Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS197609.roa
File:                     AS197609.roa (raw, json)
Hash identifier:          6w0OTtoYCvTStLCDfL0RdfHgysnEmIhHRtZfXhZtYlU=
Subject key identifier:   2E:44:BC:87:7B:9C:69:4F:96:4F:04:CF:06:80:79:A4:39:4E:E0:24
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1222F291F458F1E62D7B43A1BD857743BFCD3890
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS197609.roa
Signing time:             Sat 12 Aug 2023 16:58:44 +0000
ROA not before:           Sat 12 Aug 2023 16:53:44 +0000
ROA not after:            Sat 10 Aug 2024 16:58:44 +0000
asID:                     197609
IP address blocks:        2a06:1287:dc00::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:22:f2:91:f4:58:f1:e6:2d:7b:43:a1:bd:85:77:43:bf:cd:38:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug 12 16:53:44 2023 GMT
            Not After : Aug 10 16:58:44 2024 GMT
        Subject: CN=2E44BC877B9C694F964F04CF068079A4394EE024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:fc:d6:8a:fc:ce:6b:6b:aa:ca:ec:1b:6b:
                    da:22:2b:e9:00:85:18:02:5e:1a:af:5f:77:11:28:
                    e2:4d:e6:6f:c2:b0:aa:f9:d7:83:30:ba:d6:b7:75:
                    77:b1:e5:95:83:1a:d6:5a:8a:dc:64:a8:90:9a:a8:
                    f2:c8:77:9e:eb:66:6a:af:99:6c:8f:e6:d0:6a:0d:
                    b1:6f:09:7c:7b:4c:48:94:1f:cb:bc:a6:13:e4:3d:
                    53:23:5b:fa:28:e9:28:b3:f2:d0:80:0f:c4:8b:96:
                    ff:99:16:a7:10:ba:70:09:e8:d9:4d:d4:31:1a:5d:
                    24:7f:35:0e:4f:64:fa:80:55:f8:53:73:27:19:08:
                    39:76:93:87:92:86:3e:0a:44:96:18:c1:9f:0e:9d:
                    25:bb:35:f9:d2:5a:80:e6:3e:15:0f:97:14:96:a9:
                    58:d8:21:ad:03:4c:11:3b:1a:b6:17:7c:cc:fd:70:
                    1d:e8:60:dc:2d:c8:cb:14:2a:de:86:49:02:b3:ab:
                    63:70:ca:bf:1c:ba:62:ea:27:e7:25:74:87:26:08:
                    82:4d:aa:76:f3:49:61:3b:56:73:47:64:d4:35:06:
                    15:01:7e:d9:63:33:c7:2e:4d:20:48:24:53:80:0a:
                    04:71:ab:9b:10:6d:9b:6e:c4:c6:7d:76:c7:23:58:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:44:BC:87:7B:9C:69:4F:96:4F:04:CF:06:80:79:A4:39:4E:E0:24
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS197609.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:dc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         b1:79:64:2b:a2:0d:bc:13:b6:8d:07:de:b6:03:02:84:4a:de:
         d3:ff:cf:06:73:9c:57:a2:c6:7f:00:81:fd:59:cb:51:b7:51:
         1c:51:32:e9:f8:b4:b1:04:67:b4:e3:6a:6f:93:e7:7a:7f:ad:
         2c:47:79:44:f7:57:b7:c8:cc:a2:c1:1b:d1:b8:8c:24:94:76:
         4c:46:4e:4f:d7:b8:48:a8:5a:80:6b:e4:55:44:85:27:c2:58:
         f0:49:2b:9a:80:b9:b7:7f:b6:54:ac:08:de:46:47:65:b7:c3:
         05:02:9e:13:aa:a1:2d:bf:29:5a:55:4c:c2:3c:3e:ff:f6:62:
         10:c0:10:4c:f8:c2:df:03:fa:a2:a1:a3:0d:76:f6:8b:75:44:
         0a:c0:35:92:78:c3:32:ab:9b:d0:ae:11:91:75:a6:95:6f:31:
         9b:c9:10:17:35:36:d1:13:50:60:77:9a:de:5f:22:27:43:86:
         70:1a:12:a7:49:d6:9a:77:a1:32:c6:43:31:27:17:f5:77:e0:
         e5:48:64:79:96:a9:b4:bd:6d:c5:0a:00:1e:58:4d:0f:d5:c5:
         b4:be:7f:47:c8:ba:09:6e:62:58:16:f8:4c:79:06:77:c7:10:
         a3:57:8a:99:fd:01:8f:44:d6:5b:40:9c:33:5e:f8:92:d6:5f:
         0a:c1:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----