Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS197417.roa
File:                     AS197417.roa (raw, json)
Hash identifier:          r9I5BzdCAnZaK8D4nxfrCEisxl03kod/T4qui7HtVko=
Subject key identifier:   F7:99:74:50:EB:10:AE:45:59:86:1D:E2:DD:AA:70:F2:E9:15:CA:62
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7814C74D827F22CD496B90691D88EADC4DCF6CF5
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS197417.roa
Signing time:             Thu 03 Aug 2023 19:02:36 +0000
ROA not before:           Thu 03 Aug 2023 18:57:36 +0000
ROA not after:            Thu 01 Aug 2024 19:02:36 +0000
asID:                     197417
IP address blocks:        2a05:dfc7:c400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:14:c7:4d:82:7f:22:cd:49:6b:90:69:1d:88:ea:dc:4d:cf:6c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug  3 18:57:36 2023 GMT
            Not After : Aug  1 19:02:36 2024 GMT
        Subject: CN=F7997450EB10AE4559861DE2DDAA70F2E915CA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:5a:3d:fa:ba:66:a6:f3:c8:e9:12:d5:11:
                    65:14:93:60:e3:02:fb:5f:5a:f9:0f:cd:e0:83:a8:
                    2a:2d:8f:22:74:75:96:cd:9a:c4:2c:b0:b1:f8:3e:
                    b2:92:c8:c5:29:ac:26:85:cd:42:6e:5f:3c:d4:bf:
                    60:a4:bd:d2:6a:ea:03:c3:74:09:7e:0a:66:7c:39:
                    8b:51:08:2a:61:31:57:36:25:4c:3c:70:06:63:a0:
                    19:b6:b2:9e:f6:98:61:51:90:e6:91:69:96:12:69:
                    27:b7:02:fd:be:31:3c:70:51:7e:59:2f:53:59:14:
                    69:ba:93:3a:30:84:4d:98:ac:35:d4:82:de:d6:06:
                    04:45:46:3e:18:01:90:e2:76:a0:9b:8b:0c:8f:79:
                    1f:ef:84:e2:a5:41:98:67:a6:8a:ce:f1:10:d4:ea:
                    ed:1a:61:67:28:45:15:bc:8f:25:12:8d:8e:e4:2c:
                    3b:48:f1:f1:cd:5f:93:5e:61:ce:b0:69:55:88:7c:
                    c2:1d:5d:b6:df:9f:14:a0:4d:c0:52:ae:85:b9:97:
                    4a:24:ca:72:9c:57:9b:c8:94:cd:23:67:f9:16:00:
                    33:ea:2d:23:9c:d8:a6:2c:fb:a9:c7:73:81:d1:17:
                    aa:23:f5:96:42:ba:43:28:98:1f:40:25:61:50:7d:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:99:74:50:EB:10:AE:45:59:86:1D:E2:DD:AA:70:F2:E9:15:CA:62
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS197417.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:c400::/39

    Signature Algorithm: sha256WithRSAEncryption
         39:f3:3a:38:d4:48:09:f3:0e:8b:99:0a:38:6b:72:e3:d0:1f:
         74:97:48:67:c9:1c:75:1b:0b:6c:33:4e:48:8b:d8:3a:fe:28:
         56:24:70:22:67:15:b6:7a:7a:49:ae:29:d8:9c:1b:c4:2d:1e:
         56:8e:02:5b:8c:eb:2f:07:56:e2:e2:75:74:ec:a1:4c:88:ca:
         26:c0:d7:47:3c:6f:b1:54:11:8d:c8:d3:1d:83:0e:8d:51:a8:
         a0:50:c5:eb:c9:71:af:a7:f0:9b:7b:d5:9b:79:fe:0b:d1:82:
         db:9d:d2:a6:7a:94:4e:d3:36:9c:6f:28:22:fe:02:31:15:cd:
         1a:80:61:ca:8e:72:e5:56:3c:b3:fb:9e:07:23:ee:50:40:43:
         99:22:71:e9:77:cf:d7:1c:6e:4f:0a:a3:90:dc:7c:4e:d7:66:
         55:2a:43:c6:1e:05:4a:3e:c8:36:00:7f:ad:c8:1a:d0:af:95:
         b4:48:4b:30:7f:e6:db:38:23:4e:ab:82:21:91:1b:9f:b1:88:
         b4:b7:ea:2c:e7:cd:fe:ee:2f:10:f7:11:1a:db:2f:66:05:de:
         cc:63:e3:60:9c:f4:1e:c8:18:09:b4:83:b6:b9:70:67:af:67:
         49:1b:10:fe:9c:c9:ac:64:ec:f5:72:18:96:41:4d:9c:18:26:
         bb:b2:7c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----