Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e362e302f32342d3234203d3e203631333137.roa
File:                     37342e35302e362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          gBdype1SRY7sQyUaQ6pilVp9nWlXItKWrfbUong1kC0=
Subject key identifier:   20:3B:10:CE:C5:CC:A7:72:D7:CA:03:D2:F0:C2:F8:A2:68:EF:D5:2A
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       2AC1024C09844F2C3448D101D20F87A2DB190074
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e362e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     61317
IP address blocks:        74.50.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c1:02:4c:09:84:4f:2c:34:48:d1:01:d2:0f:87:a2:db:19:00:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=203B10CEC5CCA772D7CA03D2F0C2F8A268EFD52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:51:4c:a9:5d:ba:e6:83:72:7f:f6:63:be:ae:
                    92:e3:bc:8f:81:be:15:88:9f:c6:62:8f:1c:ee:cf:
                    81:07:96:4b:08:09:c1:57:ac:a9:a2:2e:98:18:72:
                    e1:c3:60:b0:ba:22:44:8d:b1:de:ac:10:53:29:3e:
                    e5:de:2f:2f:3a:c0:23:c9:07:f0:ac:2a:14:2e:31:
                    d0:2e:a3:e4:51:1d:b0:fa:cd:e3:2f:00:88:4d:a5:
                    fe:e6:9a:14:43:74:70:62:49:07:fd:e9:cc:16:d3:
                    15:f6:ce:bf:28:a8:af:a5:d8:56:dd:88:43:40:a1:
                    2e:95:15:30:36:3f:ab:16:d9:97:c4:a8:37:60:bf:
                    8d:22:20:cd:93:3e:ed:33:ca:23:79:ca:d5:ba:62:
                    53:a5:e4:52:d3:eb:99:2b:c4:31:ec:82:fe:3d:bd:
                    a9:62:9d:af:43:a3:37:4a:75:18:e4:86:21:59:7d:
                    61:9d:01:36:78:c5:55:8a:f2:24:72:90:6a:3f:5c:
                    2a:8c:0c:54:2f:f2:e5:ba:2f:af:0e:18:ca:cd:54:
                    76:62:d4:7d:c4:d8:fd:7d:c8:7c:9a:e5:15:69:74:
                    29:89:70:2e:ed:39:2e:95:47:4a:f3:3d:22:3f:3a:
                    b9:2a:dd:f3:05:fd:17:f8:55:c5:cc:68:b5:e4:a9:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3B:10:CE:C5:CC:A7:72:D7:CA:03:D2:F0:C2:F8:A2:68:EF:D5:2A
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:5e:04:e9:57:46:81:ca:8e:74:f6:8e:55:fa:c6:d2:78:31:
         d8:ff:4d:dc:22:d4:b4:d8:ff:05:bc:00:d5:1f:c0:9a:98:25:
         9d:9f:df:d4:74:36:ab:fb:01:de:84:9b:9b:33:49:61:5b:7d:
         e9:3e:ad:66:52:f1:2d:ee:10:e4:f1:b6:0e:a4:be:8b:83:3c:
         4c:13:ba:26:30:75:2b:73:d5:e0:79:ca:c6:f6:92:b1:87:83:
         c0:14:aa:c8:4c:29:3a:12:36:06:06:9e:fc:a9:09:88:28:70:
         34:ab:68:63:b5:ef:7f:c9:46:3d:09:d0:a3:fe:e4:57:7a:d3:
         1f:ca:5a:aa:94:6d:1a:9a:d9:fe:fd:35:e7:6e:6b:b9:44:6b:
         11:92:81:b6:81:f2:4d:21:20:e2:93:35:55:3c:40:82:23:d1:
         27:e3:57:a0:62:25:78:ec:88:fa:42:81:c2:00:4e:1a:8c:f5:
         0c:4f:d5:67:34:19:34:81:fc:04:83:a8:5e:37:a4:b1:dd:f4:
         43:eb:b0:ae:6f:70:37:8f:09:2e:73:98:1d:fc:20:b9:60:1d:
         a0:fc:0d:2d:6c:53:c5:06:cb:81:18:6d:d2:d3:a7:e7:b9:41:
         88:e3:cc:95:33:a5:33:bb:5f:8b:cb:c2:fe:38:f9:5f:ba:08:
         1c:f1:a9:c7
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUKsECTAmETyw0SNEB0g+HotsZAHQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE2MTEyNDA0WhcNMjMxMTE1MTEyOTA0
WjAzMTEwLwYDVQQDEygyMDNCMTBDRUM1Q0NBNzcyRDdDQTAzRDJGMEMyRjhBMjY4
RUZENTJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FFMqV265oNy
f/Zjvq6S47yPgb4ViJ/GYo8c7s+BB5ZLCAnBV6ypoi6YGHLhw2CwuiJEjbHerBBT
KT7l3i8vOsAjyQfwrCoULjHQLqPkUR2w+s3jLwCITaX+5poUQ3RwYkkH/enMFtMV
9s6/KKivpdhW3YhDQKEulRUwNj+rFtmXxKg3YL+NIiDNkz7tM8ojecrVumJTpeRS
0+uZK8Qx7IL+Pb2pYp2vQ6M3SnUY5IYhWX1hnQE2eMVVivIkcpBqP1wqjAxUL/Ll
ui+vDhjKzVR2YtR9xNj9fch8muUVaXQpiXAu7TkulUdK8z0iPzq5Kt3zBf0X+FXF
zGi15KluGwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCA7EM7FzKdy18oD0vDC+KJo
79UqMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEz
ZWVhNDkwZDMzLzAvMzczNDJlMzUzMDJlMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjIGMA0GCSqGSIb3DQEBCwUAA4IBAQA2
XgTpV0aByo509o5V+sbSeDHY/03cItS02P8FvADVH8CamCWdn9/UdDar+wHehJub
M0lhW33pPq1mUvEt7hDk8bYOpL6LgzxME7omMHUrc9XgecrG9pKxh4PAFKrITCk6
EjYGBp78qQmIKHA0q2hjte9/yUY9CdCj/uRXetMfylqqlG0amtn+/TXnbmu5RGsR
koG2gfJNISDikzVVPECCI9En41egYiV47Ij6QoHCAE4ajPUMT9VnNBk0gfwEg6he
N6Sx3fRD67Cub3A3jwkuc5gd/CC5YB2g/A0tbFPFBsuBGG3S06fnuUGI48yVM6Uz
u1+Ly8L+OPlfuggc8anH
-----END CERTIFICATE-----