Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          7+7xxxoP+QcY98k0to3wE/CoowwuKX9PKxRKmRHSBHw=
Subject key identifier:   9B:1C:5C:FA:17:EC:22:E3:D1:13:42:E0:8A:E2:01:C9:91:70:A7:EB
Certificate issuer:       /CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
Certificate serial:       30A2C6F010595B4E065924939FE3F68620B5E807
Authority key identifier: 2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Fri 11 Feb 2022 23:45:35 +0000
ROA not before:           Fri 11 Feb 2022 23:40:35 +0000
ROA not after:            Fri 25 Feb 2022 23:45:35 +0000
asID:                     16787
IP address blocks:        2605:1c00:50f0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a2:c6:f0:10:59:5b:4e:06:59:24:93:9f:e3:f6:86:20:b5:e8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
        Validity
            Not Before: Feb 11 23:40:35 2022 GMT
            Not After : Feb 25 23:45:35 2022 GMT
        Subject: CN=9B1C5CFA17EC22E3D11342E08AE201C99170A7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:96:66:9b:c3:87:da:e3:87:4b:6c:12:bc:
                    f5:f6:6f:5a:2e:3e:7a:79:a3:21:18:c3:45:b3:2e:
                    2d:02:a7:a3:84:c2:6e:dc:73:ba:53:4e:f9:41:0e:
                    ff:86:0e:a7:48:43:82:5a:6f:f9:83:32:48:be:55:
                    94:13:f3:83:fb:3e:34:25:f1:58:d4:d7:ad:c5:28:
                    d7:74:98:60:67:da:ad:d5:f6:27:bb:3a:06:5d:7b:
                    6d:15:c6:ba:d3:ed:c1:ac:31:d2:55:85:07:8e:53:
                    60:8d:d5:dd:c5:b0:6b:90:bf:b2:5b:00:fa:c3:7b:
                    28:64:ed:a4:50:78:1a:76:a5:ab:04:0e:b6:2e:e6:
                    7f:2b:32:82:c1:64:82:94:9f:3f:b7:6f:fd:a4:db:
                    a1:e1:03:3c:2d:bf:24:3a:11:e4:2e:80:17:3f:c2:
                    b8:18:62:49:e0:f7:07:b0:41:54:a4:ca:d6:4d:e3:
                    68:1d:d3:cc:e7:37:9c:ae:0b:e9:8b:49:12:83:29:
                    96:aa:44:6b:a3:e7:6b:43:c8:9c:50:b0:4d:14:95:
                    01:17:24:68:91:88:bc:56:68:42:27:f4:06:2e:70:
                    8e:80:e5:ae:d6:2d:63:4a:1f:93:d7:26:ce:96:58:
                    19:cf:8f:f5:e1:59:29:22:04:51:b2:1c:8c:87:4b:
                    8c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:5C:FA:17:EC:22:E3:D1:13:42:E0:8A:E2:01:C9:91:70:A7:EB
            X509v3 Authority Key Identifier:
                keyid:2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/2A336DBEE8C90A3D94705FD3F30EAB62D658DC52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:50f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:08:cb:89:d8:f5:53:67:f1:27:46:0f:9d:aa:7f:5c:bd:e4:
         4b:36:98:38:da:99:9b:73:e9:b2:27:ff:77:97:2e:c8:d9:4f:
         02:1c:8f:07:02:22:87:a4:50:5a:63:16:24:62:56:09:78:2e:
         56:18:dd:16:25:28:77:bf:e9:2f:f6:2e:02:72:57:ab:cc:09:
         cb:56:e2:f6:66:b2:9e:a3:a1:47:26:90:1c:6f:e7:98:5b:18:
         e9:7d:da:f5:81:8b:69:a9:f8:a1:93:d3:ed:b7:d3:f8:c3:65:
         7d:69:3f:49:d4:82:31:1d:76:61:ea:ba:a5:50:e6:66:58:37:
         f9:58:c0:1f:47:5c:22:68:e3:63:bd:4b:a7:b0:63:e9:6d:c6:
         9e:fd:81:25:b5:0e:9e:87:43:45:1f:e4:51:29:ad:90:2c:3c:
         04:0b:b5:f3:84:db:71:1f:d3:c3:16:6b:f9:dc:9e:e0:65:79:
         1c:29:4a:a7:71:2c:00:eb:08:da:e1:4f:bb:8e:de:4b:13:1e:
         b8:8d:e1:0e:49:e7:e1:3d:29:4c:b8:a0:3d:1d:36:b0:68:ec:
         81:34:b8:1e:ec:32:88:7b:33:6a:a9:a9:87:73:69:6a:b4:10:
         4c:e5:99:3a:f5:ba:6e:db:e7:5e:c5:67:3b:12:a9:46:9c:3c:
         28:42:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----