Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32382e302f32322d3234203d3e203439393939.roa
File:                     37342e35302e32382e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier:          zX7C3MABSZZ/JoyKKV/XXJrjhgKO13kJqI+XmVoK/jo=
Subject key identifier:   A6:31:F8:39:97:67:CB:30:37:21:CC:3E:42:E7:CD:D3:3F:C3:4F:87
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       393263ED8FAAE383493DF8489A84406F6F2D33A2
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32382e302f32322d3234203d3e203439393939.roa
Signing time:             Mon 18 Jul 2022 14:09:58 +0000
ROA not before:           Mon 18 Jul 2022 14:04:58 +0000
ROA not after:            Mon 17 Jul 2023 14:09:58 +0000
asID:                     49999
IP address blocks:        74.50.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:32:63:ed:8f:aa:e3:83:49:3d:f8:48:9a:84:40:6f:6f:2d:33:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:58 2022 GMT
            Not After : Jul 17 14:09:58 2023 GMT
        Subject: CN=A631F8399767CB303721CC3E42E7CDD33FC34F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:19:21:2c:74:df:48:6a:b5:35:65:ea:b3:
                    8c:ec:c0:25:02:db:a1:15:85:34:63:d5:61:72:fc:
                    cb:cd:23:ef:ee:ac:0b:e7:9b:0f:cf:5c:a9:47:78:
                    d1:a0:14:ac:82:fb:34:bb:c5:b7:ac:72:01:11:82:
                    62:76:1f:b6:22:b3:ed:47:05:64:58:c4:d8:b4:76:
                    89:eb:39:69:e9:47:44:e6:2e:cf:f8:d0:1e:06:f1:
                    80:26:d5:60:3c:fd:ca:47:66:c8:c5:f1:8e:0d:6c:
                    9c:98:a0:5b:2d:12:8d:8b:aa:10:05:09:fe:0a:47:
                    9f:ce:5c:9b:a6:09:a4:2f:7b:e4:e8:4a:a9:9b:11:
                    56:d5:0f:a6:ab:54:69:df:92:1b:12:bc:87:50:ed:
                    66:3c:c7:3b:20:04:09:0a:be:ac:b6:6a:98:11:3c:
                    e5:37:86:fe:8a:0f:00:f7:4c:17:c4:1c:54:0b:ae:
                    ab:00:ec:8c:83:fa:48:fd:d2:1d:7d:2b:02:93:83:
                    50:a5:fa:52:6c:df:03:ee:5a:be:68:5e:2a:d0:2e:
                    54:4f:91:d4:7d:51:1b:02:0e:f9:f5:21:94:2e:ce:
                    f0:8a:93:2c:11:ce:6a:34:e9:3b:57:4e:ca:a2:42:
                    59:07:cf:9f:cc:c6:c1:f1:f3:50:3a:16:0e:cd:3a:
                    74:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:31:F8:39:97:67:CB:30:37:21:CC:3E:42:E7:CD:D3:3F:C3:4F:87
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32382e302f32322d3234203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:32:1f:76:5b:2e:d2:9d:09:ce:96:4e:5c:d8:d4:bf:fe:8c:
         7b:49:1e:be:ce:3e:01:90:bd:3d:69:76:40:44:fa:d3:3f:18:
         10:bf:32:6e:94:d4:8c:7d:4f:83:b4:d2:b3:78:67:d0:b3:20:
         6e:bc:12:d5:8a:a3:0f:8d:aa:0c:26:88:81:f0:ed:6a:42:6c:
         00:8d:db:d9:8a:de:2c:3a:af:c2:d4:51:a5:e8:ef:57:5a:92:
         f4:ca:80:62:c6:1e:38:73:07:b9:fc:73:cc:6d:d8:15:d3:0c:
         e6:46:c0:3c:67:60:d8:13:79:2a:b2:f7:22:77:4f:a0:86:01:
         ed:af:1f:ff:cd:ae:59:06:5d:08:e7:97:a1:fb:93:03:e3:00:
         08:31:b9:d0:31:45:df:3e:c0:86:42:d2:81:a9:5b:0b:ef:e7:
         f0:ce:a6:5e:9d:ce:17:83:db:e1:bf:5e:9d:3d:20:d7:ce:1b:
         4d:f5:a5:e3:0a:cd:ca:b3:dc:57:c4:43:d8:de:98:6e:af:7c:
         5d:a9:85:65:08:ed:f9:d8:3b:75:a7:88:1d:77:70:86:a8:1b:
         36:18:54:03:93:db:eb:f3:3a:49:18:c1:4b:cc:b3:24:bd:f8:
         83:c3:7d:ad:43:16:f6:ac:e9:a0:5b:90:08:24:b2:51:6f:b1:
         c7:c0:1e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----