Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32392e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e32392e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          9VulhQ8rQgPDfmxdl8mF5qE5H1KAuwuKSEkzWYNC1KU=
Subject key identifier:   71:EF:A2:8C:FC:9E:BF:E7:4D:08:0E:3E:48:67:E8:D9:9C:63:33:51
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1D914FB3C6617E96C8DC57B840826D64DFE60E4D
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32392e302f32342d3234203d3e203630373231.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     60721
IP address blocks:        74.50.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:91:4f:b3:c6:61:7e:96:c8:dc:57:b8:40:82:6d:64:df:e6:0e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=71EFA28CFC9EBFE74D080E3E4867E8D99C633351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:c3:82:06:0a:c6:3a:4b:8b:55:ab:8a:c0:
                    04:b8:ce:84:e4:ad:87:af:2d:71:6b:d0:39:db:01:
                    b2:be:df:5e:48:e1:46:c7:28:70:70:31:f4:11:e0:
                    0d:bf:64:85:00:90:f8:79:7c:fb:b0:77:68:e6:b8:
                    4a:19:2b:34:da:41:ec:5b:26:1a:d1:de:3a:c7:ab:
                    07:93:b9:15:b2:81:7b:d2:44:1e:35:50:64:df:46:
                    3f:cd:40:e8:08:c2:9d:18:25:54:7f:67:ff:e0:6f:
                    7b:76:78:90:95:b6:94:a2:93:fa:b3:28:f1:75:9d:
                    db:14:4b:1c:3d:7c:a6:98:75:0f:77:20:95:1b:92:
                    dd:42:6a:a9:05:a0:0a:91:5d:9f:c4:37:26:4c:f9:
                    8d:13:43:79:e9:a5:18:c9:e4:4d:e3:cd:f0:15:da:
                    f0:96:de:65:65:c7:c2:11:b4:35:b2:13:b0:8f:a3:
                    5b:6d:de:e9:f0:c0:78:1d:2d:da:09:6e:2b:9b:86:
                    4b:65:e5:3e:b2:7e:c2:b9:c3:80:ce:be:f9:45:7b:
                    e3:1f:2e:7c:47:1d:0f:e3:95:dc:ce:94:8b:bc:5d:
                    02:b6:10:e5:9f:5b:00:d1:b1:70:e1:37:1e:bd:71:
                    7d:38:28:f1:13:82:eb:78:b9:63:27:d7:2f:35:2d:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:A2:8C:FC:9E:BF:E7:4D:08:0E:3E:48:67:E8:D9:9C:63:33:51
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e32392e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:63:23:fb:16:25:a9:c1:5f:6f:21:0e:f4:71:3b:db:74:
         52:1a:aa:30:72:4f:65:ea:57:81:ed:a9:cf:30:fb:a1:ca:0c:
         ba:2a:b7:7d:a5:6c:26:51:b1:7f:2a:f2:2a:24:7d:1b:5c:6b:
         28:fa:10:f7:37:e6:ef:10:a1:cd:33:7a:67:9a:fe:45:08:07:
         df:12:24:94:ea:79:1c:fb:3d:5b:75:8a:68:f4:74:e9:32:85:
         50:57:56:25:e5:2c:80:23:0b:21:55:b2:22:2e:1c:db:10:94:
         d2:7f:10:a0:57:d8:0c:d0:92:e9:84:2d:49:56:a6:e8:2f:69:
         33:cb:8a:ba:6a:9c:23:e1:69:62:60:16:d9:10:29:fc:80:d3:
         13:e3:d0:66:ba:fd:93:81:de:de:64:8e:41:10:54:47:15:b4:
         0d:75:9a:f9:24:bd:ad:83:f1:2b:d7:39:50:07:5a:3e:03:9e:
         c1:4c:94:bc:7e:b0:83:5c:ac:85:f4:87:c7:54:d6:dd:25:f1:
         76:a4:2d:f7:86:4f:cb:6b:40:b9:82:5b:53:85:fe:a3:d9:46:
         0d:5d:02:dc:14:22:57:6a:2a:06:d4:c8:ab:27:d5:f2:b8:ae:
         67:99:8e:b9:2a:4b:f4:8a:94:2d:a5:27:e3:02:d5:c8:f7:9e:
         ff:72:c6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----