Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS197434.roa
File:                     AS197434.roa (raw, json)
Hash identifier:          lT9/pVmW9E1mJ52oA/UdRrlPkyFyGT5EPyerTDrRW8Q=
Subject key identifier:   A7:60:CC:11:C9:6B:30:35:E5:F2:96:2A:B9:CB:A5:6B:8B:C1:FF:66
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       72A9334D8B6B2D3D772F277CC504EE8A440FD6FF
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS197434.roa
Signing time:             Tue 01 Aug 2023 13:15:01 +0000
ROA not before:           Tue 01 Aug 2023 13:10:01 +0000
ROA not after:            Tue 30 Jul 2024 13:15:01 +0000
asID:                     197434
IP address blocks:        2a05:dfc7:ce00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a9:33:4d:8b:6b:2d:3d:77:2f:27:7c:c5:04:ee:8a:44:0f:d6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug  1 13:10:01 2023 GMT
            Not After : Jul 30 13:15:01 2024 GMT
        Subject: CN=A760CC11C96B3035E5F2962AB9CBA56B8BC1FF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5a:50:c4:be:73:8c:90:9a:79:82:9d:5a:6a:
                    d4:1b:d3:15:7d:42:66:16:14:3b:d9:8d:c3:c5:30:
                    14:19:b9:0a:62:8b:a1:e8:4d:f9:c3:d3:a9:be:e3:
                    af:af:7a:00:ae:70:03:cb:59:8d:c6:57:87:06:3b:
                    89:32:36:aa:4b:e1:79:46:70:f1:c4:be:c5:d2:75:
                    3b:fa:03:a8:a8:ae:14:cd:dc:b6:23:b6:dc:e1:61:
                    f9:a9:cb:e9:2c:c7:2c:65:21:95:a3:b4:d6:e2:48:
                    86:50:f4:e7:03:79:dc:db:b8:98:43:00:cf:7f:33:
                    e2:76:36:d2:42:f1:16:5f:bb:2b:ae:79:d8:84:2f:
                    c6:b3:f8:9a:0f:0a:db:4f:10:04:df:41:f8:1c:66:
                    f8:03:06:32:cf:3a:6c:94:ff:08:25:e9:ad:93:bb:
                    9d:14:e5:a1:e2:e2:a6:0c:fc:07:ee:12:5b:5f:84:
                    89:31:2b:d2:c5:a3:f7:66:19:9b:b9:1c:7a:43:d6:
                    00:2e:7d:00:49:7d:dd:64:fb:b7:1d:26:26:f8:3a:
                    e4:87:16:f9:a4:c4:10:30:cd:49:43:73:f5:ca:73:
                    e1:ea:91:72:2e:de:f6:de:a8:ff:89:f2:b9:4b:bc:
                    c7:e8:a0:73:1d:d0:84:46:f0:cf:e5:d5:71:08:db:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:60:CC:11:C9:6B:30:35:E5:F2:96:2A:B9:CB:A5:6B:8B:C1:FF:66
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS197434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:ce00::/39

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:8b:02:a4:b4:50:44:61:32:6c:a1:27:b8:da:d5:37:c7:
         f1:4f:e8:17:cb:0b:5b:60:e4:2b:3d:1c:d8:a6:69:6d:e8:5d:
         ff:f1:91:60:8f:a5:98:32:ae:24:eb:ef:c5:62:aa:b9:b9:1c:
         91:0a:ad:df:58:c1:f6:9c:39:f9:dc:a9:ba:17:97:26:13:e2:
         26:bf:5f:ac:88:03:91:12:d3:d8:81:69:be:8f:c7:5a:d0:69:
         a3:9d:9a:f2:b9:c6:1a:d1:2d:5d:c6:c6:95:dd:5d:d3:44:02:
         f0:d4:b1:42:ae:b8:d4:00:5d:08:9b:07:81:77:3d:49:24:98:
         74:4b:68:5d:0f:dd:1a:ed:54:07:e9:d9:07:6f:ee:1b:6a:92:
         b0:f7:f8:64:b7:f6:a7:7c:34:6c:48:ec:e4:6e:46:54:52:5f:
         fc:69:e1:52:ea:77:bf:3a:50:5b:a6:04:84:fa:63:8d:1f:ee:
         4b:23:18:cf:ac:12:39:04:53:94:c5:37:65:ce:2d:0b:56:30:
         eb:d0:63:6d:36:fc:14:da:48:d9:43:1a:51:f9:dd:27:9c:57:
         b9:c2:fa:4e:46:84:53:71:8f:6b:7b:85:8c:7f:af:1a:e1:0c:
         ee:96:1a:f5:0c:df:71:40:99:ae:0c:84:4a:dd:20:81:23:af:
         34:bb:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----