Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32342e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e32342e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          hFI5IxHBIgTkAE4wTiQOJUFKTD3cb+iG+8Tf6xIKLqk=
Subject key identifier:   31:73:2A:B7:69:82:90:A2:8A:F1:E6:85:3A:F2:CE:05:16:2B:B0:04
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       4BE3877301CA756D2C179417CAAD39B402E5DEDA
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32342e302f32342d3234203d3e20323039333731.roa
Signing time:             Mon 18 Jul 2022 14:10:04 +0000
ROA not before:           Mon 18 Jul 2022 14:05:04 +0000
ROA not after:            Mon 17 Jul 2023 14:10:04 +0000
asID:                     209371
IP address blocks:        74.50.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e3:87:73:01:ca:75:6d:2c:17:94:17:ca:ad:39:b4:02:e5:de:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:04 2022 GMT
            Not After : Jul 17 14:10:04 2023 GMT
        Subject: CN=31732AB7698290A28AF1E6853AF2CE05162BB004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:62:6f:5a:c3:45:e4:8b:94:59:be:2b:19:
                    5d:0b:3c:a6:62:73:19:c5:00:11:b1:b7:98:24:10:
                    b2:88:78:7b:de:a0:d3:c6:fd:65:16:d9:79:f9:57:
                    78:5a:5c:1a:c7:0c:1b:61:7e:3f:f0:ef:20:e9:f6:
                    bf:62:09:8a:04:b0:c4:5d:6b:a4:89:ea:6f:91:4c:
                    9c:40:51:36:d0:13:77:a8:b7:e9:81:da:52:b2:72:
                    89:7f:2d:52:e7:64:47:8e:d2:2d:64:be:59:05:d1:
                    83:e9:a2:60:48:03:d0:e2:2b:75:a4:d7:a7:18:8f:
                    17:0d:88:52:9c:72:95:55:38:7f:90:e6:ec:ff:e2:
                    01:91:f4:18:4a:e4:83:e8:ad:26:d2:5b:50:d1:57:
                    75:26:67:bf:85:64:33:07:6d:f6:4b:9d:52:6a:ba:
                    36:88:f5:e2:fe:68:98:15:ba:26:ac:9a:b3:0f:bd:
                    1f:dc:97:07:9f:34:e5:8f:53:ec:ea:e7:37:c8:39:
                    d1:c0:81:44:e7:d7:e8:1a:ae:c9:5f:44:2b:29:56:
                    9a:8f:58:16:67:ca:e1:a5:f7:2c:95:86:59:8a:46:
                    5c:39:26:bb:f1:97:8b:b5:e4:bd:1e:e5:45:40:09:
                    00:53:30:5c:6a:3d:72:10:89:2f:90:bb:04:e9:9f:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:73:2A:B7:69:82:90:A2:8A:F1:E6:85:3A:F2:CE:05:16:2B:B0:04
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32342e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:16:72:70:0a:dd:97:cb:da:ed:0f:27:6a:c3:22:bb:4d:ad:
         1c:2b:3b:15:ab:17:6c:8b:ec:a0:c3:4c:bd:aa:56:ef:63:54:
         d3:3a:43:a5:74:53:c8:c3:22:93:46:b6:03:eb:d4:86:24:e8:
         13:bb:a3:35:44:0f:63:2f:e6:7a:a5:4f:5b:32:d9:50:f9:f1:
         d9:55:cf:c1:1b:be:b9:72:8b:80:34:25:91:e9:2d:36:ca:73:
         9d:69:07:b3:0a:09:8b:4d:40:61:46:ef:1d:87:6b:53:71:be:
         f8:e0:3c:96:04:dd:69:55:b5:ee:d2:b8:fb:a2:aa:3c:d3:6b:
         48:49:f5:af:9e:bf:69:db:74:35:8c:6d:c5:82:82:25:17:1e:
         04:a0:81:d9:b7:11:d4:99:9c:36:0d:5d:55:b8:89:6d:c0:e6:
         68:46:77:6a:09:47:08:55:bc:18:e6:55:3e:8d:2e:b4:1b:b4:
         9b:0f:6f:b1:13:31:7e:56:e9:71:fd:7c:49:01:71:a4:3e:fa:
         82:78:8f:3c:1e:13:9d:68:55:fe:46:43:bd:c5:07:30:48:d5:
         c1:9a:c8:c9:5c:e1:af:b6:bf:2c:22:eb:7d:e0:db:71:28:4a:
         7c:c5:f0:ff:3c:12:3e:4d:28:d9:58:ca:24:33:cf:46:eb:92:
         a3:2d:9d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----