Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS198016.roa
File:                     AS198016.roa (raw, json)
Hash identifier:          0NOEjjZIYp87xjGu3J0gDQwaEbE37QB48i5XXs2imVA=
Subject key identifier:   EF:C1:1E:F1:08:3A:4C:BF:22:2A:9D:A7:29:45:8A:29:74:39:53:12
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       180787D7D09DE6FCCD96AF9BF28BDD810600487B
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS198016.roa
Signing time:             Mon 09 Oct 2023 14:31:32 +0000
ROA not before:           Mon 09 Oct 2023 14:26:32 +0000
ROA not after:            Mon 07 Oct 2024 14:31:32 +0000
asID:                     198016
IP address blocks:        2a06:1287:7c00::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:07:87:d7:d0:9d:e6:fc:cd:96:af:9b:f2:8b:dd:81:06:00:48:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct  9 14:26:32 2023 GMT
            Not After : Oct  7 14:31:32 2024 GMT
        Subject: CN=EFC11EF1083A4CBF222A9DA729458A2974395312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:09:c7:f6:5d:59:55:d8:8f:de:4a:8f:70:
                    22:60:50:62:dd:5b:fb:18:01:db:d2:3f:1e:8c:ec:
                    4d:a4:8e:d7:f3:8c:36:82:41:ca:7d:55:81:8b:8b:
                    b0:c2:26:24:22:1f:07:d4:cc:c5:19:e6:a3:b4:bd:
                    9d:f5:6b:7d:60:68:9d:39:cf:84:8d:a4:22:16:cb:
                    57:9a:24:7f:76:d8:8d:c6:70:41:75:db:a3:d4:6f:
                    1c:ec:c9:c3:26:e9:9f:cd:2f:48:d8:ae:d4:ff:20:
                    80:a6:1f:81:91:ce:8e:76:a8:98:ff:5e:5f:f9:70:
                    0c:8c:50:59:af:c9:b5:2b:cc:b0:a1:56:d5:e8:f7:
                    45:73:d9:91:06:ac:78:52:eb:05:36:73:74:c3:18:
                    5d:14:1d:5a:47:fe:f4:06:92:f0:d1:2d:10:5a:78:
                    7b:1f:ed:11:8b:21:d5:c6:00:55:c4:62:90:40:24:
                    80:34:57:b6:72:34:4d:3b:4c:f0:a8:93:1e:fc:51:
                    93:cb:04:a9:6c:ce:20:0f:34:16:62:c3:fe:a1:d4:
                    13:18:a5:69:f6:8c:2c:9c:a5:49:85:18:ca:d1:b7:
                    b4:4f:60:53:f9:ca:fa:6e:6d:5a:7a:42:49:86:0f:
                    80:5f:07:8b:10:96:8b:62:95:fc:f2:93:36:99:af:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C1:1E:F1:08:3A:4C:BF:22:2A:9D:A7:29:45:8A:29:74:39:53:12
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS198016.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:7c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:6f:aa:7f:58:f7:0c:7d:6e:74:56:c5:4f:43:f6:df:1b:
         af:92:32:20:2c:75:f7:fe:43:f5:04:21:c4:c6:0c:f4:15:22:
         68:67:f9:0c:35:a8:06:47:5c:fc:da:9b:3f:42:51:4d:a7:32:
         00:73:88:75:20:8d:99:b5:b4:c2:e7:85:bf:c5:96:26:6b:50:
         dd:16:b2:12:27:d2:82:98:ed:9b:75:a0:69:03:fb:67:60:34:
         16:e5:0c:59:a5:d6:99:be:ce:28:ec:f1:34:90:3c:e6:81:07:
         81:f4:c8:1f:c0:43:cc:65:4a:a4:c3:e8:90:39:2b:29:9e:37:
         15:c0:ca:41:31:d5:a0:5d:90:70:f3:eb:fe:c0:5e:2a:b7:9e:
         ef:9d:f4:a6:cd:b4:60:6b:08:0e:f1:f9:07:7f:0e:a1:fb:d5:
         ba:9e:77:4d:4b:19:56:ef:d8:38:7f:ec:f1:dc:8a:ad:a9:97:
         99:e5:2e:10:ab:ae:a8:7d:0c:dd:db:10:8d:57:b8:82:70:2c:
         7a:37:d9:4c:4e:8e:e6:98:91:20:de:39:33:bd:4b:e2:98:78:
         6f:2f:71:7a:63:89:72:b5:a7:dc:4d:c4:02:a2:59:b8:4f:ce:
         6e:b4:0b:c9:45:3f:53:da:36:eb:34:15:ee:d3:07:8f:8b:31:
         8e:67:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----