Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS198342.roa
File:                     AS198342.roa (raw, json)
Hash identifier:          j/1gM21va36z5IgbXj6tNl+WnRh2TOIGsFAdNPas7Jc=
Subject key identifier:   28:FE:F9:76:3E:6D:F4:42:CC:6E:77:E0:C1:EE:04:96:1C:39:35:39
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       444D921A39B66224CF706CEBD7AC50B26FEC4DC8
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS198342.roa
Signing time:             Tue 11 Jul 2023 15:15:16 +0000
ROA not before:           Tue 11 Jul 2023 15:10:16 +0000
ROA not after:            Tue 09 Jul 2024 15:15:16 +0000
asID:                     198342
IP address blocks:        2a06:1287:c000::/37 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4d:92:1a:39:b6:62:24:cf:70:6c:eb:d7:ac:50:b2:6f:ec:4d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 11 15:10:16 2023 GMT
            Not After : Jul  9 15:15:16 2024 GMT
        Subject: CN=28FEF9763E6DF442CC6E77E0C1EE04961C393539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:b6:82:07:ee:c7:24:da:8c:ff:10:46:b7:
                    34:8c:a4:cd:03:f5:6c:30:7a:49:d9:29:17:9a:5c:
                    38:00:1f:d4:bf:93:e4:0e:77:10:a9:7d:15:b7:7b:
                    81:f0:e2:f1:be:9e:f2:fc:da:37:d5:2f:ca:98:44:
                    bb:a5:9b:29:fe:da:36:5f:8a:92:c9:3c:9a:41:28:
                    82:4f:e0:33:fa:7d:f9:5a:e7:2b:6f:cd:e2:d7:d9:
                    31:7a:63:81:fd:58:e0:7d:59:1a:8e:7b:81:8f:4e:
                    db:d6:11:39:9c:41:08:9f:f8:22:39:5d:d7:03:96:
                    8d:e1:c4:7d:1e:db:c0:86:ba:f8:6f:14:a5:ae:7b:
                    d5:9d:1e:82:14:b2:68:30:84:6a:86:e0:ad:41:15:
                    7c:9f:37:2a:77:76:d8:bc:7e:3c:b7:a0:e0:aa:48:
                    4b:3b:44:35:5f:32:5a:c2:ab:78:ec:54:df:f0:37:
                    ce:41:7b:ba:56:e3:ec:aa:87:fb:4a:53:18:99:a6:
                    26:9d:c1:65:cc:d1:e4:ff:9b:e0:08:82:6c:b7:30:
                    fa:d5:dd:c0:5d:71:b2:a7:e8:ed:a9:e6:fc:fe:f1:
                    6f:de:d5:e3:89:40:d7:35:b1:51:79:c6:d9:9c:ff:
                    e8:9d:30:9b:df:2f:d1:10:5a:97:d4:f2:f6:2a:48:
                    de:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:F9:76:3E:6D:F4:42:CC:6E:77:E0:C1:EE:04:96:1C:39:35:39
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS198342.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         ae:30:02:88:27:2a:0e:c2:d6:fb:c3:3c:97:02:85:78:30:25:
         38:eb:18:19:10:80:6f:64:8a:77:be:e1:c1:fb:26:99:c7:1d:
         14:7e:38:e4:29:c4:c2:43:67:01:ce:31:1b:de:a2:79:c6:24:
         65:e4:7c:3f:ae:86:f3:d3:9c:9b:41:53:5f:41:18:54:d2:3b:
         d8:67:6d:bf:d2:21:fc:da:48:46:92:66:44:88:6c:76:5f:f7:
         b4:23:f5:ab:46:83:8c:29:9d:0e:32:f5:bc:cc:71:8b:cd:75:
         8b:ea:6c:dc:8d:68:55:b9:84:43:17:36:03:49:88:06:ec:28:
         e6:4d:d0:d0:a2:fe:0a:05:df:16:81:ea:aa:ea:00:00:a1:71:
         87:d3:85:0b:9a:5b:77:9b:a8:4e:d2:79:ff:2d:50:7e:a3:fa:
         d4:ad:1b:f7:7f:2c:b0:8f:37:fb:f2:5c:68:82:43:6d:8f:0a:
         25:97:e4:3b:85:3f:e5:8c:31:35:03:96:38:70:a2:e1:e7:33:
         f3:66:f6:01:3a:39:6a:a0:68:88:3f:2a:e0:bb:1f:55:54:1e:
         c4:07:76:ba:31:ff:db:9e:6e:b0:c4:c0:06:b5:fd:f4:c2:d9:
         e6:f0:59:d3:9f:8f:eb:2e:31:5f:1f:89:68:01:7c:b3:c6:02:
         7b:e9:a6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----