Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          COmKw2IIA+9qG2PPh3R7D9dpCA40QLg4wh6XBUtDBms=
Subject key identifier:   29:3E:D8:FC:90:49:F0:7C:F1:7E:D3:26:4C:08:DF:7C:5F:8F:E3:6E
Certificate issuer:       /CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
Certificate serial:       4485C72085CF7103B1E76B91C80BD1C6610A8DF5
Authority key identifier: 37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Tue 11 Jan 2022 18:35:35 +0000
ROA not before:           Tue 11 Jan 2022 18:30:35 +0000
ROA not after:            Tue 10 Jan 2023 18:35:35 +0000
asID:                     16787
IP address blocks:        2605:1c00:1ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:85:c7:20:85:cf:71:03:b1:e7:6b:91:c8:0b:d1:c6:61:0a:8d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
        Validity
            Not Before: Jan 11 18:30:35 2022 GMT
            Not After : Jan 10 18:35:35 2023 GMT
        Subject: CN=293ED8FC9049F07CF17ED3264C08DF7C5F8FE36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:01:cb:80:d7:ff:53:97:71:75:ca:61:a9:
                    f9:f2:73:6b:5f:8f:d2:98:a0:f4:94:16:eb:b4:34:
                    90:85:ec:6c:1f:3b:b7:3f:b0:db:ee:6b:f1:87:ea:
                    b8:a4:e2:fd:d5:19:f6:c6:de:43:fb:1f:53:10:3e:
                    4b:50:76:18:87:04:ad:b2:86:ef:85:86:91:49:c3:
                    07:a6:de:68:7f:ae:7b:90:2e:79:ce:5c:dc:dc:38:
                    af:db:75:7a:1f:91:6c:fb:db:0e:57:39:4f:ad:85:
                    d8:8d:80:20:5a:6b:13:ec:86:a2:04:fe:12:46:b8:
                    37:40:94:94:ed:ae:ad:e9:aa:a0:02:bb:08:14:2b:
                    5a:e8:fe:77:57:45:a4:4c:1f:ac:64:51:a4:79:b2:
                    d3:9b:cf:99:50:56:49:a1:c8:18:b4:92:54:c9:2e:
                    3d:7b:22:ef:d1:d0:33:e4:3c:cb:a7:36:14:32:2f:
                    3c:49:d4:2a:13:38:1c:05:fd:e3:ec:d7:f1:66:f0:
                    a3:5b:91:85:c0:28:0f:56:0e:60:eb:f9:f6:f5:d4:
                    eb:1b:4e:fc:c2:86:19:5d:12:26:ca:48:33:95:c5:
                    a8:52:9a:5f:fd:5c:67:f0:c9:5d:c2:19:4f:c8:64:
                    dc:46:fd:04:65:32:24:67:26:7d:89:6d:91:6c:a3:
                    e1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:D8:FC:90:49:F0:7C:F1:7E:D3:26:4C:08:DF:7C:5F:8F:E3:6E
            X509v3 Authority Key Identifier:
                keyid:37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/3714444A3C87A55B1D9FA161A4C916E5F64911DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:1ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:08:4b:27:33:8e:0e:02:1a:0c:4d:af:ed:1b:e4:72:0a:68:
         62:fe:6f:4b:5f:68:d5:5d:9f:99:07:4b:3d:4d:58:41:5b:7a:
         f9:bc:31:a3:78:d4:c1:5a:ec:de:bd:6e:a5:83:bf:80:07:a4:
         a8:dd:10:b6:38:61:98:2f:ee:26:4a:84:9c:f0:9d:d2:c1:99:
         b2:03:60:58:aa:47:3f:b8:13:ac:1c:f1:47:72:e2:9c:98:a1:
         5e:b4:0f:ba:d8:d7:3d:2e:45:b5:69:f3:bb:b6:87:a2:a2:26:
         68:f8:0d:3b:5e:6f:86:a0:32:22:61:2d:38:e8:d1:3e:46:ce:
         57:5a:4e:b8:40:c3:bb:03:2f:91:37:f7:36:fd:11:8b:91:1c:
         f0:d9:3c:f0:2e:ae:a3:39:c0:7e:2e:d8:d9:f4:33:13:c0:73:
         e6:22:c9:ab:82:8a:37:fe:9b:05:ea:42:97:86:fb:06:fa:2a:
         43:2b:7a:f6:e0:7b:66:89:d4:f9:d0:1d:6b:8e:36:3b:9d:0b:
         f8:0d:fa:01:82:27:4d:83:51:9b:47:95:df:35:ed:d8:fd:b5:
         93:75:fb:81:c0:12:b9:9f:44:f1:32:84:9d:05:70:1a:10:39:
         ae:20:15:a5:de:fb:d4:3b:6a:99:1c:dc:ab:3b:7e:06:2c:9d:
         0e:30:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----