When I try to install the authrootstl.cab offline it won't work. The certificates are installed but Windows doesn't trust the file, and will continue to try to download it. It says the list signing certificate is invalid.
I discovered the offline installation requires both MicCerTruLisPCA_2009-04-02.crl and microsoftrootcert.crl. But installing those doesn't solve my problem.