Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e342e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e342e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          sqqrhmYrUPk7ggv7nIyzus8yVyBJJd+svMFuT7xMSkk=
Subject key identifier:   36:E7:17:E5:72:74:3A:4E:D0:2A:D7:DA:C3:54:EB:3A:04:75:A0:EC
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       3F09C0066A0812A160BB2C71C4A5186F7F7909D3
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e342e302f32342d3234203d3e20323039333731.roa
Signing time:             Wed 16 Nov 2022 11:29:05 +0000
ROA not before:           Wed 16 Nov 2022 11:24:05 +0000
ROA not after:            Wed 15 Nov 2023 11:29:05 +0000
asID:                     209371
IP address blocks:        74.50.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:09:c0:06:6a:08:12:a1:60:bb:2c:71:c4:a5:18:6f:7f:79:09:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:05 2022 GMT
            Not After : Nov 15 11:29:05 2023 GMT
        Subject: CN=36E717E572743A4ED02AD7DAC354EB3A0475A0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:b5:43:2f:2b:c8:d2:60:d7:7e:13:1a:ea:
                    92:0b:9e:09:bb:9f:96:3a:28:bb:d0:43:00:db:cc:
                    77:09:f4:33:5d:9d:1d:6e:43:81:5b:21:da:f8:cd:
                    2c:bf:29:00:d4:6c:f6:d5:3e:5c:10:69:f7:90:3e:
                    86:d3:27:91:ae:e4:45:c3:2d:dc:34:ff:cb:ff:14:
                    36:fd:be:34:a7:66:7a:94:05:b8:21:2b:f8:47:0f:
                    f2:18:d0:1b:eb:e4:79:bc:bb:c2:63:ba:8b:43:9e:
                    1c:b7:e5:ec:0a:d0:c0:c3:1f:bf:8f:1a:1b:48:7c:
                    0b:f2:be:11:a4:96:ae:45:98:c6:5f:78:eb:c0:59:
                    fe:38:48:d8:03:ec:37:16:34:7e:6c:f0:52:08:81:
                    66:d7:b6:99:b2:19:8a:57:95:e8:87:ce:ee:1d:60:
                    2b:e5:d8:58:26:c3:03:0c:24:58:01:b5:ae:e8:5c:
                    29:b3:b4:a4:53:12:b1:79:2b:66:4c:ef:40:ca:1f:
                    f4:78:bd:54:3b:e7:46:d2:1e:81:0d:49:08:a2:32:
                    6b:92:fd:0a:fa:09:33:89:85:01:ca:aa:8b:d3:64:
                    27:da:4a:1f:d7:f5:a0:ed:16:d4:cc:7a:5f:48:af:
                    f9:75:4a:77:51:19:83:be:08:6a:d1:e7:72:9e:01:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:17:E5:72:74:3A:4E:D0:2A:D7:DA:C3:54:EB:3A:04:75:A0:EC
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e342e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:cc:65:cd:49:c2:27:fa:2c:7d:28:f6:6f:c3:8d:af:e5:ff:
         26:db:98:a4:26:40:66:e0:a3:40:3c:76:a4:b6:fd:e5:db:3a:
         35:a9:2c:d3:53:1c:81:57:82:4c:86:90:2b:dc:3a:9f:9b:91:
         ed:46:ba:1b:e8:dc:19:ab:02:5d:f3:24:1a:dc:f9:62:a6:59:
         4f:c0:ea:70:ae:27:67:51:94:77:73:8f:df:26:9e:86:cf:1f:
         8b:1e:ed:2d:00:a7:a0:90:aa:b9:db:02:2c:7c:93:cf:90:8e:
         b3:25:98:b3:5c:c1:db:64:24:41:57:4c:53:a5:4b:9e:fe:ab:
         b0:ca:eb:49:cc:64:00:20:de:58:78:66:1a:af:f7:af:52:e4:
         b1:d4:22:be:b5:4f:27:07:e5:1d:11:f1:df:f0:35:82:da:4c:
         f3:54:8e:6b:7e:e6:81:11:5b:11:b4:2b:b1:4e:c7:25:a7:c9:
         4e:43:6b:91:57:3d:24:24:9f:4b:bf:c4:a2:d2:c4:f1:89:80:
         10:f7:e7:10:ff:9e:bc:9b:20:0b:e9:01:69:15:27:b7:0a:8e:
         4e:d7:3d:d3:2d:0f:a9:cc:65:3b:df:31:53:ba:ee:35:66:00:
         81:ed:f7:42:43:ef:c4:ca:f4:60:0b:03:8a:5e:cf:13:79:72:
         34:ba:21:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----