Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS198408.roa
File:                     AS198408.roa (raw, json)
Hash identifier:          32Dx5qtQ6DH6x7jC/9M3z5prVLbJ9qVUHMKqSh6FHao=
Subject key identifier:   5C:AE:97:9F:9C:FB:E1:CF:2E:5D:6E:29:CB:6A:54:8A:A8:53:D6:34
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       63912E5896D6294DBC23BFC7551F4AE2E2773658
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS198408.roa
Signing time:             Thu 06 Jul 2023 11:17:34 +0000
ROA not before:           Thu 06 Jul 2023 11:12:34 +0000
ROA not after:            Thu 04 Jul 2024 11:17:34 +0000
asID:                     198408
IP address blocks:        2a05:dfc7:7800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:91:2e:58:96:d6:29:4d:bc:23:bf:c7:55:1f:4a:e2:e2:77:36:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:34 2023 GMT
            Not After : Jul  4 11:17:34 2024 GMT
        Subject: CN=5CAE979F9CFBE1CF2E5D6E29CB6A548AA853D634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:55:5c:02:6b:c5:e3:9b:46:0d:b1:1b:f3:
                    14:cb:fd:0d:60:64:88:79:a0:ca:82:19:ad:d7:31:
                    3f:a7:9e:da:41:43:90:bf:76:00:f9:41:f1:5c:3a:
                    9c:cf:81:af:2a:cf:18:53:69:e4:09:d9:96:49:cb:
                    89:9d:2a:a9:f0:4a:2e:32:84:db:5f:fb:5d:12:c9:
                    47:6c:61:7e:5a:0b:d8:32:a1:cc:33:80:b2:35:81:
                    42:cf:4f:c6:3d:97:dc:9e:f0:79:20:bb:1a:fe:2d:
                    ac:55:ef:94:a0:19:b1:ca:52:df:50:88:74:87:69:
                    52:38:62:cd:9f:e6:6a:97:f5:69:34:fe:4b:cc:a4:
                    01:29:7f:39:39:11:a7:8d:56:3c:e6:d0:dd:32:73:
                    e5:0c:8b:5c:c1:f7:0c:21:bc:d7:13:70:b9:9d:15:
                    d4:76:d6:db:2a:2f:ef:8f:44:78:86:46:48:41:84:
                    92:3f:fa:df:3b:63:39:71:af:cb:12:4d:b2:26:a5:
                    e2:9b:aa:1b:70:7f:fd:82:87:eb:1d:3d:da:d1:dd:
                    be:d9:76:65:b8:e4:60:f0:b6:32:2f:39:71:7c:7e:
                    9b:48:d9:77:12:78:f0:0a:05:c9:e7:47:c8:45:70:
                    19:94:fc:dd:25:ef:e5:2e:9d:b9:26:2b:32:95:dc:
                    61:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AE:97:9F:9C:FB:E1:CF:2E:5D:6E:29:CB:6A:54:8A:A8:53:D6:34
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS198408.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:7800::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:73:66:e8:c0:72:dc:72:70:d8:bd:d5:8e:8e:c8:4b:a9:
         ab:9d:55:1a:ba:03:dc:e3:3b:d0:89:03:08:ef:e6:36:81:9e:
         a2:f0:45:2e:41:61:02:0a:71:71:ea:4f:24:3d:ee:e6:85:39:
         1a:e2:7d:75:51:00:85:35:0c:18:85:88:af:94:dc:21:35:ec:
         87:f3:c1:3b:8d:54:5c:ea:61:28:05:8b:1c:2f:8f:bf:e7:02:
         43:28:5b:ea:52:08:25:55:2d:6d:f2:2c:dd:93:41:2f:a4:cd:
         01:f9:8c:6f:96:91:b1:8f:8d:2e:4f:1d:6b:00:77:a1:75:6d:
         39:a7:3c:2d:b7:12:c1:3f:0e:ab:14:aa:a6:39:ca:ac:bd:a3:
         d9:c3:d2:d2:59:a6:64:41:e7:60:fa:71:95:ba:d9:36:5f:85:
         a8:dc:9d:2d:83:a5:85:c2:4c:52:ea:61:a1:83:c8:f9:6d:e8:
         6b:78:58:16:91:d3:d7:b9:83:96:24:b0:0d:0c:25:df:2b:02:
         8d:63:a2:e7:d0:9d:ee:3a:5b:e8:a7:b5:f8:b3:77:72:f0:82:
         fd:ff:96:4c:68:14:6b:b8:a6:da:8d:b2:ee:5f:13:bb:11:9b:
         8d:19:b2:84:4a:4a:42:f9:6f:19:37:a6:88:86:f6:12:29:28:
         1f:e8:33:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----