Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32302e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e32302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          6mcuRFXNzXXpRBZUt8CK4YuQxgYC5gX/bBwiLkQx/Yg=
Subject key identifier:   08:D5:77:53:D5:26:71:64:D5:CE:FF:B7:BB:66:35:C2:DE:5D:52:9E
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       3CF44DA2E8C92A8164BABC6E3972C01A7B494C76
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32302e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 25 Nov 2022 04:13:27 +0000
ROA not before:           Fri 25 Nov 2022 04:08:27 +0000
ROA not after:            Fri 24 Nov 2023 04:13:27 +0000
asID:                     60721
IP address blocks:        74.50.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f4:4d:a2:e8:c9:2a:81:64:ba:bc:6e:39:72:c0:1a:7b:49:4c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 25 04:08:27 2022 GMT
            Not After : Nov 24 04:13:27 2023 GMT
        Subject: CN=08D57753D5267164D5CEFFB7BB6635C2DE5D529E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:f3:cc:44:ff:ee:93:7a:62:67:d0:94:ce:
                    04:e7:70:60:c5:04:84:ca:61:47:42:30:6d:c2:af:
                    c8:34:9e:dc:94:fe:0f:99:4d:06:38:a2:24:b3:17:
                    f0:52:f9:4c:91:72:e0:81:c4:05:f1:30:90:fd:b6:
                    23:3f:a8:f5:64:1f:b4:75:3a:2c:53:53:18:cb:e2:
                    33:e1:1e:8d:c4:b8:2b:ad:e4:ec:1f:47:63:38:a1:
                    a4:c2:6e:4e:22:9f:56:b3:cf:bd:7f:b6:5c:e8:81:
                    d6:0a:bd:46:d8:b4:95:60:cb:bd:2c:d4:ea:02:2e:
                    af:d1:13:e0:d9:09:93:58:a0:21:17:6f:71:6e:3e:
                    7a:9e:47:2d:06:28:59:32:d8:9b:ed:86:3e:b9:78:
                    dc:7a:af:fd:fa:7d:05:ca:d2:b4:c3:93:77:25:92:
                    47:c1:64:74:b5:5c:a7:a1:1e:aa:de:5f:ab:cb:37:
                    7a:d6:33:df:ba:ad:8f:36:89:17:7a:cf:3c:79:d7:
                    ff:ed:f9:6c:77:b4:60:df:55:8f:ae:2b:d0:70:15:
                    66:af:8e:1b:bd:c8:63:59:1c:2c:da:f5:ac:5b:cc:
                    c9:96:62:ef:42:22:01:f0:f9:89:10:c6:b1:27:c1:
                    89:e7:8c:63:40:32:55:78:ac:13:6d:45:6e:8e:e5:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D5:77:53:D5:26:71:64:D5:CE:FF:B7:BB:66:35:C2:DE:5D:52:9E
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32302e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:26:ab:1f:ce:08:74:2b:b1:55:c6:8d:6e:98:f0:ea:b0:93:
         b0:4a:2f:c6:8f:b7:29:13:1e:b6:57:f1:88:17:5a:0b:1d:94:
         de:56:fe:91:52:a9:63:c0:8a:41:84:47:d7:51:3c:b5:3a:de:
         d8:7a:1e:67:27:c0:e7:a7:61:4d:ca:13:cb:3f:38:c8:05:17:
         84:d9:be:2d:d8:70:4c:b2:f5:a5:a6:7b:fa:4e:e3:43:f8:20:
         fe:30:e9:5c:0e:b8:c8:ce:5c:f4:db:7d:c6:45:40:37:85:ab:
         2b:2a:27:fe:17:20:a5:58:82:b9:07:02:f2:b1:55:43:c5:b5:
         33:bd:61:b9:78:b5:44:45:0e:eb:2d:67:f8:f5:64:02:47:fe:
         0a:3c:ca:57:22:b9:67:93:b7:37:83:89:81:7c:8e:68:f5:91:
         71:40:23:d3:7e:7d:cc:e2:56:8e:d8:f6:cb:62:4e:99:cd:a6:
         e9:2d:97:60:3d:1b:2c:bf:8a:ff:52:f4:a6:c2:9d:8d:cd:02:
         fc:31:29:e4:e8:de:d6:ea:0e:cd:65:07:ef:e7:ce:73:3e:e1:
         96:d7:a4:68:5d:c3:ec:e1:e4:38:8d:59:f2:15:e7:5b:e7:4d:
         a1:a6:d4:c2:8a:c1:c3:50:6e:9e:3c:9d:4c:7e:22:2a:08:50:
         c2:7c:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----