Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS198480.roa
File:                     AS198480.roa (raw, json)
Hash identifier:          3rdgrKzm+gMO5R0YVFv2EeDQzi/0DA2fiQBE2HxPs+I=
Subject key identifier:   4E:ED:CA:03:3A:E6:81:37:0A:59:FD:6D:1B:D3:9A:94:43:48:72:7D
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       67C6E892A69CB9F130A65547DBEC2906D714133D
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS198480.roa
Signing time:             Thu 06 Jul 2023 11:17:34 +0000
ROA not before:           Thu 06 Jul 2023 11:12:34 +0000
ROA not after:            Thu 04 Jul 2024 11:17:34 +0000
asID:                     198480
IP address blocks:        2a06:1287:a400::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c6:e8:92:a6:9c:b9:f1:30:a6:55:47:db:ec:29:06:d7:14:13:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:34 2023 GMT
            Not After : Jul  4 11:17:34 2024 GMT
        Subject: CN=4EEDCA033AE681370A59FD6D1BD39A944348727D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:e2:ca:f2:bf:da:24:2e:7b:26:27:bd:db:
                    ba:06:51:ac:23:ab:e4:1f:7e:26:4c:93:b0:f9:2b:
                    90:4e:90:dc:a8:34:39:39:db:0a:32:fa:30:5c:83:
                    35:bf:86:7e:4d:2e:27:d5:ee:f0:55:b8:83:07:01:
                    dd:28:16:5f:97:15:e4:ff:77:62:51:84:34:d8:11:
                    0e:67:af:64:43:e5:31:a9:3b:8b:f1:a9:f2:0f:30:
                    fb:0b:a3:53:8c:1d:fc:7d:c7:49:57:f9:69:31:e6:
                    bf:97:73:28:2d:53:42:dd:c1:dc:84:a0:d0:83:53:
                    8a:13:88:92:3d:35:32:68:68:b7:b9:66:15:d3:83:
                    a4:08:d1:5c:0c:b4:11:68:77:2d:ad:7b:05:cc:a2:
                    3e:ea:54:3a:54:d0:96:51:3b:c2:0a:98:d0:0c:e0:
                    d6:f3:2f:b3:c4:90:bb:c7:d1:ab:cc:ae:66:cb:94:
                    66:f1:75:5c:66:af:9c:3e:4b:9d:54:49:32:da:ce:
                    3c:45:e0:62:6b:7a:d5:22:c7:2d:27:5a:b1:75:46:
                    b6:34:2a:12:41:22:4a:a4:41:b3:d6:10:3e:db:2c:
                    92:9e:f0:a8:51:1d:dd:17:a0:2c:26:fa:ff:33:e6:
                    5d:1f:33:00:62:78:c5:21:46:16:10:32:f4:f8:f9:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:ED:CA:03:3A:E6:81:37:0A:59:FD:6D:1B:D3:9A:94:43:48:72:7D
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS198480.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         09:0e:b3:24:d5:8f:a6:41:74:ab:be:90:04:25:f5:3e:9e:8a:
         d7:d0:39:5b:7f:c1:dc:92:46:b7:51:e7:07:61:4b:65:07:92:
         23:3c:1e:c1:ad:0b:64:40:13:cc:54:12:00:5b:f7:f7:10:0f:
         4f:fc:a6:f1:0c:f6:ae:d6:07:65:db:12:db:8e:3a:16:eb:b6:
         18:ba:ec:b9:2c:ec:b0:35:f2:fd:44:46:dd:c0:a5:b4:23:a8:
         80:57:db:05:d6:7d:5e:96:5b:8e:e2:48:ce:fb:ca:df:e1:6a:
         55:37:be:66:41:61:e4:ad:89:88:75:42:17:16:bb:77:9a:31:
         79:e6:9c:10:39:0b:53:ba:e1:14:9e:b7:6f:17:d3:8d:3b:de:
         16:be:3d:cd:e8:8c:0a:4d:73:f3:48:48:8c:b5:cf:19:fa:31:
         f4:c6:7f:a9:3d:ef:ff:86:8f:27:5a:8d:d4:f7:43:bd:d5:1d:
         eb:9f:a3:62:9f:c3:b1:78:74:b1:50:4f:2e:14:0f:4b:6f:85:
         47:ff:cd:98:e3:65:33:2c:04:79:4c:d2:6d:4d:15:ab:d0:05:
         c0:a4:a6:43:f8:ca:82:59:8c:45:92:50:d9:ca:54:4c:c0:b0:
         21:ca:a8:79:be:d6:f5:91:1b:91:de:4d:5e:95:a1:bc:41:2b:
         78:93:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----