Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
File:                     3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa (raw, json)
Hash identifier:          ON8lqn5ARSfg6ggUwEbJQXuHhFmQeTEg/sTPZ0+t3i4=
Subject key identifier:   C0:C4:CC:6A:84:0E:52:6B:C8:6E:91:60:89:E9:22:DB:61:17:3C:9F
Certificate issuer:       /CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
Certificate serial:       505A167F2D4F150F0451BF5BFF6C7F3A49186EB9
Authority key identifier: DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa
Signing time:             Fri 02 Jun 2023 18:33:21 +0000
ROA not before:           Fri 02 Jun 2023 18:28:21 +0000
ROA not after:            Fri 16 Jun 2023 18:33:21 +0000
asID:                     16787
IP address blocks:        192.219.216.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5a:16:7f:2d:4f:15:0f:04:51:bf:5b:ff:6c:7f:3a:49:18:6e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
        Validity
            Not Before: Jun  2 18:28:21 2023 GMT
            Not After : Jun 16 18:33:21 2023 GMT
        Subject: CN=C0C4CC6A840E526BC86E916089E922DB61173C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:67:ae:ac:c0:fb:62:67:da:83:35:75:eb:69:
                    6a:50:c3:61:1b:9d:12:d9:31:dd:4e:14:9d:30:72:
                    17:78:dc:59:ec:74:85:18:57:f3:1b:44:36:d8:40:
                    76:12:4c:a0:d0:d6:a5:a8:6b:05:25:19:9f:b8:4d:
                    1a:07:b2:ce:63:62:8e:ae:f7:f5:fb:60:00:22:8e:
                    2d:84:50:15:af:22:bf:9a:2c:3e:16:ba:a1:02:8f:
                    bd:d8:b2:4c:3e:61:1d:dc:0f:9c:63:27:b8:0d:8e:
                    37:2f:39:97:97:ec:ec:5a:d4:9a:4e:6d:40:fb:dc:
                    84:61:e0:73:e6:5a:f4:b1:81:1c:23:08:1a:77:6b:
                    a5:8d:1b:74:41:67:7d:3b:12:4c:62:e1:e6:6b:cd:
                    5e:2e:34:3e:d8:4d:43:11:fa:6e:76:54:9a:c3:a8:
                    8c:6d:cb:59:c4:82:5e:66:5b:94:94:e3:c0:8c:41:
                    e8:72:75:0e:0e:03:f5:10:e0:64:3c:15:5f:e5:d0:
                    59:02:cb:98:69:84:fe:50:23:af:96:08:d3:f4:8a:
                    1a:85:1b:17:2b:15:40:5a:02:29:3b:15:49:7d:db:
                    db:03:8c:d6:3b:64:48:31:bf:f1:68:8a:27:85:75:
                    e4:32:14:8d:b5:c5:8b:cb:2d:2a:d0:35:c4:b1:f4:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C4:CC:6A:84:0E:52:6B:C8:6E:91:60:89:E9:22:DB:61:17:3C:9F
            X509v3 Authority Key Identifier:
                keyid:DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/DB08FC25EDD93E7FAB6CFB35C31E650C2F41FB4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/3139322e3231392e3231362e302f32312d3231203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cf:a7:65:13:9d:a2:dd:b9:ac:46:8a:6c:02:d9:d8:bc:df:cc:
