Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e33302e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e33302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          wLvTdJKsAGoKTCV1sooXkJJLGMrDlUL+xh2lN88zTBc=
Subject key identifier:   0F:E3:2B:C0:8D:38:06:19:6C:7A:E9:4B:A3:52:53:40:3B:C2:DA:A3
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       52CB2E43AF56DED091508126F8BA695F016968E9
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e33302e302f32342d3234203d3e203630373231.roa
Signing time:             Wed 16 Nov 2022 11:29:06 +0000
ROA not before:           Wed 16 Nov 2022 11:24:06 +0000
ROA not after:            Wed 15 Nov 2023 11:29:06 +0000
asID:                     60721
IP address blocks:        74.50.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cb:2e:43:af:56:de:d0:91:50:81:26:f8:ba:69:5f:01:69:68:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:06 2022 GMT
            Not After : Nov 15 11:29:06 2023 GMT
        Subject: CN=0FE32BC08D3806196C7AE94BA35253403BC2DAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:78:db:4a:c0:9c:3f:1e:d8:2a:14:38:8b:
                    ad:1f:36:ab:eb:0d:d9:55:4c:83:04:df:a9:a3:44:
                    39:51:64:80:75:5f:98:b2:39:bd:4e:f7:df:93:5f:
                    99:9b:f9:dd:c3:85:c5:c9:15:a9:ac:df:10:81:1e:
                    76:b4:f5:fb:10:ad:a3:67:e4:22:f2:68:b4:1b:1f:
                    d6:b8:8b:b7:f7:6d:e1:a2:a1:37:80:ae:0b:3f:5e:
                    91:cc:a5:87:5f:a6:f3:f9:fc:20:51:3b:34:20:c0:
                    b3:2f:df:70:d4:a3:89:1e:2f:86:50:fa:b8:d7:31:
                    76:a5:58:75:cc:1a:85:43:59:21:fe:19:55:fa:24:
                    4f:b7:45:f5:ab:c3:ff:3e:a2:0d:36:c0:9d:6a:88:
                    ea:fa:e7:38:b5:75:a3:50:f5:1c:1b:a4:ad:91:4a:
                    57:8c:b3:db:50:8b:07:b7:e7:4a:51:2e:76:0f:8e:
                    e3:76:c2:19:2f:e8:54:1d:29:4f:40:0a:bf:0a:ed:
                    10:6c:2d:f8:b2:12:5d:e1:4c:97:7b:84:d6:e6:de:
                    3c:a8:fe:c9:79:22:db:39:3d:4b:53:88:a3:9c:7b:
                    b2:d3:88:cf:75:80:e6:32:04:2e:a4:87:27:59:ee:
                    23:ad:73:2a:da:01:e2:2c:9d:c8:28:7c:dd:be:fa:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E3:2B:C0:8D:38:06:19:6C:7A:E9:4B:A3:52:53:40:3B:C2:DA:A3
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e33302e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a9:4e:b7:85:34:cc:3c:60:c4:5f:8b:71:0e:1f:d4:c3:be:
         ef:e9:fd:ac:73:33:e0:17:7f:e1:be:4a:8d:13:a2:44:e3:a1:
         c9:7a:f8:db:b1:ca:64:14:71:d7:9b:21:d7:b7:6a:91:20:bd:
         50:58:5d:48:c1:0a:32:91:a0:b8:9e:a5:ce:17:3c:be:26:e6:
         e0:5b:f0:d1:a8:7f:ee:86:e8:7d:82:22:79:f6:2a:b6:15:1b:
         db:9b:03:c4:34:d3:4c:ea:41:ec:01:02:60:c6:d1:bd:99:d6:
         b1:dc:26:97:a7:06:79:aa:0f:b7:37:22:50:7a:ab:96:4a:24:
         ef:05:5f:0d:b9:d2:d3:a2:3a:c0:ce:11:50:26:1e:fb:ed:18:
         bc:32:92:2d:69:c0:31:5c:bf:bd:dd:dc:d1:99:04:77:e4:6f:
         4a:81:77:db:95:2a:a3:78:82:87:06:a8:bd:27:d5:b0:a1:ab:
         50:e1:49:cd:62:f3:72:47:e9:6f:1d:c5:f8:d1:3f:ee:64:53:
         a9:c8:bd:1d:50:e7:33:dc:bf:22:8d:45:84:ee:ff:4c:29:b1:
         bd:cc:03:2f:2b:23:27:b7:f6:de:e5:fa:d3:cf:78:8a:3f:d9:
         8a:67:a2:c7:46:d7:2e:a6:5f:bb:f5:14:b8:e1:fb:7e:a7:28:
         c5:23:a4:8c
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUUssuQ69W3tCRUIEm+LppXwFpaOkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA2WhcNMjMxMTE1MTEyOTA2
WjAzMTEwLwYDVQQDEygwRkUzMkJDMDhEMzgwNjE5NkM3QUU5NEJBMzUyNTM0MDNC
QzJEQUEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhd420rAnD8e
2CoUOIutHzar6w3ZVUyDBN+po0Q5UWSAdV+Ysjm9Tvffk1+Zm/ndw4XFyRWprN8Q
gR52tPX7EK2jZ+Qi8mi0Gx/WuIu3923hoqE3gK4LP16RzKWHX6bz+fwgUTs0IMCz
L99w1KOJHi+GUPq41zF2pVh1zBqFQ1kh/hlV+iRPt0X1q8P/PqINNsCdaojq+uc4
tXWjUPUcG6StkUpXjLPbUIsHt+dKUS52D47jdsIZL+hUHSlPQAq/Cu0QbC34shJd
4UyXe4TW5t48qP7JeSLbOT1LU4ijnHuy04jPdYDmMgQupIcnWe4jrXMq2gHiLJ3I
KHzdvvpjkQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFA/jK8CNOAYZbHrpS6NSU0A7
wtqjMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEz
ZWVhNDkwZDMzLzAvMzczNDJlMzUzMDJlMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM2MzAzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKMh4wDQYJKoZIhvcNAQELBQADggEB
AIWpTreFNMw8YMRfi3EOH9TDvu/p/axzM+AXf+G+So0TokTjocl6+NuxymQUcdeb
Ide3apEgvVBYXUjBCjKRoLiepc4XPL4m5uBb8NGof+6G6H2CInn2KrYVG9ubA8Q0
00zqQewBAmDG0b2Z1rHcJpenBnmqD7c3IlB6q5ZKJO8FXw250tOiOsDOEVAmHvvt
GLwyki1pwDFcv73d3NGZBHfkb0qBd9uVKqN4gocGqL0n1bChq1DhSc1i83JH6W8d
xfjRP+5kU6nIvR1Q5zPcvyKNRYTu/0wpsb3MAy8rIye39t7l+tPPeIo/2YpnosdG
1y6mX7v1FLjh+36nKMUjpIw=
-----END CERTIFICATE-----