Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e322e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          lCJtrkTdi4nxfDIXMf55D+j/m7gwpDfCtGoZk+9uo2E=
Subject key identifier:   6C:C5:5E:9A:E5:F5:BF:31:FB:AE:3E:BE:FB:3F:A1:3C:B3:B2:70:29
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       70710BA27528E2D68084B98BCF985DC91F082A43
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e322e302f32342d3234203d3e203630373231.roa
Signing time:             Thu 28 Jul 2022 17:18:26 +0000
ROA not before:           Thu 28 Jul 2022 17:13:26 +0000
ROA not after:            Thu 27 Jul 2023 17:18:26 +0000
asID:                     60721
IP address blocks:        74.50.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:71:0b:a2:75:28:e2:d6:80:84:b9:8b:cf:98:5d:c9:1f:08:2a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 28 17:13:26 2022 GMT
            Not After : Jul 27 17:18:26 2023 GMT
        Subject: CN=6CC55E9AE5F5BF31FBAE3EBEFB3FA13CB3B27029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:ef:bc:a1:48:2a:ca:07:02:ba:42:79:0b:
                    e4:31:44:11:5b:9f:55:07:e2:05:28:9c:eb:d2:2e:
                    7c:0e:f2:01:36:29:75:d8:3b:86:f9:23:89:53:d8:
                    0c:a6:14:f9:0b:e2:2a:00:83:29:b3:fd:31:f3:6b:
                    d9:2d:62:a2:cf:f5:e9:8e:9c:7c:af:87:a4:d6:90:
                    24:8f:75:01:81:46:22:ba:4c:75:31:d6:00:9a:e1:
                    85:0c:fa:08:5c:fb:74:84:11:88:95:32:2d:de:58:
                    c1:86:c2:c6:9b:50:5f:4a:d0:6d:c8:9f:4e:59:ce:
                    14:6e:ba:f6:68:50:fe:d4:9a:4f:a8:dd:31:43:bc:
                    49:6f:32:13:77:b2:63:cc:73:86:15:18:0c:95:f7:
                    7a:d9:db:98:41:46:ba:55:c7:e8:d9:07:5c:b6:6c:
                    77:95:25:1c:bf:35:9b:40:a8:3a:84:8e:ac:f7:56:
                    c5:9d:de:9d:5e:50:fc:9c:46:30:29:cc:0e:c4:b8:
                    0d:5e:03:aa:34:13:c1:c0:a7:5d:f5:ec:b4:2b:be:
                    07:c9:e5:0f:ec:fb:cb:d8:ce:f5:0d:4e:12:56:ca:
                    b5:83:5c:99:dc:04:0b:3d:b0:f7:b4:b7:75:36:31:
                    95:1c:4b:62:3a:3c:9e:24:f1:64:b4:5e:ff:fa:dd:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:5E:9A:E5:F5:BF:31:FB:AE:3E:BE:FB:3F:A1:3C:B3:B2:70:29
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e322e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:22:83:88:b9:1a:dd:02:60:d7:74:8f:33:1c:7c:3b:14:
         0d:bb:ce:55:5d:49:c5:4f:15:0e:8c:7b:00:cf:a0:ad:59:87:
         9e:e7:34:bf:dc:db:18:38:bc:e8:52:14:c9:8c:e3:6d:6f:50:
         ea:ac:bd:10:d9:11:a9:00:b2:d9:91:90:e7:6b:92:25:0b:c0:
         8f:f4:6c:6d:c6:d7:09:14:17:77:97:a3:ea:d9:08:87:58:47:
         9c:54:96:7e:71:fd:1c:ed:33:dd:8d:1d:a9:1d:6b:55:65:d1:
         4c:1b:d1:ec:d0:d3:d7:52:09:d7:92:8a:02:6d:af:8b:97:f4:
         90:a6:dd:2b:94:04:1a:86:ef:14:9f:05:af:1f:c6:d1:a3:77:
         0f:d9:b0:e9:e7:cb:46:df:f6:40:44:70:bf:26:d6:19:b1:9e:
         f0:ae:13:bf:61:5f:0d:a6:f6:ea:81:57:cb:6b:05:fb:13:33:
         4b:a9:96:45:c9:a1:82:96:99:0d:c6:83:f8:97:17:ef:49:25:
         f5:83:1e:a9:a2:6e:01:74:14:15:04:39:e2:b9:51:1c:84:9b:
         76:85:5e:0a:75:d7:89:2d:75:05:e0:cb:8c:8f:2c:8d:0b:47:
         76:1b:23:69:f9:0b:f4:d2:7e:35:10:43:95:ad:f7:9f:af:d1:
         8a:95:88:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----