Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a6666303a3a2f34342d3434203d3e2030.roa
File:                     323630353a316330303a6666303a3a2f34342d3434203d3e2030.roa (raw, json)
Hash identifier:          9wnNjaIk2m3QWuLsjslBc5Imn6o9I+usnX/46H1yrvc=
Subject key identifier:   CA:9B:57:9C:21:39:AE:B9:94:89:22:7E:E7:62:CE:45:12:E2:EB:92
Certificate issuer:       /CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
Certificate serial:       60B44AE2299BBED0BF2211C16B087199D980D460
Authority key identifier: DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a6666303a3a2f34342d3434203d3e2030.roa
Signing time:             Fri 02 Jun 2023 18:33:21 +0000
ROA not before:           Fri 02 Jun 2023 18:28:21 +0000
ROA not after:            Fri 16 Jun 2023 18:33:21 +0000
asID:                     0
IP address blocks:        2605:1c00:ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b4:4a:e2:29:9b:be:d0:bf:22:11:c1:6b:08:71:99:d9:80:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
        Validity
            Not Before: Jun  2 18:28:21 2023 GMT
            Not After : Jun 16 18:33:21 2023 GMT
        Subject: CN=CA9B579C2139AEB99489227EE762CE4512E2EB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ef:85:e0:a9:30:d2:91:42:62:6d:55:e9:00:
                    cf:9d:7b:e0:f5:28:01:23:9d:54:b7:77:26:85:31:
                    89:a2:89:ed:e4:a0:20:ca:1f:ad:6f:60:a7:95:53:
                    76:e8:47:c0:79:f7:26:80:30:88:81:ba:27:a4:b6:
                    6d:fd:f4:c6:68:e2:30:07:6c:a5:6f:29:42:1f:59:
                    d4:80:98:9c:fb:b1:3e:3d:63:4d:39:4a:47:0f:f7:
                    72:3c:63:ca:cd:15:b3:4c:cf:9f:f1:96:15:ab:eb:
                    d8:3f:0d:38:e7:fe:c2:5c:01:18:fe:9a:de:a5:17:
                    5e:85:ed:1e:f6:12:99:be:e1:61:c0:ca:23:06:d2:
                    87:0c:08:e4:ab:c4:74:85:06:5a:8d:3e:a4:78:2e:
                    24:f6:3d:1f:d3:0d:41:56:b9:45:d8:78:cb:ce:74:
                    8b:0e:cb:d2:05:ec:ce:af:72:11:e9:c0:59:21:13:
                    65:a9:1b:67:07:aa:f6:61:4a:cb:34:93:83:a8:c2:
                    44:0c:9d:5b:07:52:42:68:2a:ca:05:41:88:a7:78:
                    f4:a4:d2:7c:b4:95:25:68:30:e0:1e:43:a5:0b:76:
                    84:4b:25:38:d4:1c:24:3b:00:13:65:95:a1:97:bc:
                    02:63:eb:b0:80:d0:9d:0a:0f:d3:b4:30:13:02:60:
                    4d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:57:9C:21:39:AE:B9:94:89:22:7E:E7:62:CE:45:12:E2:EB:92
            X509v3 Authority Key Identifier:
                keyid:DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/DB08FC25EDD93E7FAB6CFB35C31E650C2F41FB4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a6666303a3a2f34342d3434203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:7b:4c:33:14:20:7f:36:7a:51:5a:4c:70:92:2e:db:20:60:
         86:98:3c:10:59:f3:30:10:16:e1:cf:32:5b:c4:2b:8d:78:01:
         20:78:fb:4d:27:b6:a3:7a:c9:3b:b8:14:16:92:97:1e:e6:d9:
         0f:e5:78:24:54:d7:43:fe:43:64:90:0f:33:eb:7f:b7:9d:cd:
         61:61:6e:8c:27:e7:31:e6:36:08:27:41:e9:6c:3c:2a:c6:3e:
         f1:86:66:c5:2a:ce:75:f9:62:c5:32:25:ab:22:83:f6:2a:83:
         19:1a:e1:05:2d:ca:67:15:5b:ee:15:77:11:b2:e0:b5:74:30:
         49:84:f5:c9:94:8e:36:a6:06:6c:ad:1e:e3:d4:0a:f7:dd:b5:
         27:a6:81:33:73:99:b0:5e:33:79:19:16:92:0c:59:59:d7:fc:
         cd:e5:f8:3d:f2:dd:93:62:ac:81:59:b4:41:a9:06:02:ea:97:
         7a:e1:5c:32:b9:2c:0c:27:51:20:1f:bf:90:6b:91:57:e6:49:
         7d:1c:e2:5f:fd:93:f9:f1:17:1f:1c:05:4e:19:2e:fb:83:7c:
         19:1c:4f:e5:af:59:24:3c:f0:de:40:0f:0a:0f:22:c7:58:33:
         c0:c3:5b:8a:cf:b8:19:50:9e:9d:6b:a9:e4:0b:c1:c6:31:3b:
         26:5c:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----