Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS151349.roa
File:                     AS151349.roa (raw, json)
Hash identifier:          eTSlIPR7oxmWA/qmPBTZOL56tdco+Uv7U/R99Jyae/Q=
Subject key identifier:   C3:46:1A:B9:23:B6:53:71:34:7E:77:0E:C4:D5:30:E8:13:15:68:14
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       42EE06CB9AFDFFB794F103ADB3B0176271E5521A
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS151349.roa
Signing time:             Fri 01 Sep 2023 06:38:26 +0000
ROA not before:           Fri 01 Sep 2023 06:33:26 +0000
ROA not after:            Fri 30 Aug 2024 06:38:26 +0000
asID:                     151349
IP address blocks:        2a06:1287:5600::/39 maxlen: 48
                          2a06:1287:5600::/48 maxlen: 48
                          2a06:1287:5601::/48 maxlen: 48
                          2a06:1287:5602::/48 maxlen: 48
                          2a06:1287:5603::/48 maxlen: 48
                          2a06:1287:5611::/48 maxlen: 48
                          2a06:1287:5613::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ee:06:cb:9a:fd:ff:b7:94:f1:03:ad:b3:b0:17:62:71:e5:52:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep  1 06:33:26 2023 GMT
            Not After : Aug 30 06:38:26 2024 GMT
        Subject: CN=C3461AB923B65371347E770EC4D530E813156814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:25:53:fb:2b:0d:56:af:fa:c6:91:01:9d:
                    20:0c:5d:a2:88:5b:1b:b5:e3:bc:5d:46:36:b9:86:
                    e3:68:98:a9:2f:ba:aa:e4:8a:19:59:c7:3f:a0:51:
                    d1:5d:80:ee:e0:58:92:9a:da:e7:c9:26:43:30:8e:
                    03:fd:ce:ad:bb:7d:42:bd:df:40:ed:8a:bf:10:e9:
                    e2:1b:82:52:c3:1e:89:58:57:09:40:a7:cb:88:2a:
                    41:d0:87:56:6c:6d:63:88:0e:8b:0f:01:41:9d:d3:
                    42:ca:63:0a:b6:51:19:46:53:88:1b:66:6f:c5:55:
                    b0:07:47:78:b2:1d:d6:55:74:ac:f3:f6:75:0a:c9:
                    76:aa:89:53:14:59:08:37:c6:4d:c5:23:1c:75:bd:
                    57:b7:89:c8:c9:9f:83:7f:0b:de:fb:e3:4d:31:da:
                    ec:2e:64:b6:31:01:09:1a:f4:c1:8c:76:ac:91:0f:
                    3c:a0:fe:34:7a:ac:68:e6:77:5f:2b:d8:75:ae:20:
                    d2:19:0e:31:98:3b:51:53:6e:9d:0e:29:1e:b1:7c:
                    69:83:a3:22:be:0a:8a:b5:9f:b9:55:f1:85:c4:e9:
                    a8:71:d5:2e:f8:9b:e7:3f:bb:0f:07:7e:50:0a:16:
                    f2:b1:bd:d7:f4:7d:13:b7:77:c4:43:12:bb:d6:d2:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:46:1A:B9:23:B6:53:71:34:7E:77:0E:C4:D5:30:E8:13:15:68:14
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS151349.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5600::/39

    Signature Algorithm: sha256WithRSAEncryption
         3c:bc:78:99:be:26:27:3a:0e:d4:9b:01:de:08:78:2b:b5:3c:
         c3:b2:40:a1:41:40:23:c0:66:39:de:da:3b:9f:a8:ab:32:ca:
         00:ea:8b:3b:a9:29:a5:4a:b8:6c:e9:f1:d2:a3:38:c3:3f:2a:
         27:ca:3b:b3:df:09:9e:6b:4b:94:cb:2c:45:ea:10:e2:57:df:
         e7:92:7f:2b:e3:3a:71:51:a0:03:20:12:4b:01:d0:28:68:74:
         0c:59:16:59:43:82:bd:96:f0:37:9d:b9:43:d9:18:6c:70:fa:
         7a:0d:6b:4e:94:27:88:7b:65:6a:b3:d6:3f:5c:5c:6e:9f:80:
         91:c7:96:f1:11:ce:54:80:ba:d3:81:3f:76:01:6b:12:92:4b:
         d2:8e:11:19:48:06:10:dd:47:d2:4b:e1:c4:58:98:50:f8:e9:
         fa:2e:8b:ce:ca:c4:21:71:c4:23:ee:bf:1d:0b:4f:42:c2:0c:
         8a:ea:c4:fd:f6:38:91:79:f7:02:4a:3d:ad:93:6f:ad:27:ea:
         29:ee:59:fe:f7:5d:b3:0d:11:c6:2b:b5:c7:76:b9:d5:52:18:
         4c:73:f7:12:63:ea:2e:b9:8d:0c:fc:11:0c:2d:00:a4:0a:8b:
         bb:f9:1a:04:6d:a5:a6:04:d7:df:ab:62:7e:eb:04:6e:98:26:
         ff:c8:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----