Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          /QOyLhx+0OTWeSaXk/Nz3upgRBO70VofXa45/uCwcWg=
Subject key identifier:   0B:E3:43:B3:76:25:26:73:B4:52:AE:0E:8C:8A:ED:BD:74:09:F6:50
Certificate issuer:       /CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
Certificate serial:       71CB726681DBC923592CD009FD8AE692035CE01A
Authority key identifier: DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Fri 02 Jun 2023 18:33:21 +0000
ROA not before:           Fri 02 Jun 2023 18:28:21 +0000
ROA not after:            Fri 16 Jun 2023 18:33:21 +0000
asID:                     16787
IP address blocks:        2605:1c00:ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cb:72:66:81:db:c9:23:59:2c:d0:09:fd:8a:e6:92:03:5c:e0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370
        Validity
            Not Before: Jun  2 18:28:21 2023 GMT
            Not After : Jun 16 18:33:21 2023 GMT
        Subject: CN=0BE343B376252673B452AE0E8C8AEDBD7409F650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:8c:b2:24:e4:1e:6b:6f:ca:24:74:ca:02:
                    81:8c:29:a9:8d:cd:09:71:db:b8:41:ce:85:28:8d:
                    77:d9:0f:b0:53:6e:a7:96:6c:ea:13:39:eb:03:7e:
                    de:aa:d2:bd:19:36:a4:b4:b3:06:82:b8:34:c5:58:
                    45:1b:b6:4c:cd:0a:c5:de:33:00:aa:76:f7:95:8f:
                    81:bd:34:d5:2f:ba:b2:e2:55:38:40:29:f6:1f:bf:
                    71:37:d9:49:e2:fa:7c:74:dc:c7:5c:a7:c3:bb:1f:
                    48:6f:68:23:32:85:af:e9:7f:6c:8c:5a:3c:fe:df:
                    39:47:cc:0b:9a:f1:50:5d:d7:ba:ec:bb:d1:ef:41:
                    cf:63:7e:96:f0:9c:20:8e:e3:29:86:ad:7a:a9:69:
                    52:eb:31:23:73:ea:83:85:a4:cb:9a:8a:be:23:a9:
                    fb:42:ee:61:c1:03:cc:a9:20:8b:3b:a3:f0:e6:ee:
                    08:d5:2c:13:9b:89:67:76:a1:0c:98:bf:9d:ed:af:
                    67:2a:47:bc:ac:f0:7e:ad:e8:c6:f7:06:29:ee:b7:
                    78:f2:7f:36:e9:0d:9b:35:12:e6:0d:08:6e:99:8b:
                    73:ac:02:cd:f0:b6:13:63:7d:67:82:c7:a0:5c:83:
                    05:e0:6e:f7:84:3f:2c:36:b6:b9:0b:c5:cb:5e:04:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E3:43:B3:76:25:26:73:B4:52:AE:0E:8C:8A:ED:BD:74:09:F6:50
            X509v3 Authority Key Identifier:
                keyid:DB:08:FC:25:ED:D9:3E:7F:AB:6C:FB:35:C3:1E:65:0C:2F:41:FB:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/DB08FC25EDD93E7FAB6CFB35C31E650C2F41FB4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c57289cd-933c-44f3-8a8a-f7a6e6095507/15151ee44c5e468f813cf46992831e50d0abbc2a4173aea370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f366852017f419c7f1204e0/0/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:9c:5a:e7:39:51:a1:50:4b:55:a7:53:19:f8:0c:65:04:
         1b:4e:ec:9e:7a:ab:73:c7:c0:19:57:bc:13:9f:2c:75:ec:ec:
         76:05:73:d6:e9:fe:6d:f4:a0:7c:19:58:f5:ba:0e:4c:cb:42:
         07:c5:60:b6:d1:7b:ec:7c:51:95:4c:63:32:51:19:94:75:7c:
         7f:68:d7:4c:c8:92:55:63:c5:ba:d7:b1:11:51:db:9a:de:d0:
         da:7e:cd:2c:5f:4f:92:16:21:4c:2f:c8:53:a6:d4:6c:85:a9:
         4d:18:a4:9b:77:58:a8:c5:c0:87:cd:05:e9:9c:87:27:37:75:
         0b:62:9d:0d:ed:45:af:7c:9f:b0:bd:ec:b9:ab:69:2e:73:8f:
         0a:6f:1c:94:42:1b:12:5c:98:be:80:cf:9e:cc:ad:c1:cf:5d:
         90:fd:0c:e5:e2:36:2d:5c:bf:dc:f9:e3:9f:5b:21:38:df:d8:
         e6:71:30:8f:ee:38:f3:99:69:8c:93:45:f8:d2:2f:9a:48:3d:
         e7:9a:31:1a:88:cf:ef:cc:50:9e:52:00:ba:4c:31:05:47:8a:
         fd:30:d0:55:71:03:49:2d:9b:27:7c:c6:cd:12:e0:90:0d:4e:
         45:67:bb:8d:d0:d7:06:67:11:15:aa:fc:86:67:a9:bd:7a:f9:
         4e:a1:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----