Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          FjwIMTS2X+MUziExWpy9/jp+rQfFC0C7Ec38cM2uYFI=
Subject key identifier:   FE:91:5C:38:05:F9:4F:47:79:56:BF:A6:01:7B:32:C8:C4:9C:53:FC
Certificate issuer:       /CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
Certificate serial:       174004D07080AE1386BA664DE63ABCB006CC4E97
Authority key identifier: DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Fri 02 Jun 2023 18:33:21 +0000
ROA not before:           Fri 02 Jun 2023 18:28:21 +0000
ROA not after:            Fri 16 Jun 2023 18:33:21 +0000
asID:                     16787
IP address blocks:        2605:1c00:1ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:40:04:d0:70:80:ae:13:86:ba:66:4d:e6:3a:bc:b0:06:cc:4e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
        Validity
            Not Before: Jun  2 18:28:21 2023 GMT
            Not After : Jun 16 18:33:21 2023 GMT
        Subject: CN=FE915C3805F94F477956BFA6017B32C8C49C53FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:8b:c4:df:7e:38:f7:12:c7:b8:d0:47:0f:
                    03:19:e4:2c:a2:cf:c9:ff:74:8b:9a:b0:62:9d:b6:
                    6d:42:ba:af:f7:db:b3:30:0f:e9:4a:3a:88:3f:27:
                    ad:35:c0:3d:5b:0b:63:a6:c9:f4:5b:e7:ef:30:a5:
                    13:81:40:46:d4:01:76:ca:ba:54:b9:25:8c:18:67:
                    53:13:d0:02:d8:e0:a4:df:72:16:eb:b8:31:fd:f8:
                    8b:19:85:97:75:7c:0e:01:36:75:ea:a9:72:cb:99:
                    ad:1f:05:a6:8d:42:31:5b:fe:e7:87:26:ab:0a:85:
                    ba:df:0e:dc:6c:5d:b1:6e:4d:64:ec:6a:18:fc:65:
                    54:3e:04:a4:41:6a:28:de:e7:c1:44:58:d6:96:c6:
                    df:7c:1c:01:5a:fc:7e:aa:88:2f:8f:52:8a:0a:f8:
                    d8:e5:84:d3:cb:f1:6c:90:fb:4c:93:7f:90:cc:ae:
                    02:0f:d5:e4:d1:2a:c7:a5:0a:f9:b8:81:0f:74:95:
                    23:22:48:c0:82:97:9a:6e:2c:5b:a2:20:6c:5c:46:
                    f3:6c:f3:fe:0d:4d:de:d5:db:d3:26:f1:9a:9b:2d:
                    c1:e5:0e:f4:ee:fb:e0:5c:07:ed:08:53:44:c5:37:
                    e3:5e:79:16:6c:61:05:ab:35:59:1f:c0:12:e4:81:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:91:5C:38:05:F9:4F:47:79:56:BF:A6:01:7B:32:C8:C4:9C:53:FC
            X509v3 Authority Key Identifier:
                keyid:DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/DB08FC25EDD93E7FAB6CFB35C31E650C2F41FB4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a316666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:1ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:12:dc:6b:45:5c:9d:d3:ca:9d:2f:a6:ea:25:b5:f4:48:b7:
         6b:ad:63:c3:d9:d9:2e:06:91:e2:22:75:f5:74:2d:ff:83:94:
         dc:26:e3:00:bd:b3:35:40:47:b9:a7:11:f9:0a:ac:01:28:6d:
         c7:c8:8c:0d:d5:bd:a5:97:8f:74:32:97:51:97:b8:18:65:ab:
         9a:cd:e5:0c:4b:43:00:0a:76:95:5d:e7:98:5b:ce:6e:39:eb:
         c3:6a:98:51:08:33:f9:4a:e9:95:bc:ce:43:e2:8a:4b:eb:72:
         6e:f1:63:db:1a:4f:0a:a7:46:90:b9:ef:b8:29:a3:17:ee:1f:
         7f:ae:20:91:6d:39:27:6c:12:dc:69:83:a8:63:b6:e8:e2:91:
         dc:74:c6:02:b0:39:a0:7d:c2:75:72:97:90:6b:4f:09:f3:3e:
         0f:7f:4f:c6:a6:bf:5d:21:33:88:59:09:f6:d4:af:74:0a:c4:
         f7:64:8f:c4:fe:f8:64:88:1a:99:2d:f1:86:e8:b5:df:da:8a:
         0d:1c:4f:16:ec:29:cc:03:d0:b3:6c:07:13:70:46:ca:45:b1:
         f6:59:b3:91:9a:39:38:9e:33:b1:58:70:63:15:f8:5d:d5:3d:
         d2:c5:34:7c:7e:98:4b:f3:fe:5d:a1:88:c1:17:21:a4:b4:94:
         84:8a:3f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----