Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a3a2f33322d3438203d3e203136373837.roa
File:                     323630353a316330303a3a2f33322d3438203d3e203136373837.roa (raw, json)
Hash identifier:          9vDJ/4yG50tXxs9P5ivM23YCVkJFK8d2dN2fTf4ggaM=
Subject key identifier:   F3:03:33:37:1A:64:70:56:AD:B6:97:F1:26:D4:EA:6C:68:59:2F:01
Certificate issuer:       /CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
Certificate serial:       5181DB9CD706A53878AA1E47ED0460FD6C833F6F
Authority key identifier: DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a3a2f33322d3438203d3e203136373837.roa
Signing time:             Fri 30 Sep 2022 16:35:01 +0000
ROA not before:           Fri 30 Sep 2022 16:30:01 +0000
ROA not after:            Fri 14 Oct 2022 16:35:01 +0000
asID:                     16787
IP address blocks:        2605:1c00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:81:db:9c:d7:06:a5:38:78:aa:1e:47:ed:04:60:fd:6c:83:3f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
        Validity
            Not Before: Sep 30 16:30:01 2022 GMT
            Not After : Oct 14 16:35:01 2022 GMT
        Subject: CN=F30333371A647056ADB697F126D4EA6C68592F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:31:03:42:70:96:7e:b2:c6:42:75:d1:0f:
                    3b:38:26:3a:f3:44:f1:f9:4c:52:2c:49:c9:d2:14:
                    ac:75:bf:50:83:ac:55:84:f3:08:fd:92:8c:b3:b5:
                    2f:16:16:a6:14:ce:ba:88:9f:0a:3d:81:92:07:8f:
                    8a:b7:bc:99:5f:58:4d:f2:44:e1:c5:76:cb:35:d2:
                    70:fb:70:f7:3e:03:82:84:5e:82:ff:45:9f:b6:67:
                    97:b9:ba:57:87:29:4c:a2:95:83:38:0e:76:c6:97:
                    89:83:37:80:7f:75:9b:30:84:88:86:01:17:50:01:
                    36:a0:85:05:82:9f:05:b0:08:53:35:b0:b8:b4:d0:
                    48:cc:79:85:46:32:32:4f:90:58:ed:cf:0f:5f:9f:
                    8b:7f:d1:fd:0f:8d:51:0a:de:69:10:b7:63:8d:b7:
                    ad:ca:38:67:b0:07:30:e3:02:63:f7:13:cb:48:96:
                    75:50:e0:ae:65:2e:4f:5e:1f:dc:64:29:0e:ac:8d:
                    d9:7b:3b:5f:35:be:89:70:bc:a8:ba:1e:9e:2a:e7:
                    d0:61:e0:ba:78:27:da:de:cb:a1:93:c9:2a:b9:90:
                    5a:3f:e2:4b:eb:ee:ac:64:08:d3:4d:61:67:1c:12:
                    73:b4:50:ef:4a:cd:10:a9:a3:ce:be:95:dc:15:85:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:03:33:37:1A:64:70:56:AD:B6:97:F1:26:D4:EA:6C:68:59:2F:01
            X509v3 Authority Key Identifier:
                keyid:DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/DB08FC25EDD93E7FAB6CFB35C31E650C2F41FB4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a3a2f33322d3438203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:0b:d8:d4:dc:ff:7f:ea:80:39:2d:f6:07:e7:37:9f:53:
         b5:6d:81:8d:ad:9e:6a:f9:6b:d1:4e:19:f2:d1:7a:08:4f:8b:
         8a:7f:c3:35:22:75:a5:2f:0a:c1:95:e1:80:3f:db:25:77:e6:
         d2:0c:34:7c:50:e9:7d:0f:38:62:1e:86:63:8a:17:69:10:df:
         5d:6b:d8:ee:b6:ab:79:06:6f:05:6e:33:89:1b:ec:32:47:8c:
         5c:c2:47:20:b2:cc:91:63:d3:d8:aa:2e:e6:1b:0a:7f:b6:4b:
         9a:ba:e8:dd:10:f1:a6:1b:91:e5:e1:d6:7f:f7:ad:5f:03:4f:
         a9:db:df:a0:42:c4:9c:3b:24:00:0e:3f:3a:c3:35:01:10:d0:
         ff:8e:04:32:59:ec:3f:13:de:31:be:d2:37:56:40:3e:ca:f3:
         58:79:b2:5d:b3:c9:5e:17:cd:25:46:0d:72:9b:1d:ce:ac:fd:
         33:d2:67:bc:ff:56:43:48:00:f6:03:79:64:23:58:35:be:f8:
         af:62:5f:48:0e:5b:4a:a2:48:28:55:40:f6:d9:c5:0f:a2:10:
         4c:94:85:ad:4b:41:65:21:ad:83:52:52:d9:de:d8:8c:1d:c0:
         23:95:06:9f:70:03:87:38:dc:f6:1f:0d:77:3f:07:98:f8:e0:
         5e:9d:c2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----