Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          YeXZhGl+ezfx3ssTrGTZ0Hk6KWWIvnIjGA2WUfugFWc=
Subject key identifier:   1B:78:F1:0B:6D:0F:53:74:42:27:50:E7:B2:13:BA:DD:77:27:DE:44
Certificate issuer:       /CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
Certificate serial:       6F861158A76818789FD5753A596FCC67AB5F7EBE
Authority key identifier: 37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Tue 11 Jan 2022 18:35:35 +0000
ROA not before:           Tue 11 Jan 2022 18:30:35 +0000
ROA not after:            Tue 10 Jan 2023 18:35:35 +0000
asID:                     16787
IP address blocks:        2605:1c00:50f0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:86:11:58:a7:68:18:78:9f:d5:75:3a:59:6f:cc:67:ab:5f:7e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
        Validity
            Not Before: Jan 11 18:30:35 2022 GMT
            Not After : Jan 10 18:35:35 2023 GMT
        Subject: CN=1B78F10B6D0F5374422750E7B213BADD7727DE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:c6:51:33:2f:87:40:92:11:0a:8e:93:d0:
                    0b:7c:a2:95:1f:95:3f:6e:d4:d0:b8:16:4f:57:85:
                    c1:01:e6:cd:07:a2:0f:01:2a:9d:6b:fc:fe:89:41:
                    c5:3f:a3:f4:96:e4:92:60:97:76:03:2d:46:43:ea:
                    d9:d5:0c:0a:af:89:84:2a:d1:87:66:20:95:b8:ea:
                    5f:e9:57:2f:9a:fe:8d:ff:37:13:9d:bc:0b:b4:f8:
                    7f:4a:5f:66:81:cf:ce:c1:49:17:53:b6:37:8a:18:
                    60:ff:93:83:27:6e:bf:fc:e2:27:97:15:3a:6c:d2:
                    bf:30:6d:8a:e7:22:c2:eb:b7:88:a6:69:4a:ce:35:
                    0d:13:1a:9f:9c:24:88:71:f3:63:43:a5:d5:27:fb:
                    9c:82:48:d6:b9:01:88:00:db:54:f5:76:ee:7c:43:
                    96:fb:bd:8d:a7:d5:90:f2:78:51:38:7b:95:ac:77:
                    26:87:1e:12:b5:a1:b8:0f:97:48:b7:23:a8:21:ce:
                    b4:ac:c4:a3:cd:e8:36:84:55:dd:67:b4:f5:97:9d:
                    f4:b1:02:00:55:7d:f0:29:26:76:42:19:1c:97:99:
                    39:e7:56:76:4b:ed:6c:3f:d7:53:a5:bc:9a:64:eb:
                    2a:60:b4:2b:a9:b1:10:89:2b:10:ff:fa:93:cc:35:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:78:F1:0B:6D:0F:53:74:42:27:50:E7:B2:13:BA:DD:77:27:DE:44
            X509v3 Authority Key Identifier:
                keyid:37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/3714444A3C87A55B1D9FA161A4C916E5F64911DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:50f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ae:a5:36:11:58:f0:04:7d:ac:bf:62:cc:f8:10:fb:db:e7:66:
         bb:a6:f6:b9:19:53:45:b9:23:bc:7b:0e:83:2c:ab:08:fd:e1:
         56:a3:89:e6:a8:09:46:35:96:cd:04:0d:7e:3f:a3:42:83:71:
         f0:a2:f4:65:97:4b:d1:de:7b:53:1a:6c:77:85:6a:d8:7f:90:
         a9:70:0d:dc:2d:5e:9e:be:3d:b7:94:ea:91:60:49:fc:c1:3c:
         a0:e0:bb:31:2a:6d:f6:c8:f6:4b:ce:dc:43:83:36:96:9a:91:
         07:17:f2:1a:20:1b:e5:2d:98:b6:50:0c:85:f6:e5:3a:2a:ed:
         a3:fc:93:6f:0f:2a:cd:3d:b8:21:5f:b5:1c:f0:11:2c:54:dc:
         6c:a6:6f:4a:6a:d1:e5:bd:00:1d:85:2b:8e:40:1c:7d:d8:29:
         56:30:61:e8:52:89:a6:3c:21:6b:1c:d2:a3:96:c1:93:f2:dc:
         55:07:f5:dd:be:11:d0:71:e6:21:57:b1:9e:04:c5:cb:87:72:
         ee:5e:b6:b5:1a:6d:a1:a1:a5:eb:83:84:25:15:d6:81:39:5f:
         4f:fc:a0:f7:d4:a6:7d:12:8a:21:02:4e:d2:28:33:81:9a:cb:
         b4:90:c0:c3:9e:75:79:47:a3:55:25:81:44:b9:cf:94:3a:fa:
         54:c9:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----