Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a3a2f33322d3332203d3e2030.roa
File:                     323630353a316330303a3a2f33322d3332203d3e2030.roa (raw, json)
Hash identifier:          Tq/CLkNG+5XNkpz4UpnriUeivjbHETxI/0mj+iE/muM=
Subject key identifier:   49:40:CE:A7:11:C4:FB:1A:4E:5F:EB:C3:78:2F:A0:7D:7F:11:E3:6B
Certificate issuer:       /CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
Certificate serial:       215D7F8FD83957CF7EF5DBE5ED61D65353A77B65
Authority key identifier: DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a3a2f33322d3332203d3e2030.roa
Signing time:             Fri 02 Jun 2023 18:33:21 +0000
ROA not before:           Fri 02 Jun 2023 18:28:21 +0000
ROA not after:            Fri 16 Jun 2023 18:33:21 +0000
asID:                     0
IP address blocks:        2605:1c00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5d:7f:8f:d8:39:57:cf:7e:f5:db:e5:ed:61:d6:53:53:a7:7b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
        Validity
            Not Before: Jun  2 18:28:21 2023 GMT
            Not After : Jun 16 18:33:21 2023 GMT
        Subject: CN=4940CEA711C4FB1A4E5FEBC3782FA07D7F11E36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:c8:25:85:65:e7:cf:67:8a:83:9f:81:de:
                    09:63:d7:1a:5b:3f:0c:23:0e:f7:43:17:ee:9a:68:
                    96:0d:a3:d1:27:4a:b1:33:92:a7:23:2c:57:6f:24:
                    33:11:64:3c:a3:a1:99:03:fc:32:34:8e:78:2c:e8:
                    36:30:a8:93:41:d6:1d:6c:e8:64:26:6f:ab:8e:cf:
                    65:c5:11:74:ed:34:6b:64:fb:a9:de:5f:e4:a7:f8:
                    31:1c:42:d1:68:cc:fc:69:0f:a9:a5:7d:43:74:e7:
                    dc:7c:fb:44:ae:71:ee:21:60:d4:b5:51:fd:8c:76:
                    96:ae:b9:b5:02:80:9b:18:0f:03:45:d9:85:92:fd:
                    e8:2e:c4:f8:02:5f:27:b4:29:0f:1d:d3:b3:24:15:
                    37:59:fe:00:b9:d2:aa:c4:25:22:16:f9:2e:a1:b4:
                    c5:6d:d7:7c:72:d3:b9:bc:3d:1b:58:4f:70:c1:30:
                    11:df:50:07:a1:a3:a1:bf:61:e7:36:58:bc:89:a4:
                    e3:39:e3:1b:6e:2f:3a:a0:40:59:96:34:1c:a6:fc:
                    db:0c:f7:7f:e0:80:98:91:9d:39:3b:66:3e:55:99:
                    db:6f:eb:7d:96:80:39:7a:44:43:7b:fc:fb:0e:c4:
                    7f:f2:fc:4f:91:8c:bd:18:db:a9:65:f7:2b:6f:c9:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:40:CE:A7:11:C4:FB:1A:4E:5F:EB:C3:78:2F:A0:7D:7F:11:E3:6B
            X509v3 Authority Key Identifier:
                keyid:DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/DB08FC25EDD93E7FAB6CFB35C31E650C2F41FB4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a3a2f33322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:67:12:8c:99:15:3a:24:63:00:f8:1e:b7:bb:38:03:2f:eb:
         12:c6:bd:85:2f:42:aa:fb:23:73:53:69:f3:0b:75:5e:23:c4:
         d6:2c:df:8e:d0:37:af:d3:fb:71:09:c9:aa:56:a0:ef:56:5a:
         4d:84:f4:f7:31:11:fc:5f:0c:88:1f:62:10:54:18:47:92:81:
         ae:f6:aa:87:56:e0:3c:75:b7:94:d3:1e:ac:cd:78:13:0f:9a:
         60:16:83:76:9d:82:fe:d7:75:78:7d:d8:45:8f:c6:c0:28:6c:
         03:84:76:ef:32:b3:eb:73:a1:bb:b9:54:e6:a1:ee:49:e6:05:
         6d:94:01:b3:3d:db:75:8f:7e:30:53:ed:60:e5:93:a6:4e:16:
         ed:1c:dc:9a:ed:97:ac:08:1c:0f:a5:f8:13:39:6d:9c:a6:52:
         95:2a:44:2e:07:d4:3d:74:ad:e6:58:2f:53:ce:e7:16:59:8a:
         b9:b3:1d:f0:6e:e5:f8:d9:fc:60:17:a5:c0:b2:bc:49:b4:1a:
         87:9f:3e:9f:cc:d7:59:06:3e:0d:65:e3:40:5c:d4:63:f3:a8:
         37:80:44:61:0f:91:b1:1a:18:4a:15:cf:9f:a7:2b:de:ba:de:
         c7:44:f2:f6:d5:df:0c:42:e7:b1:f5:34:28:e3:b7:cd:17:0b:
         e9:ea:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----