Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e382e302f32342d3234203d3e203631333137.roa
File:                     37342e35302e382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          b11wvxZNF1L7F+4M9xjcrvo0noJSdsLxv8EkWs8HVws=
Subject key identifier:   DA:A7:64:D6:84:F5:CE:E7:C9:54:35:36:AA:09:32:CC:C6:A1:D7:89
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       62B6962AE4819C202BE7932954B8EA4DE7FE5A70
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e382e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 16 Nov 2022 11:29:05 +0000
ROA not before:           Wed 16 Nov 2022 11:24:05 +0000
ROA not after:            Wed 15 Nov 2023 11:29:05 +0000
asID:                     61317
IP address blocks:        74.50.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b6:96:2a:e4:81:9c:20:2b:e7:93:29:54:b8:ea:4d:e7:fe:5a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:05 2022 GMT
            Not After : Nov 15 11:29:05 2023 GMT
        Subject: CN=DAA764D684F5CEE7C9543536AA0932CCC6A1D789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:48:3c:8e:77:57:ba:f3:b2:89:17:eb:2d:7e:
                    71:9b:38:3c:0e:6a:70:5d:7b:0b:dd:90:d4:c2:06:
                    21:8c:8d:1e:04:57:6f:7c:90:a1:f3:f2:5e:2c:9d:
                    1a:88:4c:63:dd:a1:e7:6a:26:cb:ba:62:1f:bf:ee:
                    4e:36:0f:dc:95:b9:f3:62:ee:b8:41:6f:fe:ff:ce:
                    22:71:9e:2e:8e:ad:e4:d8:c4:53:ec:b2:82:e5:04:
                    1c:8e:47:f2:6d:98:0c:11:c0:fe:48:0e:47:08:45:
                    d6:d4:e9:1a:21:e2:97:0b:9c:22:a0:6e:8a:a4:b8:
                    f5:ed:4d:25:13:d3:b3:56:d7:94:32:b3:2c:cb:b3:
                    3a:c4:6c:35:e5:97:84:94:b4:e8:15:c8:c7:53:05:
                    9c:40:b5:6c:4e:63:a2:ea:19:87:f0:af:59:dc:af:
                    31:f4:00:8f:e2:cc:58:09:77:54:58:df:62:ea:50:
                    b0:95:c3:d4:ed:f9:93:2a:e0:89:0f:1b:49:4c:69:
                    e0:13:8a:df:9a:8a:ce:5d:f0:98:34:a7:ea:c7:e7:
                    8f:d1:3d:dc:fd:1a:11:b6:b3:0f:ca:1e:7e:77:fc:
                    86:0e:cb:0d:56:06:96:f6:1a:08:47:2e:c4:0c:11:
                    4a:f8:04:eb:17:87:6b:f7:50:70:cf:4e:80:90:aa:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A7:64:D6:84:F5:CE:E7:C9:54:35:36:AA:09:32:CC:C6:A1:D7:89
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:b6:89:72:e4:8f:20:85:11:a2:a4:bc:34:8a:b7:59:8a:
         53:57:48:e8:2a:84:5f:6a:ec:60:1f:4d:43:ef:57:39:a7:4a:
         41:0a:d4:ae:47:d0:d6:4b:b6:de:15:79:e0:f2:c3:0c:64:66:
         be:ae:e5:a0:0e:13:1f:9c:f2:0a:8c:95:69:a6:99:27:0a:c6:
         08:95:93:19:34:00:34:9c:f5:b7:af:99:23:23:72:35:1f:d7:
         77:87:d4:d2:27:10:1a:ec:0b:c3:a3:24:f6:95:df:d3:90:50:
         12:02:0a:e1:98:79:e8:7e:f1:3d:89:2f:94:a1:6a:28:e4:78:
         57:19:db:89:d5:d0:22:2b:4a:91:a6:29:f4:59:84:a6:86:43:
         c3:4e:53:c1:40:c3:0b:7c:41:92:31:52:e7:a9:7a:ec:73:cc:
         e8:71:e5:11:6a:b7:16:69:b3:37:eb:58:a9:f5:40:28:b0:33:
         2c:6d:a3:d8:4d:45:11:c6:fd:28:92:ea:aa:c5:39:21:cc:78:
         43:e6:68:2b:cc:aa:9e:ec:b6:57:dc:5e:6e:6c:9a:24:97:3d:
         3e:5b:fb:ca:e6:df:17:b0:1c:89:08:ef:f4:90:a6:80:93:d8:
         a6:af:51:96:a3:cd:bb:08:b7:94:c9:e3:96:5b:c1:39:db:5c:
         ce:8d:58:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----