Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32312e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e32312e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          2fKedZK00qsi0U76Rorto+UdikmImDSbXHbcFdeUGUc=
Subject key identifier:   30:E3:7F:A2:59:66:3C:50:DA:58:0B:C7:B6:F3:43:61:13:B2:85:24
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       38C750FE9F63D8A8A7678E90C9CB5F437A5B02B6
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32312e302f32342d3234203d3e20323039333731.roa
Signing time:             Mon 18 Jul 2022 14:09:50 +0000
ROA not before:           Mon 18 Jul 2022 14:04:50 +0000
ROA not after:            Mon 17 Jul 2023 14:09:50 +0000
asID:                     209371
IP address blocks:        74.50.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:50:fe:9f:63:d8:a8:a7:67:8e:90:c9:cb:5f:43:7a:5b:02:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:50 2022 GMT
            Not After : Jul 17 14:09:50 2023 GMT
        Subject: CN=30E37FA259663C50DA580BC7B6F3436113B28524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:e7:73:6b:62:93:38:bc:b5:5e:da:9b:09:
                    ea:3e:03:75:12:52:9e:f3:d8:33:6a:09:b1:92:a6:
                    37:c5:d4:80:81:9a:83:70:5e:0e:25:d3:b2:4c:29:
                    2b:37:f4:15:70:2b:e5:fd:74:ca:ef:e6:ec:64:9f:
                    17:1b:77:5f:34:68:6b:03:98:25:4b:f7:64:38:0e:
                    6c:dc:8e:4b:01:75:f8:16:dd:a6:3a:5b:cc:cd:9b:
                    67:3e:b6:41:89:ca:28:c8:97:bd:4c:45:01:6a:2a:
                    89:b7:ad:42:91:d9:a0:29:d0:a3:62:0d:a4:30:61:
                    12:f5:8a:6c:42:62:b9:02:10:f9:4a:3a:9c:fc:c3:
                    d5:f4:93:2b:07:d1:9f:5c:19:50:85:49:31:92:ee:
                    77:2b:9d:ae:04:15:e8:22:5a:c9:7a:8e:f2:95:47:
                    1e:b3:a1:7e:73:53:91:9a:52:cf:a0:f2:46:91:28:
                    f9:9f:3b:00:ba:1b:99:5b:ff:44:06:47:54:ec:c7:
                    d7:59:27:ea:2f:ec:b3:51:88:fb:f1:fb:79:62:4c:
                    73:91:c8:84:47:0c:9f:5c:9d:66:4c:cd:fc:aa:fc:
                    83:b9:a9:a8:20:5a:27:e6:ff:f1:fc:fc:af:0f:4d:
                    de:f9:d3:5c:f9:b2:61:59:51:ed:83:60:a5:b4:56:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E3:7F:A2:59:66:3C:50:DA:58:0B:C7:B6:F3:43:61:13:B2:85:24
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32312e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:37:79:54:36:59:b1:d0:8f:71:cb:fc:46:a3:5e:60:c7:e3:
         70:b9:5b:f0:91:97:22:db:95:b4:73:94:7e:5c:e1:df:96:9a:
         b2:ee:80:14:dd:a4:b5:f2:d8:bd:7a:de:51:3f:fe:47:ff:8e:
         8b:59:18:ce:b3:d7:01:f2:e7:15:c7:36:e3:4a:f7:d9:6f:6e:
         7d:4b:f9:ed:57:4e:a7:84:c5:e6:8d:15:14:4f:f6:ef:a8:f2:
         28:46:0f:cb:ee:86:ad:de:6c:35:10:b3:9e:db:f9:81:85:3d:
         e9:05:25:e8:11:bf:c6:79:d1:6a:37:33:19:81:f1:55:4c:ba:
         c2:26:5a:7c:ab:8d:15:2e:49:c9:c5:cc:58:13:61:bf:ef:62:
         d9:c3:ad:56:27:8f:98:08:c2:32:e2:cd:38:d0:99:90:30:b2:
         93:88:a8:aa:aa:77:53:a8:6d:c8:29:38:03:c9:e5:7c:1d:fb:
         fb:85:1c:c8:98:64:2e:86:ac:31:0e:28:61:fa:74:54:62:bc:
         e3:e2:7b:3f:3f:b4:9b:54:f5:92:8a:50:40:fb:57:a4:b4:64:
         5d:0c:a8:dd:b2:27:c2:cd:4f:7a:f6:f3:21:90:cd:f5:9d:08:
         48:11:38:1f:1a:82:31:95:8c:0c:ef:79:c8:41:4e:eb:09:86:
         0a:2a:d0:1f
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUOMdQ/p9j2KinZ46QyctfQ3pbArYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNDUwWhcNMjMwNzE3MTQwOTUw
WjAzMTEwLwYDVQQDEygzMEUzN0ZBMjU5NjYzQzUwREE1ODBCQzdCNkYzNDM2MTEz
QjI4NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhLnc2tikzi8
tV7amwnqPgN1ElKe89gzagmxkqY3xdSAgZqDcF4OJdOyTCkrN/QVcCvl/XTK7+bs
ZJ8XG3dfNGhrA5glS/dkOA5s3I5LAXX4Ft2mOlvMzZtnPrZBicooyJe9TEUBaiqJ
t61CkdmgKdCjYg2kMGES9YpsQmK5AhD5Sjqc/MPV9JMrB9GfXBlQhUkxku53K52u
BBXoIlrJeo7ylUces6F+c1ORmlLPoPJGkSj5nzsAuhuZW/9EBkdU7MfXWSfqL+yz
UYj78ft5YkxzkciERwyfXJ1mTM38qvyDuamoIFon5v/x/PyvD03e+dNc+bJhWVHt
g2CltFZu9wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDDjf6JZZjxQ2lgLx7bzQ2ET
soUkMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzM3MzQyZTM1MzAyZTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMjMwMzkzMzM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKMhUwDQYJKoZIhvcNAQELBQAD
ggEBABU3eVQ2WbHQj3HL/EajXmDH43C5W/CRlyLblbRzlH5c4d+WmrLugBTdpLXy
2L163lE//kf/jotZGM6z1wHy5xXHNuNK99lvbn1L+e1XTqeExeaNFRRP9u+o8ihG
D8vuhq3ebDUQs57b+YGFPekFJegRv8Z50Wo3MxmB8VVMusImWnyrjRUuScnFzFgT
Yb/vYtnDrVYnj5gIwjLizTjQmZAwspOIqKqqd1OobcgpOAPJ5Xwd+/uFHMiYZC6G
rDEOKGH6dFRivOPiez8/tJtU9ZKKUED7V6S0ZF0MqN2yJ8LNT3r28yGQzfWdCEgR
OB8agjGVjAzvechBTusJhgoq0B8=
-----END CERTIFICATE-----