Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS198075.roa
File:                     AS198075.roa (raw, json)
Hash identifier:          sBmQyq30t9SWzTNrX27D0olGtClVI7sKX5A8LWOqxvc=
Subject key identifier:   99:15:DD:73:2A:E3:BA:D6:5B:88:A2:C6:B7:CF:9D:63:52:42:72:B4
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       10E7513A95FA2A3182B9EA38526C1347B13D6B45
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS198075.roa
Signing time:             Mon 16 Oct 2023 08:15:47 +0000
ROA not before:           Mon 16 Oct 2023 08:10:47 +0000
ROA not after:            Mon 14 Oct 2024 08:15:47 +0000
asID:                     198075
IP address blocks:        2a06:1287:5200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e7:51:3a:95:fa:2a:31:82:b9:ea:38:52:6c:13:47:b1:3d:6b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct 16 08:10:47 2023 GMT
            Not After : Oct 14 08:15:47 2024 GMT
        Subject: CN=9915DD732AE3BAD65B88A2C6B7CF9D63524272B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c2:33:0d:8a:6a:75:06:8a:6a:1e:0d:39:c1:
                    29:e8:6d:3a:c2:29:3c:86:34:a7:98:e3:f7:6e:aa:
                    b5:1d:1d:ee:5a:5a:df:78:b7:a5:1c:3a:31:06:a9:
                    7e:1a:48:15:04:af:02:9c:6a:4d:86:eb:52:56:b2:
                    72:65:78:03:e8:92:e6:9b:9a:2b:9e:57:77:78:ea:
                    88:d6:51:6c:85:50:80:b1:4a:6f:42:94:3a:c9:4d:
                    00:4e:1e:f6:a4:e0:04:2c:93:d1:a3:fd:89:3b:02:
                    7d:f9:41:a7:71:ec:e1:5b:fb:5c:30:f1:d3:d6:5e:
                    1d:13:f0:74:74:1c:94:40:e7:15:03:53:ef:ed:3a:
                    5d:a9:03:88:11:19:b3:dc:a1:34:ad:97:4a:ce:d5:
                    ce:c0:6c:43:1a:4d:56:b7:87:55:63:e8:59:2d:68:
                    78:62:fe:b1:54:b2:f5:7a:a2:b1:7c:4e:03:e5:bb:
                    0a:13:ba:a6:57:91:bf:e2:42:bc:2c:e8:3c:01:a7:
                    2d:b2:97:cf:6b:be:37:cd:dc:a3:aa:29:99:b3:7e:
                    56:20:20:05:5a:78:c5:5f:ab:b8:f5:43:ce:0c:aa:
                    90:22:13:bd:6d:c3:e6:65:16:46:c8:9b:ca:7b:f4:
                    e0:29:b8:09:53:b2:23:44:87:78:14:ba:5c:dc:90:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:15:DD:73:2A:E3:BA:D6:5B:88:A2:C6:B7:CF:9D:63:52:42:72:B4
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS198075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5200::/39

    Signature Algorithm: sha256WithRSAEncryption
         0a:63:e1:b8:b2:b8:10:3c:53:a8:13:9b:15:d4:1f:09:0d:46:
         2e:17:53:7b:ca:2b:35:67:6e:a0:01:1d:0c:e4:ca:85:e4:03:
         8b:e4:85:7a:e3:85:d9:1a:26:42:28:57:6f:16:da:27:04:73:
         8d:39:fe:cb:6d:40:3b:b4:61:89:70:75:df:4b:79:c4:03:aa:
         86:67:d6:d2:7e:f3:1b:68:bc:4c:c0:12:01:02:01:f2:d5:be:
         37:0e:4c:fe:8d:ab:ce:70:67:6f:c4:5a:57:df:93:bd:23:e8:
         83:64:2c:a4:3d:98:70:92:85:85:8e:74:e7:a8:cc:bc:b2:f9:
         51:08:81:a3:2d:f6:41:b2:75:8a:c6:84:2b:3c:5b:aa:11:23:
         b5:4c:40:29:75:64:d8:60:a5:22:40:af:68:47:e7:73:5c:cc:
         db:bc:a2:71:cf:b8:21:82:d7:e8:a1:91:80:53:73:4e:c9:1e:
         3d:07:f8:22:9e:c6:63:b1:82:a9:36:f5:10:a3:5f:cf:55:41:
         ec:b5:bb:db:04:62:93:96:33:be:8d:80:21:d5:0b:14:cc:5c:
         16:76:8b:ee:d8:a0:a7:01:52:42:46:05:c2:4f:3f:58:c8:b8:
         23:bb:49:9d:bd:bf:71:0b:20:34:d7:e2:f0:e5:3b:39:85:5e:
         58:32:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----