Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e332e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e332e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          eWkrxK7JmeIswzktWEMneM1BI2aglz458oeLnSopJXc=
Subject key identifier:   4C:97:95:28:43:2C:10:EB:8B:1D:84:6D:8B:AC:E0:CB:C7:AD:31:CB
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       75EC86E86A86C8344E90E25E4243359C9F984439
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e332e302f32342d3234203d3e20323039333731.roa
Signing time:             Mon 18 Jul 2022 14:10:10 +0000
ROA not before:           Mon 18 Jul 2022 14:05:10 +0000
ROA not after:            Mon 17 Jul 2023 14:10:10 +0000
asID:                     209371
IP address blocks:        74.50.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ec:86:e8:6a:86:c8:34:4e:90:e2:5e:42:43:35:9c:9f:98:44:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:10 2022 GMT
            Not After : Jul 17 14:10:10 2023 GMT
        Subject: CN=4C979528432C10EB8B1D846D8BACE0CBC7AD31CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:1b:f2:3e:01:79:aa:c4:72:fb:51:59:d5:
                    cb:18:ad:81:79:71:e8:63:da:6a:ea:73:cf:63:90:
                    64:04:bd:4f:27:7e:ad:dd:54:10:7a:b6:ef:50:63:
                    08:9f:16:48:c8:80:d2:bb:cf:af:79:75:54:78:bd:
                    2d:68:26:9c:99:e5:f7:32:de:b7:ff:26:d9:c5:ec:
                    73:96:f8:68:79:12:d8:e2:c6:cf:59:a5:d9:f6:f4:
                    5e:4c:72:fb:37:91:8a:fd:fa:d9:bd:8d:b3:b2:5b:
                    dd:da:91:03:b6:12:14:8d:d7:0c:cd:c9:29:c8:eb:
                    70:28:c8:62:b6:40:88:ee:f8:7a:45:cb:41:20:44:
                    97:44:dc:a8:ac:f2:bd:a8:73:6a:63:01:17:e9:16:
                    02:b8:2c:af:5c:c0:11:1a:cf:33:ad:ef:87:ff:bf:
                    b7:c7:26:a3:90:73:2f:a6:f3:b3:eb:e6:f1:5c:6b:
                    c4:68:73:e6:36:d2:09:78:a5:3c:c1:b6:ad:af:53:
                    4c:e9:38:af:62:1d:49:4f:b8:ae:a6:b4:6d:4d:a4:
                    1c:15:6e:c1:b5:dd:b6:9d:e6:2a:d4:2d:7a:fd:ea:
                    a1:b2:31:60:bd:77:6b:1d:c7:92:16:db:fd:77:da:
                    83:48:ae:29:82:ac:8f:c0:6e:51:09:99:98:bf:83:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:97:95:28:43:2C:10:EB:8B:1D:84:6D:8B:AC:E0:CB:C7:AD:31:CB
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e332e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:64:02:c6:f4:46:b5:28:d6:8d:70:da:2c:83:46:87:9e:
         51:bb:50:4d:56:90:c3:03:c7:aa:97:a3:6e:17:64:db:3f:34:
         f4:58:74:e3:d3:53:3c:88:01:44:b8:10:46:33:5e:25:1f:94:
         40:7c:fa:9a:80:4e:89:49:7f:78:2e:00:60:6f:47:51:98:c7:
         ab:49:f0:85:32:a9:a4:fd:52:da:6c:b2:37:66:2f:bd:ac:1e:
         23:cf:12:0e:d7:54:6b:a2:0d:07:28:9c:14:52:a3:e4:b4:e3:
         5e:80:4f:fe:de:a1:28:a3:04:7f:bd:25:ed:0d:8d:67:2c:19:
         a4:86:53:64:b3:5b:62:6b:3f:9f:af:fe:d0:3b:8a:9a:22:dd:
         d4:ee:36:1b:ca:b4:c8:63:ed:b6:87:7c:43:4f:34:9e:39:c8:
         d4:a0:da:ba:c5:d8:93:14:54:04:8a:c8:37:ba:48:de:ee:ff:
         ed:00:34:48:59:18:d9:7d:08:7a:80:d8:8c:75:f3:1e:40:89:
         54:72:ed:d4:ad:e5:6f:d7:ef:c8:dd:92:aa:11:86:5d:70:c8:
         cd:b1:60:7a:64:d0:d7:b7:b3:bd:e5:93:a0:61:9a:73:85:59:
         98:69:96:91:d9:f6:92:91:ca:c9:08:60:c2:72:8d:7a:d3:2a:
         2f:a8:7d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----