Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS142506.roa
File:                     AS142506.roa (raw, json)
Hash identifier:          bkiDpOpJjV3la5b+qS3MMl3VXN4Hwn1STXIKmjCNo3A=
Subject key identifier:   BC:7F:13:A7:A3:C3:C1:F7:50:10:F0:D8:87:43:A2:06:B7:F6:CE:C9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       20BE4461E0AB24A68F1055343A661871069B3E85
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS142506.roa
Signing time:             Thu 06 Jul 2023 11:17:19 +0000
ROA not before:           Thu 06 Jul 2023 11:12:19 +0000
ROA not after:            Thu 04 Jul 2024 11:17:19 +0000
asID:                     142506
IP address blocks:        2a06:1287:3510::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:be:44:61:e0:ab:24:a6:8f:10:55:34:3a:66:18:71:06:9b:3e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:19 2023 GMT
            Not After : Jul  4 11:17:19 2024 GMT
        Subject: CN=BC7F13A7A3C3C1F75010F0D88743A206B7F6CEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e8:2b:bc:b7:69:a4:0a:d2:2e:f8:0e:4e:61:
                    a9:27:97:26:be:c3:85:d7:4a:7d:40:df:3a:ba:cd:
                    3c:3b:db:7e:cd:4e:84:ae:22:5c:93:14:b4:b2:61:
                    b7:d7:a6:04:77:90:ae:7e:6b:ec:49:c9:63:69:91:
                    b6:1b:22:08:98:70:89:4f:5a:f4:2c:15:87:bb:bd:
                    6c:b9:a0:e2:67:6d:be:3c:16:1f:0c:8a:eb:35:1f:
                    a9:37:01:63:70:ee:f8:50:38:31:be:18:ba:8a:b6:
                    76:cf:57:5b:86:42:68:31:89:26:62:66:8f:c8:06:
                    9f:67:45:1f:96:ab:2d:c5:84:c1:bb:90:83:41:27:
                    57:bb:83:2a:25:db:24:1f:4b:2c:45:b3:5d:cc:7b:
                    1f:e8:17:be:42:4f:d5:84:03:e8:3f:b5:95:94:ff:
                    98:bd:b6:f8:f8:12:c0:d4:c2:9c:d1:8d:56:93:74:
                    76:a6:22:57:61:bd:38:4c:fd:e4:2a:c9:9e:79:16:
                    dc:f3:af:ef:a2:96:a5:96:8e:94:f4:8a:81:78:ee:
                    bf:44:b5:8c:ba:13:28:db:3a:68:7a:bc:7f:86:9a:
                    a3:1f:4d:7d:fe:ad:02:00:63:cc:33:df:55:2b:d6:
                    98:ee:d7:57:77:1c:82:5c:23:9c:77:83:3f:27:5d:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7F:13:A7:A3:C3:C1:F7:50:10:F0:D8:87:43:A2:06:B7:F6:CE:C9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS142506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3510::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:22:62:6e:3c:1c:44:f3:17:c6:c3:60:ca:d7:3d:88:ee:37:
         37:4d:1a:1b:5b:ca:11:f3:7a:7e:b0:9c:77:9c:d5:8f:b2:57:
         21:11:7d:f0:15:e5:77:2c:91:ac:62:4a:27:12:a2:1c:75:7e:
         85:00:83:a7:d1:37:dc:57:df:e0:04:3b:39:a6:f2:b0:73:6c:
         7b:6f:e9:36:de:44:47:3f:d2:4f:66:e5:4e:2a:24:e0:47:bc:
         c7:68:46:f9:e4:05:3a:ad:13:db:10:f1:b4:03:a2:c9:84:1e:
         04:23:d5:8e:51:83:8a:3d:90:bc:f1:bb:91:a0:3b:4b:cc:31:
         75:a2:a0:b6:61:21:f4:27:76:0b:ef:fb:62:24:6a:9c:83:87:
         52:e8:92:4e:da:8d:08:fa:27:a5:7d:34:a9:53:42:95:1f:e2:
         d0:56:18:de:aa:c7:ac:69:d3:7c:8f:e8:bf:39:7b:c2:a0:7d:
         4d:96:17:ec:14:b5:c7:9e:12:1d:ad:68:ed:42:57:a3:1a:b2:
         87:d0:78:59:d4:1f:d6:01:79:55:2f:73:2b:b5:f6:37:17:cd:
         17:c7:7f:34:1f:ff:4c:0e:82:a3:6b:0b:ca:50:42:50:38:65:
         f3:8b:e6:2f:5d:cd:2c:93:29:6d:26:ff:d9:5f:88:33:18:b1:
         35:22:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----