:57:7a:58:4b:
         b3:a3:ea:77:1f:4d:11:a6:24:18:ee:48:a4:95:8d:b7:48:98:
         e8:3d:62:db:6e:e0:91:6f:89:1c:73:d1:73:ba:45:d9:78:ab:
         c8:6d:1d:37:d8:89:0e:14:38:5d:60:98:84:c2:fe:54:bc:5f:
         be:12:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----