Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          +OtUJkghSIeSEwGkkrBFc7wm3kDeW3Z/qTpMll2yw/s=
Subject key identifier:   38:7B:96:39:71:B7:98:32:9F:12:CF:FD:92:55:AA:41:61:04:4C:03
Certificate issuer:       /CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
Certificate serial:       725650CEB73C1A5C6661B89CFFB4C5675485840E
Authority key identifier: DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Fri 02 Jun 2023 18:33:21 +0000
ROA not before:           Fri 02 Jun 2023 18:28:21 +0000
ROA not after:            Fri 16 Jun 2023 18:33:21 +0000
asID:                     16787
IP address blocks:        2605:1c00:50f0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:56:50:ce:b7:3c:1a:5c:66:61:b8:9c:ff:b4:c5:67:54:85:84:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
        Validity
            Not Before: Jun  2 18:28:21 2023 GMT
            Not After : Jun 16 18:33:21 2023 GMT
        Subject: CN=387B963971B798329F12CFFD9255AA4161044C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:90:7e:61:dd:93:1f:39:e3:37:2e:4a:46:
                    64:58:61:b6:64:2c:3f:de:77:e6:57:31:d2:61:51:
                    be:54:12:cb:fd:07:8c:d8:86:7a:1d:a7:a9:dc:4f:
                    76:4a:d5:bd:e4:0d:f0:ba:f7:a6:61:31:fa:de:23:
                    2a:cc:76:89:e1:cb:68:06:c5:7b:18:b1:55:5a:66:
                    b8:ef:9e:3c:99:33:31:2b:09:fc:fe:cd:31:b4:cc:
                    73:ba:1c:05:2d:b4:d1:5c:16:93:a2:bc:32:0f:3e:
                    d0:22:a8:fa:1f:7e:b9:31:20:32:21:ab:65:fb:76:
                    a8:bd:96:3d:fd:ac:59:5f:ec:62:79:9f:0d:fc:5f:
                    58:80:2c:e6:5c:9e:3a:05:27:76:1f:87:38:3a:a2:
                    89:2a:92:12:45:14:74:0a:09:36:03:3c:57:4d:87:
                    8d:08:5a:a1:7e:ad:ca:22:b1:94:09:d7:25:a1:f2:
                    46:8e:b1:17:ca:71:ee:d4:46:90:c7:28:62:be:7f:
                    c1:55:71:e4:1c:af:a8:40:d6:ea:63:41:66:2c:9e:
                    14:32:54:6e:48:26:15:5c:23:df:fe:44:0b:bf:23:
                    ec:8b:48:f3:9f:91:a5:fa:b9:60:78:13:16:24:0a:
                    06:9e:57:74:eb:bb:45:02:88:60:47:7f:52:65:86:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7B:96:39:71:B7:98:32:9F:12:CF:FD:92:55:AA:41:61:04:4C:03
            X509v3 Authority Key Identifier:
                keyid:DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/DB08FC25EDD93E7FAB6CFB35C31E650C2F41FB4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a353066303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:50f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:1f:09:40:69:86:fd:70:43:c3:f6:60:c3:da:75:42:f7:
