Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          Yhi+gQm19ikAW3ahzoMGTLhAXI/U/jw48BDjulUJ1lM=
Subject key identifier:   54:92:CB:16:80:CC:FD:61:EC:B6:12:81:94:4C:53:CA:85:E8:DE:95
Certificate issuer:       /CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
Certificate serial:       091D64A2400AB7B1A8CF53F00B8654183654BF39
Authority key identifier: 2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Fri 11 Feb 2022 23:45:35 +0000
ROA not before:           Fri 11 Feb 2022 23:40:35 +0000
ROA not after:            Fri 25 Feb 2022 23:45:35 +0000
asID:                     16787
IP address blocks:        2605:1c00:fff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1d:64:a2:40:0a:b7:b1:a8:cf:53:f0:0b:86:54:18:36:54:bf:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
        Validity
            Not Before: Feb 11 23:40:35 2022 GMT
            Not After : Feb 25 23:45:35 2022 GMT
        Subject: CN=5492CB1680CCFD61ECB61281944C53CA85E8DE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:f7:55:bb:35:5b:8b:2e:d4:6d:39:c8:79:
                    53:71:04:fe:4e:60:ab:79:35:3a:b0:de:b7:fa:0a:
                    d1:30:cd:3e:35:0f:6d:01:7d:9c:7c:cf:31:f4:25:
                    39:a5:dc:99:e6:33:e4:19:ff:6c:5e:6f:7d:77:2f:
                    3e:80:ee:20:bb:a8:a5:ef:2c:dc:82:ab:b3:6a:b3:
                    b1:9c:d7:7f:84:e7:83:a5:69:b3:19:7b:83:c9:1b:
                    6e:f6:f5:ed:9d:f1:53:87:48:31:80:76:c6:86:f6:
                    2b:5c:33:37:33:b5:22:6b:9b:c4:e3:28:c7:29:87:
                    c0:c7:37:23:10:4f:36:72:e1:5b:e4:0c:22:52:d7:
                    f8:06:57:b1:0c:61:a4:8b:d2:48:d5:46:fc:d0:e7:
                    4e:0a:a8:05:ce:df:a2:d9:25:ef:a7:2f:e5:c6:20:
                    b1:6c:ef:34:5a:14:39:cc:06:27:c6:db:13:94:4b:
                    8f:8e:af:1d:a6:64:56:2f:ae:95:7f:8a:05:66:c1:
                    c7:c9:f2:63:98:a8:eb:cc:fe:43:54:e6:b2:2d:9d:
                    66:c0:59:26:5d:52:e8:94:ad:15:e1:71:a9:8f:98:
                    8a:f5:ed:76:b5:49:44:2a:49:24:8e:70:4e:98:c4:
                    89:09:fd:c3:d6:e7:79:ab:f0:f2:a5:21:e0:27:aa:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:92:CB:16:80:CC:FD:61:EC:B6:12:81:94:4C:53:CA:85:E8:DE:95
            X509v3 Authority Key Identifier:
                keyid:2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/2A336DBEE8C90A3D94705FD3F30EAB62D658DC52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/323630353a316330303a666666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:7c:27:34:53:17:f8:d3:51:70:79:1c:9c:2b:03:1b:1a:b1:
         de:83:b6:90:4a:bf:cb:7a:10:a0:cd:32:20:e8:ba:97:3b:7a:
         44:cb:a8:71:7c:04:8b:5e:88:e5:e7:2e:98:16:b2:6f:45:37:
         68:79:f4:80:e5:e4:e8:ec:c7:38:64:ba:58:da:d6:73:b5:a4:
         9e:e6:ae:79:76:ee:16:90:e2:9f:73:36:98:eb:64:42:bc:f6:
         e2:bc:8a:e9:03:0c:fc:77:e1:00:8a:41:18:da:89:63:7d:15:
         6d:5f:e2:eb:37:1a:de:85:f6:7a:7a:6b:d0:53:6a:ac:df:b1:
         81:99:1e:b9:d8:9a:7a:6a:c9:02:11:bf:ea:a3:70:e2:d8:2c:
         35:e2:e2:17:5d:a8:70:c7:f8:12:37:00:d3:25:77:48:79:dd:
         06:e8:e5:cb:b3:3f:a2:e1:a6:32:49:99:aa:d2:c1:50:2e:92:
         2a:bf:ea:f4:99:75:45:d8:e1:e1:5e:ee:05:80:3a:66:7b:b4:
         74:c4:cc:2b:06:18:a9:65:6e:f9:db:3d:d7:22:c4:ab:09:4c:
         7e:2f:45:60:da:1f:c2:69:eb:df:e7:ba:31:31:c7:4a:2d:be:
         d3:e2:c1:d8:49:37:ef:d4:50:57:68:7b:90:a3:db:41:49:db:
         aa:31:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----