         c2:60:b1:f4:43:aa:89:6c:61:1f:0d:a6:90:de:63:9d:b7:e9:
         07:72:c0:46:61:86:ab:eb:e5:d7:70:77:45:56:04:a4:3a:73:
         10:84:f0:6a:78:19:f4:fb:a3:27:58:76:fa:96:ad:24:78:81:
         7e:ca:3c:64:01:81:2b:33:54:55:6e:af:25:85:9a:0a:7d:f3:
         9a:31:30:7c:3b:e9:9e:79:a3:3e:3d:8a:fa:d5:b9:2f:08:c1:
         9d:7d:9f:c2:b6:7d:08:19:f6:32:37:c7:18:59:c6:32:7c:a1:
         73:00:fe:e8:74:85:fb:ce:4a:8e:b4:79:a9:70:7d:b7:e3:44:
         bf:67:76:93:c3:de:c3:3c:b7:6a:8f:de:71:59:39:49:1f:06:
         2c:f2:ff:fd:56:56:cf:fa:72:e7:09:07:cf:d9:a4:00:37:0d:
         4d:f3:95:37:9a:4a:78:aa:58:16:4d:e5:b6:03:38:dd:14:2f:
         96:5c:1b:aa:72:2b:97:bc:bc:fe:03:9a:aa:70:9c:74:d2:f0:
         74:57:84:6d:9c:14:6d:a8:36:c5:2f:28:aa:17:68:3a:0e:14:
         5f:66:22:27:4a:f5:4f:88:bc:65:fb:23:c0:97:45:64:59:f9:
         76:a4:8e:54
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUFoWfy1PFQ8EUb9b/2x/OkkYbrkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTUxNTFlZTQ0YzVlNDY4ZjgxM2NmNDY5OTI4MzFlNTBk
MGFiYmMyYTQxNzNhZWEzNzAwHhcNMjMwNjAyMTgyODIxWhcNMjMwNjE2MTgzMzIx
WjAzMTEwLwYDVQQDEyhDMEM0Q0M2QTg0MEU1MjZCQzg2RTkxNjA4OUU5MjJEQjYx
MTczQzlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6meurMD7Ymfa
gzV162lqUMNhG50S2THdThSdMHIXeNxZ7HSFGFfzG0Q22EB2Ekyg0NalqGsFJRmf
uE0aB7LOY2KOrvf1+2AAIo4thFAVryK/miw+FrqhAo+92LJMPmEd3A+cYye4DY43
LzmXl+zsWtSaTm1A+9yEYeBz5lr0sYEcIwgad2uljRt0QWd9OxJMYuHma81eLjQ+
2E1DEfpudlSaw6iMbctZxIJeZluUlOPAjEHocnUODgP1EOBkPBVf5dBZAsuYaYT+
UCOvlgjT9IoahRsXKxVAWgIpOxVJfdvbA4zWO2RIMb/xaIonhXXkMhSNtcWLyy0q
0DXEsfTCuQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFMDEzGqEDlJryG6RYInpItth
FzyfMB8GA1UdIwQYMBaAFNsI/CXt2T5/q2z7NcMeZQwvQftKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmN2YzNjY4NTIwMTdmNDE5YzdmMTIwNGUwLzAv
REIwOEZDMjVFREQ5M0U3RkFCNkNGQjM1QzMxRTY1MEMyRjQxRkI0QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NzI4OWNkLTkzM2MtNDRmMy04YThhLWY3YTZlNjA5NTUwNy8xNTE1
MWVlNDRjNWU0NjhmODEzY2Y0Njk5MjgzMWU1MGQwYWJiYzJhNDE3M2FlYTM3MC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjdmMzY2ODUyMDE3ZjQx
OWM3ZjEyMDRlMC8wLzMxMzkzMjJlMzIzMTM5MmUzMjMxMzYyZTMwMmYzMjMxMmQz
MjMxMjAzZDNlMjAzMTM2MzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwNvYMA0GCSqGSIb3DQEB
CwUAA4IBAQDPp2UTnaLduaxGimwC2di838zCYLH0Q6qJbGEfDaaQ3mOdt+kHcsBG
YYar6+XXcHdFVgSkOnMQhPBqeBn0+6MnWHb6lq0keIF+yjxkAYErM1RVbq8lhZoK
ffOaMTB8O+meeaM+PYr61bkvCMGdfZ/Ctn0IGfYyN8cYWcYyfKFzAP7odIX7zkqO
tHmpcH2340S/Z3aTw97DPLdqj95xWTlJHwYs8v/9VlbP+nLnCQfP2aQANw1N85U3
mkp4qlgWTeW2AzjdFC+WXBuqciuXvLz+A5qqcJx00vB0V4RtnBRtqDbFLyiqF2g6
DhRfZiInSvVPiLxl+yPAl0VkWfl2pI5U
-----END CERTIFICATE-----