Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          6xTli59frR4ryHEOzEOuy4sXbnsco6xSkWGbkpiSNr4=
Subject key identifier:   52:38:92:00:01:37:4B:D6:9C:D2:12:28:9F:7C:DA:C1:9D:22:9A:D2
Certificate issuer:       /CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
Certificate serial:       731E19FD1115ED4C83574B84D3D2BF2AE116D63E
Authority key identifier: 37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Tue 11 Jan 2022 18:35:35 +0000
ROA not before:           Tue 11 Jan 2022 18:30:35 +0000
ROA not after:            Tue 10 Jan 2023 18:35:35 +0000
asID:                     16787
IP address blocks:        2605:1c00:fff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1e:19:fd:11:15:ed:4c:83:57:4b:84:d3:d2:bf:2a:e1:16:d6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd
        Validity
            Not Before: Jan 11 18:30:35 2022 GMT
            Not After : Jan 10 18:35:35 2023 GMT
        Subject: CN=5238920001374BD69CD212289F7CDAC19D229AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:72:01:6c:08:30:db:20:8b:3e:e2:3c:30:
                    0c:53:e3:ec:89:c1:36:d8:73:d0:ee:7c:1b:09:bc:
                    9b:48:49:88:ac:25:12:50:05:45:76:ce:50:6a:51:
                    48:4b:4d:33:4b:b0:10:95:c6:eb:3b:37:3d:fe:60:
                    fd:0e:0b:5c:4c:63:dc:52:26:35:f3:19:7b:79:78:
                    6c:aa:74:1e:d0:af:e6:5d:7d:5a:01:a4:dc:a8:47:
                    ac:59:d7:5a:fe:a4:aa:77:40:34:5a:bd:dd:b6:45:
                    32:11:45:0e:62:04:6f:42:56:e6:61:a3:0f:e3:0b:
                    df:85:2c:b2:b7:8f:c3:1e:f3:1a:5e:db:fe:a5:38:
                    cc:67:c3:25:28:a7:2e:06:d9:3f:7f:d4:f9:eb:be:
                    1e:72:e2:05:18:ea:0f:9e:a2:29:bc:7c:3a:8d:26:
                    31:8a:30:d4:92:24:35:37:dc:d6:c4:68:50:03:8a:
                    2a:83:33:92:d8:95:18:7c:db:1f:c5:83:52:46:83:
                    64:49:9a:f2:f4:5f:af:e6:b0:6e:e6:f9:98:3b:06:
                    3c:d9:ff:82:e7:d6:16:e8:62:4d:a8:b6:1c:7c:4c:
                    eb:8b:58:a6:9b:f6:77:20:7e:8a:5e:60:69:03:25:
                    74:78:f1:99:72:17:ad:9a:aa:ad:25:fa:20:93:38:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:92:00:01:37:4B:D6:9C:D2:12:28:9F:7C:DA:C1:9D:22:9A:D2
            X509v3 Authority Key Identifier:
                keyid:37:14:44:4A:3C:87:A5:5B:1D:9F:A1:61:A4:C9:16:E5:F6:49:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/3714444A3C87A55B1D9FA161A4C916E5F64911DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6b89697f-b107-49cb-8db4-c6a39e36ce3e/15151ee44c65aa90db6540448bd32233d10108e762bcf79dbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e4a68efd019ef/4/323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9b:b6:23:c7:21:6f:48:40:d0:06:25:dc:ff:d7:0d:fa:d4:49:
         b8:3b:de:ea:4b:cf:74:e3:c0:98:92:27:d0:63:44:d6:bd:5d:
         39:b0:0f:21:1d:fd:6e:e0:52:ca:9a:b1:91:74:f0:b8:05:f3:
         c3:92:1e:1e:f5:5b:6c:fa:47:3f:39:d2:0b:99:56:10:73:c1:
         9b:7a:ed:c3:3b:4e:68:f8:ca:5d:16:8c:ed:0c:40:b9:26:6a:
         b2:06:ac:26:6d:3a:11:32:a1:8f:12:8c:72:ac:98:3a:6e:ed:
         41:44:60:72:70:e5:cb:5e:1c:67:01:c6:f8:de:79:e3:b7:b8:
         87:80:57:48:0f:36:2c:c1:e4:29:34:71:1d:5d:8f:78:78:a5:
         5f:fb:e9:c3:d3:8b:5e:2a:0f:e8:0f:5c:91:86:03:9b:47:00:
         f8:14:29:03:e0:ea:31:9c:9d:46:52:60:5c:61:7e:8a:91:06:
         a6:04:44:0e:dd:8f:14:33:42:f6:9b:b0:86:99:8a:11:1a:c0:
         8d:fe:d6:9a:79:94:a7:3d:37:26:bc:a5:ef:45:f0:cf:47:1a:
         0a:d7:cc:47:ff:d0:e1:3a:ec:10:1d:fb:6b:4b:44:64:95:7a:
         08:e5:77:2d:56:27:7d:7c:b0:6f:bb:3c:21:99:e0:cb:3b:db:
         44:76:39:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----