         72:d9:a7:a2:c8:75:2e:0a:c4:7b:de:b4:e4:92:e6:b7:27:81:
         09:4d:c2:98:15:de:6f:af:90:6d:d2:93:97:ce:eb:fa:37:01:
         ab:0e:98:6f:f4:0b:d8:ea:ea:92:c2:71:4f:13:3b:23:ff:b5:
         96:06:15:7f:34:30:47:c6:32:66:d7:a4:87:b4:ef:e1:60:9a:
         d2:c7:3b:13:d3:25:74:0b:93:90:eb:94:32:92:d3:eb:76:fb:
         81:bc:a8:a4:37:62:56:ba:66:55:d1:db:cb:9e:56:96:8b:12:
         c2:52:8a:4a:be:26:2e:38:e1:65:3a:2c:a3:e5:6f:9d:70:4e:
         34:48:5d:0f:cd:81:25:63:8b:ce:b5:77:32:0c:43:9e:4b:40:
         72:6b:57:05:e3:24:3d:66:70:b0:38:e1:4b:88:f1:dc:8f:c1:
         88:32:e0:a4:40:40:df:28:76:17:a4:d7:66:57:06:4d:58:25:
         ba:bc:36:b6:55:13:bd:54:04:77:51:6d:6c:c3:b0:b1:b0:6d:
         60:c7:4f:6b:7e:ea:39:e9:b5:42:26:9d:0f:45:76:8b:d4:91:
         08:73:93:6c:a1:9c:7f:b9:a2:34:80:55:c8:9c:ba:ca:b3:6e:
         e6:1c:2c:fe
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUclZQzrc8GlxmYbic/7TFZ1SFhA4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTUxNTFlZTQ0YzVlNDY4ZjgxM2NmNDY5OTI4MzFlNTBk
MGFiYmMyYTQxNzNhZWEzNzAwHhcNMjMwNjAyMTgyODIxWhcNMjMwNjE2MTgzMzIx
WjAzMTEwLwYDVQQDEygzODdCOTYzOTcxQjc5ODMyOUYxMkNGRkQ5MjU1QUE0MTYx
MDQ0QzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUWQfmHdkx85
4zcuSkZkWGG2ZCw/3nfmVzHSYVG+VBLL/QeM2IZ6Haep3E92StW95A3wuvemYTH6
3iMqzHaJ4ctoBsV7GLFVWma47548mTMxKwn8/s0xtMxzuhwFLbTRXBaTorwyDz7Q
Iqj6H365MSAyIatl+3aovZY9/axZX+xieZ8N/F9YgCzmXJ46BSd2H4c4OqKJKpIS
RRR0Cgk2AzxXTYeNCFqhfq3KIrGUCdclofJGjrEXynHu1EaQxyhivn/BVXHkHK+o
QNbqY0FmLJ4UMlRuSCYVXCPf/kQLvyPsi0jzn5Gl+rlgeBMWJAoGnld067tFAohg
R39SZYbL/QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFDh7ljlxt5gynxLP/ZJVqkFh
BEwDMB8GA1UdIwQYMBaAFNsI/CXt2T5/q2z7NcMeZQwvQftKMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmN2YzNjY4NTIwMTdmNDE5YzdmMTIwNGUwLzAv
REIwOEZDMjVFREQ5M0U3RkFCNkNGQjM1QzMxRTY1MEMyRjQxRkI0QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NzI4OWNkLTkzM2MtNDRmMy04YThhLWY3YTZlNjA5NTUwNy8xNTE1
MWVlNDRjNWU0NjhmODEzY2Y0Njk5MjgzMWU1MGQwYWJiYzJhNDE3M2FlYTM3MC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjdmMzY2ODUyMDE3ZjQx
OWM3ZjEyMDRlMC8wLzMyMzYzMDM1M2EzMTYzMzAzMDNhMzUzMDY2MzAzYTNhMmYz
NDM0MmQzNDM0MjAzZDNlMjAzMTM2MzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgUcAFDwMA0G
CSqGSIb3DQEBCwUAA4IBAQBtlh8JQGmG/XBDw/Zgw9p1Qvdy2aeiyHUuCsR73rTk
kua3J4EJTcKYFd5vr5Bt0pOXzuv6NwGrDphv9AvY6uqSwnFPEzsj/7WWBhV/NDBH
xjJm16SHtO/hYJrSxzsT0yV0C5OQ65QyktPrdvuBvKikN2JWumZV0dvLnlaWixLC
UopKviYuOOFlOiyj5W+dcE40SF0PzYElY4vOtXcyDEOeS0Bya1cF4yQ9ZnCwOOFL
iPHcj8GIMuCkQEDfKHYXpNdmVwZNWCW6vDa2VRO9VAR3UW1sw7CxsG1gx09rfuo5
6bVCJp0PRXaL1JEIc5NsoZx/uaI0gFXInLrKs27mHCz+
-----END CERTIFICATE-----