Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS197438.roa
File:                     AS197438.roa (raw, json)
Hash identifier:          5u/7EO+5O8uMzeczbETq2DBX/HzB0tL6Ej9Pp7/ec/E=
Subject key identifier:   C0:B1:7C:6E:AD:70:E0:08:E0:10:C5:25:C6:3B:93:6A:7F:B3:EE:6A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5F88FF004882B6E72F7FEC3FFF4A5E7852868CA7
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS197438.roa
Signing time:             Tue 01 Aug 2023 13:15:47 +0000
ROA not before:           Tue 01 Aug 2023 13:10:47 +0000
ROA not after:            Tue 30 Jul 2024 13:15:47 +0000
asID:                     197438
IP address blocks:        2a05:dfc7:b200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:88:ff:00:48:82:b6:e7:2f:7f:ec:3f:ff:4a:5e:78:52:86:8c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug  1 13:10:47 2023 GMT
            Not After : Jul 30 13:15:47 2024 GMT
        Subject: CN=C0B17C6EAD70E008E010C525C63B936A7FB3EE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7c:0b:7c:71:9e:fb:18:ab:15:ee:70:26:b0:
                    8a:3b:23:ee:4d:c4:6b:ac:3b:8d:d1:5c:5d:e5:e9:
                    5f:71:e3:52:4b:64:4f:c2:f0:d3:da:b0:32:92:99:
                    55:2c:6e:a6:0d:17:a9:8a:e7:9d:4d:d5:1f:0e:4e:
                    b4:af:95:c7:21:87:f6:a3:a2:b8:47:e2:e8:f7:b2:
                    bd:a4:db:ce:fe:f7:83:c2:5a:0e:f0:a1:c6:56:29:
                    0e:9f:bc:fa:29:57:46:c8:c2:2d:2d:7f:42:98:dd:
                    77:40:5f:c4:90:f0:f3:db:34:74:62:58:b1:43:3f:
                    62:95:20:2c:f5:9f:38:67:ac:77:fb:95:45:41:52:
                    cc:f9:e6:e5:98:00:25:30:48:13:61:52:2f:d1:b5:
                    a4:6c:94:49:a3:45:57:c9:5f:c5:e2:c8:3d:60:5b:
                    95:c8:f9:9d:79:6e:07:ce:9b:cf:fc:37:22:9a:9d:
                    21:fc:3d:fb:f0:42:b5:71:3a:8d:e4:58:ad:3a:8f:
                    d4:c4:f8:57:64:f5:f5:0c:0d:24:d2:21:12:78:55:
                    fd:4f:d1:47:2b:b4:95:04:6c:07:62:aa:69:dd:39:
                    e0:dc:15:f1:a4:73:b0:3c:f9:db:16:69:4b:a8:a5:
                    23:a3:18:f0:84:d8:bd:89:57:a6:b4:ea:e2:3f:19:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B1:7C:6E:AD:70:E0:08:E0:10:C5:25:C6:3B:93:6A:7F:B3:EE:6A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS197438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:b200::/39

    Signature Algorithm: sha256WithRSAEncryption
         42:01:66:d1:17:c7:2f:c2:15:86:bd:ed:c8:c7:96:5d:7f:ee:
         45:17:c5:48:38:80:9b:61:46:fc:4a:1e:64:12:62:23:aa:6e:
         44:76:4c:35:83:69:fa:94:6c:cc:de:47:79:60:75:f9:37:73:
         c6:35:25:48:5d:8a:61:e0:ca:e4:9e:8f:c9:fa:ae:12:1b:76:
         c0:ea:77:c0:a2:57:32:fa:c8:2d:73:c9:ee:ce:30:5c:34:5d:
         59:10:05:05:24:45:11:02:30:40:01:6f:d8:19:f5:eb:9a:e1:
         2b:28:ef:ea:f8:82:21:de:80:66:85:48:06:cc:9d:04:dc:a8:
         6a:03:c9:c9:d5:5a:26:44:66:6a:d6:56:c3:2e:a1:de:b3:43:
         39:72:91:41:15:e8:12:9f:29:1b:fb:2b:4b:03:53:3c:a9:54:
         ea:99:e8:06:20:55:c4:a4:65:e1:3e:30:e9:eb:9d:59:4f:cf:
         dd:a9:59:89:21:11:73:64:96:12:d4:5c:67:0c:8b:12:83:1e:
         05:f5:9d:11:23:71:25:7b:70:07:02:24:bf:f8:f5:0e:59:98:
         ea:33:ef:b6:89:1e:13:86:ef:2e:97:ff:70:52:f5:af:9d:63:
         cb:89:a3:ee:64:5a:53:54:33:15:e3:b1:49:dd:95:fb:b1:94:
         69:56:a6:90
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUX4j/AEiCtucvf+w//0peeFKGjKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA4MDExMzEwNDdaFw0yNDA3MzAxMzE1NDdaMDMxMTAvBgNV
BAMTKEMwQjE3QzZFQUQ3MEUwMDhFMDEwQzUyNUM2M0I5MzZBN0ZCM0VFNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfAt8cZ77GKsV7nAmsIo7I+5N
xGusO43RXF3l6V9x41JLZE/C8NPasDKSmVUsbqYNF6mK551N1R8OTrSvlcchh/aj
orhH4uj3sr2k287+94PCWg7wocZWKQ6fvPopV0bIwi0tf0KY3XdAX8SQ8PPbNHRi
WLFDP2KVICz1nzhnrHf7lUVBUsz55uWYACUwSBNhUi/RtaRslEmjRVfJX8XiyD1g
W5XI+Z15bgfOm8/8NyKanSH8PfvwQrVxOo3kWK06j9TE+Fdk9fUMDSTSIRJ4Vf1P
0UcrtJUEbAdiqmndOeDcFfGkc7A8+dsWaUuopSOjGPCE2L2JV6a06uI/GYunAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUwLF8bq1w4AjgEMUlxjuTan+z7mowHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMTk3NDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfx7IwDQYJKoZIhvcN
AQELBQADggEBAEIBZtEXxy/CFYa97cjHll1/7kUXxUg4gJthRvxKHmQSYiOqbkR2
TDWDafqUbMzeR3lgdfk3c8Y1JUhdimHgyuSej8n6rhIbdsDqd8CiVzL6yC1zye7O
MFw0XVkQBQUkRRECMEABb9gZ9eua4Sso7+r4giHegGaFSAbMnQTcqGoDycnVWiZE
ZmrWVsMuod6zQzlykUEV6BKfKRv7K0sDUzypVOqZ6AYgVcSkZeE+MOnrnVlPz92p
WYkhEXNklhLUXGcMixKDHgX1nREjcSV7cAcCJL/49Q5ZmOoz77aJHhOG7y6X/3BS
9a+dY8uJo+5kWlNUMxXjsUndlfuxlGlWppA=
-----END CERTIFICATE-----