Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e352e302f32342d3234203d3e203630373231.roa
File:                     37342e35302e352e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          Mv3uT+KUYYmGmazOmQG7ypMNNJoJq2Nu6aLTtTMNw9o=
Subject key identifier:   0C:29:F8:7D:CF:3B:E2:27:EF:FD:20:76:27:97:F9:28:AA:96:76:1C
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       40E8EFB99091D07EC27011782FA73820B6401ACC
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e352e302f32342d3234203d3e203630373231.roa
Signing time:             Tue 09 Aug 2022 20:22:56 +0000
ROA not before:           Tue 09 Aug 2022 20:17:56 +0000
ROA not after:            Tue 08 Aug 2023 20:22:56 +0000
asID:                     60721
IP address blocks:        74.50.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e8:ef:b9:90:91:d0:7e:c2:70:11:78:2f:a7:38:20:b6:40:1a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Aug  9 20:17:56 2022 GMT
            Not After : Aug  8 20:22:56 2023 GMT
        Subject: CN=0C29F87DCF3BE227EFFD20762797F928AA96761C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:12:c6:3c:29:13:79:13:00:6f:7a:ac:d5:
                    37:91:8a:b7:7d:2f:e0:4f:dd:75:60:7d:ac:57:af:
                    c7:61:55:68:dc:fe:11:f2:8c:b7:52:90:f4:2c:70:
                    36:8b:38:85:0a:c5:d0:2c:74:06:47:67:bb:b3:28:
                    a0:32:4a:6d:45:d1:13:ba:f5:21:4e:3b:bd:ba:3b:
                    cf:11:b2:80:70:af:02:e5:64:3c:ab:24:f0:b0:ec:
                    c9:e8:1c:1a:05:a3:73:5a:01:4d:a6:c2:b9:2e:9a:
                    75:3b:17:38:4f:93:ab:0b:4b:a7:5c:91:39:8c:26:
                    df:34:1a:6d:7d:f5:14:14:f6:39:df:5c:ae:b5:c9:
                    8e:d5:12:42:ee:f1:dd:64:b2:bd:f0:d3:72:6d:1b:
                    c5:af:91:b1:4d:8d:ab:9b:3f:67:fa:49:24:29:7f:
                    4b:72:90:b7:2b:85:9e:3c:dc:38:3b:1e:7f:f3:5e:
                    59:9f:bf:79:41:2e:b1:55:bd:03:89:5a:2c:68:44:
                    ff:58:8b:a6:62:b1:42:39:a4:a5:2e:48:a7:ef:bc:
                    29:83:b6:55:4d:c1:36:3f:05:d5:08:c6:a2:1c:d2:
                    36:49:07:87:95:51:21:25:ee:4f:80:8a:17:8f:29:
                    7f:ba:d6:81:ba:00:05:77:6c:b6:ac:bf:3f:da:8a:
                    79:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:29:F8:7D:CF:3B:E2:27:EF:FD:20:76:27:97:F9:28:AA:96:76:1C
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e352e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:69:02:03:88:29:b6:cf:41:7e:45:4b:ca:d4:95:f5:66:05:
         25:d5:96:12:37:3e:a4:9b:0e:64:7a:f6:a1:ed:99:32:7f:4d:
         9d:de:4f:7c:21:6c:11:df:25:4f:e3:4b:fd:45:08:eb:dd:1a:
         78:47:93:d7:80:c5:c9:c6:cf:64:70:71:db:9f:09:52:f9:a7:
         53:68:db:88:9b:03:d7:22:b1:79:a8:55:da:82:f5:01:e6:89:
         34:a9:85:77:f7:82:c3:e8:e2:36:58:c1:00:27:03:ab:41:76:
         00:dd:52:17:b7:a2:cc:8d:08:71:b9:59:2d:e7:cd:f9:32:3f:
         6c:c5:0b:59:27:68:d0:3e:2b:d4:12:84:ff:38:44:53:ee:6b:
         8d:98:1f:83:b5:35:44:15:18:86:aa:a8:c9:64:39:ad:e1:af:
         b1:ea:a0:19:a9:42:96:38:e8:92:02:d5:b7:07:ec:7f:ad:8a:
         4f:a6:96:2d:59:11:50:6a:ff:41:6e:e5:f4:97:29:36:db:5f:
         18:f4:44:03:42:c5:7f:a0:b8:c0:91:66:2d:8c:d0:f8:d4:35:
         07:1e:cc:88:4b:ed:35:3f:6b:a1:ab:ed:2c:de:4e:81:bc:d5:
         ba:76:89:8a:40:0e:92:31:bc:4f:e3:98:50:0d:73:2c:49:67:
         37:f0:72:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----