Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          A3BrG1x4Msu+BR173Pdql8N9PYmGAUkG49/IhRhwyzk=
Subject key identifier:   E4:FA:21:1E:AE:E9:7C:82:12:ED:DF:1E:9C:75:88:1D:CE:0A:7D:7F
Certificate issuer:       /CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
Certificate serial:       3193374D9ED32300E7A926DA43446C2A486B28D6
Authority key identifier: 2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Fri 11 Feb 2022 23:45:35 +0000
ROA not before:           Fri 11 Feb 2022 23:40:35 +0000
ROA not after:            Fri 25 Feb 2022 23:45:35 +0000
asID:                     16787
IP address blocks:        2605:1c00:1ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:93:37:4d:9e:d3:23:00:e7:a9:26:da:43:44:6c:2a:48:6b:28:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
        Validity
            Not Before: Feb 11 23:40:35 2022 GMT
            Not After : Feb 25 23:45:35 2022 GMT
        Subject: CN=E4FA211EAEE97C8212EDDF1E9C75881DCE0A7D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:6e:b8:35:4c:f1:d6:9e:95:46:2b:36:5e:
                    9b:fb:ae:c6:a4:35:b3:49:ca:13:08:a1:3d:f3:ad:
                    30:27:d1:04:73:58:43:d7:df:77:95:ec:4d:d1:53:
                    6f:28:06:68:e9:71:58:11:f3:9d:d0:ba:d1:63:bc:
                    15:fb:14:04:8a:ae:34:5a:98:b5:f2:a7:ab:10:4b:
                    09:26:bd:40:45:bb:2d:82:cf:71:45:f9:01:8b:4f:
                    de:e0:b4:c5:04:07:b4:68:ff:3f:dc:c4:d1:82:5d:
                    72:67:8c:8f:2d:0f:d1:61:aa:02:89:b0:2d:c7:b3:
                    1e:53:16:69:6c:77:73:56:9d:6a:4c:54:e1:14:03:
                    8c:59:ae:6f:34:8a:98:22:52:60:7e:de:d0:07:22:
                    1e:fe:1a:0c:7b:25:f6:93:2a:9d:db:88:42:a1:b2:
                    f3:ed:69:20:97:70:28:aa:ce:8d:c8:7a:07:d1:c4:
                    e9:07:b1:3e:81:7b:37:6b:9a:e1:8c:e4:54:33:7c:
                    be:66:70:f7:8e:ed:c4:79:cc:55:c9:fc:0b:41:af:
                    22:f3:1c:17:83:60:ff:db:23:7b:ff:f2:1a:50:5a:
                    49:ae:b7:99:74:4a:98:d5:a5:7f:ca:20:20:d7:6d:
                    86:d3:55:5e:86:13:60:51:eb:29:8e:f1:b2:f0:c6:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FA:21:1E:AE:E9:7C:82:12:ED:DF:1E:9C:75:88:1D:CE:0A:7D:7F
            X509v3 Authority Key Identifier:
                keyid:2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/2A336DBEE8C90A3D94705FD3F30EAB62D658DC52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:1ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b6:3b:5c:a8:e2:4f:04:5d:88:f3:6e:56:21:38:98:ee:ff:6a:
         b9:72:d7:ee:e2:7d:7f:c9:6e:46:fc:a4:78:e0:42:4e:28:30:
         73:cc:86:44:0a:a3:a0:7b:ed:05:b5:cf:12:9b:60:c2:e6:5e:
         c3:73:ba:92:8f:a5:b2:2e:1c:e0:06:55:55:b1:7b:e0:52:8f:
         8a:99:84:4f:ff:5a:a8:6f:10:77:2a:e4:1c:1e:9e:79:64:e0:
         24:58:30:04:33:2c:ff:34:35:da:df:93:64:80:44:30:fe:f5:
         b3:47:af:9e:16:7e:78:90:f5:8d:5c:7d:b1:3e:a5:e4:92:15:
         8b:59:97:62:e3:2e:16:3a:a1:82:45:4f:bb:a7:61:e0:52:a5:
         54:37:fb:3d:d8:31:3e:13:4a:ed:34:c7:a1:94:b5:0a:0b:a3:
         1f:b0:22:d9:e9:ee:dc:d4:90:fa:af:8f:6c:b4:34:5f:e9:50:
         6c:cd:ba:98:c1:f5:cc:98:b2:c2:18:01:50:a0:48:83:56:a1:
         df:e0:e6:03:4d:c6:ce:41:c7:19:c1:4e:f2:82:fd:1a:2c:0e:
         51:b4:c1:63:55:e9:e5:8a:55:a4:f7:16:44:d8:fa:e6:de:38:
         0d:85:10:83:da:91:1e:c5:8a:d8:d5:fa:87:dd:4d:b9:df:d1:
         a4:bc:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----