Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32322e302f32342d3234203d3e203631313338.roa
File:                     37342e35302e32322e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          U6AW+fKi+rCm8UdfQ5a0ta+/OJQaaW5/rdcXqKqGE/U=
Subject key identifier:   45:AB:83:12:D3:5C:72:70:01:45:3E:1A:BE:43:E2:0A:57:C2:18:6F
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       016C522F3F484330CC5647C488E8B9DE62C68EDC
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32322e302f32342d3234203d3e203631313338.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     61138
IP address blocks:        74.50.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6c:52:2f:3f:48:43:30:cc:56:47:c4:88:e8:b9:de:62:c6:8e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=45AB8312D35C727001453E1ABE43E20A57C2186F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:f6:79:ef:47:08:ce:1c:ec:22:8f:32:f1:
                    c7:0e:a1:ac:6a:50:4a:91:85:1a:6f:6b:84:fc:25:
                    c7:72:a0:1f:91:2a:3b:ed:9f:7e:59:15:68:a4:0c:
                    f5:61:28:c2:35:0d:19:1e:b2:22:3a:2a:bc:7f:ff:
                    4b:1b:d9:54:ab:b6:8a:68:2a:61:be:68:d5:e7:e1:
                    0f:aa:27:f1:d0:53:cc:76:a3:d6:17:c1:a7:7e:7d:
                    b7:87:70:8f:77:21:4d:2d:95:70:7f:e1:fa:dc:c1:
                    cd:d5:ff:08:36:c9:b5:ec:cb:3c:94:7a:e0:1e:46:
                    e8:73:a5:b0:d4:72:5d:b7:85:4e:76:c1:9b:ce:bd:
                    d6:28:1a:16:b5:df:c9:04:b5:fe:41:01:5e:17:1d:
                    3b:1c:d3:de:fa:d2:fe:03:5b:b6:69:61:4e:6f:93:
                    32:09:1e:fb:e7:ff:05:35:6d:5d:b7:75:90:de:af:
                    79:c6:eb:9f:ef:29:38:d6:b8:f5:c9:87:66:3a:3e:
                    05:d8:31:b1:15:53:b4:66:90:37:79:33:e7:f4:fc:
                    04:e3:62:23:b0:b1:8f:0e:18:3e:31:92:9b:9d:e5:
                    31:9f:e9:70:5e:ac:7a:c5:1c:d6:d9:4c:68:e9:f7:
                    c2:0a:13:5e:bd:f7:ef:6d:87:cf:4a:73:17:32:06:
                    2a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:83:12:D3:5C:72:70:01:45:3E:1A:BE:43:E2:0A:57:C2:18:6F
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32322e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e2:6b:70:15:49:1f:5d:f4:a7:4c:3d:49:77:b0:39:ac:ff:
         e0:96:de:e2:49:eb:39:34:2c:a5:8e:ff:73:01:0a:a9:5d:3f:
         1e:50:eb:7d:17:7d:9a:5d:23:cc:24:d5:b3:1d:33:7e:d8:53:
         0a:71:ec:78:8e:ce:65:94:9c:e4:77:b7:2d:54:55:7f:36:f2:
         7a:54:e5:ab:e1:19:66:ca:a8:7e:3e:41:2d:a2:89:c3:db:e1:
         90:e0:3d:7c:21:ff:68:15:da:45:f0:eb:cc:77:9d:b0:20:a6:
         c9:38:82:df:aa:5b:c9:98:ec:28:76:cd:98:83:9f:8b:c3:d6:
         d6:35:be:d5:0d:9c:55:e3:2d:4b:2e:7c:68:19:97:45:c7:da:
         83:49:4f:68:7a:8d:b2:2a:a0:f2:56:e2:73:20:c5:a9:e6:50:
         e1:24:ed:46:84:cb:91:ea:a8:c3:4b:09:be:94:ab:b2:f7:63:
         f7:f1:ef:90:73:7c:b1:9a:0d:ce:dd:d5:c6:19:9b:70:73:e2:
         81:bb:8e:4c:05:0d:4c:e5:cd:ef:35:2e:89:19:8d:f6:3f:c2:
         9e:94:86:29:1c:39:5b:99:ad:ba:07:97:76:4a:86:1a:27:2b:
         5a:61:48:24:f7:4a:83:c3:4a:a1:4c:d7:45:fe:f0:9e:f1:b7:
         48:64:2d:42
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUAWxSLz9IQzDMVkfEiOi53mLGjtwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA2WhcNMjMxMTE1MTEyOTA2
WjAzMTEwLwYDVQQDEyg0NUFCODMxMkQzNUM3MjcwMDE0NTNFMUFCRTQzRTIwQTU3
QzIxODZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nv2ee9HCM4c
7CKPMvHHDqGsalBKkYUab2uE/CXHcqAfkSo77Z9+WRVopAz1YSjCNQ0ZHrIiOiq8
f/9LG9lUq7aKaCphvmjV5+EPqifx0FPMdqPWF8Gnfn23h3CPdyFNLZVwf+H63MHN
1f8INsm17Ms8lHrgHkboc6Ww1HJdt4VOdsGbzr3WKBoWtd/JBLX+QQFeFx07HNPe
+tL+A1u2aWFOb5MyCR775/8FNW1dt3WQ3q95xuuf7yk41rj1yYdmOj4F2DGxFVO0
ZpA3eTPn9PwE42IjsLGPDhg+MZKbneUxn+lwXqx6xRzW2Uxo6ffCChNevffvbYfP
SnMXMgYqbwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEWrgxLTXHJwAUU+Gr5D4gpX
whhvMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEz
ZWVhNDkwZDMzLzAvMzczNDJlMzUzMDJlMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM2MzEzMTMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKMhYwDQYJKoZIhvcNAQELBQADggEB
AGTia3AVSR9d9KdMPUl3sDms/+CW3uJJ6zk0LKWO/3MBCqldPx5Q630XfZpdI8wk
1bMdM37YUwpx7HiOzmWUnOR3ty1UVX828npU5avhGWbKqH4+QS2iicPb4ZDgPXwh
/2gV2kXw68x3nbAgpsk4gt+qW8mY7Ch2zZiDn4vD1tY1vtUNnFXjLUsufGgZl0XH
2oNJT2h6jbIqoPJW4nMgxanmUOEk7UaEy5HqqMNLCb6Uq7L3Y/fx75BzfLGaDc7d
1cYZm3Bz4oG7jkwFDUzlze81LokZjfY/wp6UhikcOVuZrboHl3ZKhhonK1phSCT3
SoPDSqFM10X+8J7xt0hkLUI=
-----END CERTIFICATE-----