Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS149296.roa
File:                     AS149296.roa (raw, json)
Hash identifier:          7fKPny+c+BryaFDHbLwEBhcBw+RTBFpAP9TyHRe9P3g=
Subject key identifier:   03:B6:DA:18:5C:9C:3B:5C:83:CF:34:82:78:1D:12:DB:95:E2:44:AB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       171DBA53A396CC5C6375ECE5093E620305B4D6E1
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS149296.roa
Signing time:             Sun 03 Sep 2023 13:38:14 +0000
ROA not before:           Sun 03 Sep 2023 13:33:14 +0000
ROA not after:            Sun 01 Sep 2024 13:38:14 +0000
asID:                     149296
IP address blocks:        2a06:1287:6800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1d:ba:53:a3:96:cc:5c:63:75:ec:e5:09:3e:62:03:05:b4:d6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep  3 13:33:14 2023 GMT
            Not After : Sep  1 13:38:14 2024 GMT
        Subject: CN=03B6DA185C9C3B5C83CF3482781D12DB95E244AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:e4:93:7a:ea:d4:29:ee:10:88:8f:21:9f:
                    a1:7e:9a:cc:6d:6a:99:1a:3e:4e:e7:e1:59:ae:68:
                    8b:31:f9:9f:f5:a0:f5:5a:3d:7d:ef:db:be:59:b7:
                    11:72:2f:79:29:b6:d0:ca:79:96:4b:f4:cd:1c:d1:
                    ee:a2:95:90:0a:a2:6a:7f:cc:02:98:a6:c6:b3:97:
                    31:2b:1c:66:b2:2d:26:c1:44:08:2e:bf:f3:0c:58:
                    1c:9c:4e:d7:d2:2a:c1:f2:44:fa:f4:ef:83:71:a1:
                    ed:29:42:ef:8b:26:c4:0f:93:28:6f:c7:b3:c8:50:
                    aa:d1:c1:7d:a2:24:89:30:21:4e:4f:2f:bf:b4:30:
                    fa:6e:08:76:92:51:1f:95:09:0d:73:f5:25:ee:fb:
                    f6:e0:42:41:12:41:3d:45:16:e9:fc:63:75:f9:1f:
                    e6:a0:f4:c2:56:ad:7b:e0:94:84:a1:2f:ad:3a:35:
                    e8:4f:29:77:a3:3e:4e:df:74:04:f3:dc:95:af:81:
                    43:9e:ab:9f:54:34:ff:a9:27:a1:91:98:46:b7:e6:
                    c5:31:98:d8:2d:eb:33:a9:2b:38:f4:d9:ed:4a:e1:
                    de:aa:57:63:59:70:a4:66:ff:25:0a:be:27:cd:12:
                    f8:5f:53:31:6c:43:3b:01:fe:65:92:b9:e5:b3:fc:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B6:DA:18:5C:9C:3B:5C:83:CF:34:82:78:1D:12:DB:95:E2:44:AB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS149296.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:6800::/39

    Signature Algorithm: sha256WithRSAEncryption
         bb:a8:91:7e:8b:4f:7b:24:2d:fa:13:dd:26:ff:bb:68:b3:45:
         ce:8b:c2:96:91:0c:41:2f:f4:d6:94:c6:83:75:bb:cd:f3:6a:
         08:25:82:9a:ec:38:91:f9:96:38:2b:30:e8:ab:70:91:82:c6:
         56:34:f7:cc:c7:75:b1:45:c2:d7:e1:81:08:42:fa:96:dd:55:
         a2:db:11:3f:ed:c7:eb:70:4f:cb:d2:3f:49:a0:62:da:71:a8:
         3b:04:d6:92:10:70:b3:c4:06:44:a6:ab:7f:4a:74:0f:71:f5:
         e6:ad:91:f8:d2:02:43:7c:9a:e2:90:b9:c4:3c:8d:ca:fe:48:
         9f:de:da:23:75:fb:5d:b0:ea:03:a7:70:32:10:a0:f9:ab:5e:
         12:79:92:0a:24:78:e2:50:40:28:e8:06:ae:c8:3e:d8:ce:ce:
         30:07:53:eb:ea:cb:7f:62:e9:38:b8:fe:a4:05:aa:05:3a:16:
         7c:94:cc:d5:84:55:a4:13:9f:e0:f6:0e:56:ba:b3:2d:64:01:
         7f:43:e4:e0:d3:68:cf:d3:25:fc:27:dc:9c:90:66:07:66:8f:
         e5:65:60:8e:53:01:ee:3b:c4:24:2e:ba:03:8a:b4:df:64:5c:
         b6:c3:39:4e:71:b7:8d:b7:33:bf:5a:77:8e:c7:6e:24:8f:bb:
         c6:d8:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----