Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS198924.roa
File:                     AS198924.roa (raw, json)
Hash identifier:          LGTDAb9R1vx1Jc+U/tVlJRuSzZjeZqPg4zthT0mjf5A=
Subject key identifier:   5F:84:F0:E4:9F:2A:66:64:6E:E5:78:E7:8B:83:3E:05:D1:AB:C8:F6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       48C48AFECC1BCF0291C22F01521DFED5A41C533D
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS198924.roa
Signing time:             Thu 06 Jul 2023 11:17:33 +0000
ROA not before:           Thu 06 Jul 2023 11:12:33 +0000
ROA not after:            Thu 04 Jul 2024 11:17:33 +0000
asID:                     198924
IP address blocks:        2a06:1287:6200::/39 maxlen: 48
                          2a06:1287:6400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c4:8a:fe:cc:1b:cf:02:91:c2:2f:01:52:1d:fe:d5:a4:1c:53:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:33 2023 GMT
            Not After : Jul  4 11:17:33 2024 GMT
        Subject: CN=5F84F0E49F2A66646EE578E78B833E05D1ABC8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:34:0c:d7:1e:f8:45:d4:57:e5:bc:be:66:
                    77:61:fa:ab:e7:e2:5f:3b:25:e1:6e:55:3e:00:96:
                    13:6b:f1:92:99:5b:47:0a:15:5a:4f:aa:70:e1:6d:
                    43:e3:16:72:28:0b:00:72:b8:b1:83:ee:08:69:26:
                    5d:33:9d:26:e3:2b:6f:66:9a:bd:29:4b:40:21:e1:
                    46:33:c3:25:0a:e8:61:2b:80:4b:23:3f:82:47:de:
                    e3:0f:04:4d:92:64:14:e6:35:ae:74:09:6f:d2:b8:
                    dd:77:fe:24:cb:77:71:85:5d:36:88:c1:b1:9a:a1:
                    68:1e:b5:1a:09:e5:04:cc:0f:36:81:5b:18:42:f3:
                    c0:26:63:aa:49:b1:e2:31:02:88:be:d0:f3:d5:35:
                    f4:25:7c:d4:ca:dc:f4:6b:ab:23:58:f5:da:43:2e:
                    e4:21:c7:d2:d8:d2:b5:71:c4:cf:8f:9b:95:33:6d:
                    7e:b7:f2:ce:e9:19:a1:0b:07:00:b5:4c:db:43:84:
                    39:07:3e:85:30:d1:75:41:eb:90:8a:a1:7f:73:d4:
                    b7:80:fa:b6:1f:2c:f1:c4:d3:42:8e:0a:1f:24:f7:
                    12:50:59:f0:cb:80:83:0b:2e:68:9b:11:71:b5:d7:
                    7b:93:a9:25:21:de:c0:19:9a:62:e5:e5:41:64:07:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:84:F0:E4:9F:2A:66:64:6E:E5:78:E7:8B:83:3E:05:D1:AB:C8:F6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS198924.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:6200::-2a06:1287:65ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:d8:28:63:e5:8b:ab:d8:92:6c:23:a6:53:8c:3d:ae:a0:
         38:6c:e2:99:b3:57:79:66:2f:fc:31:f9:f8:dd:28:dc:96:b8:
         3d:07:20:df:6f:8a:dc:60:9d:50:8e:44:ee:9b:dc:ff:40:a3:
         1c:40:67:8e:fd:02:17:88:93:d1:96:4f:46:a0:f0:fb:33:c3:
         ec:48:4e:05:cb:1b:7b:21:f0:ae:e5:a7:29:5f:8c:d9:96:e0:
         3b:3f:2f:f8:37:47:1c:03:84:7c:e5:00:d5:96:e9:a6:97:97:
         5e:48:b0:4b:d0:98:7f:34:17:3a:81:0f:09:95:0c:88:a7:2e:
         96:4a:c1:e9:ac:db:a4:a8:04:6c:60:fd:01:6d:47:0a:81:ec:
         5d:c4:2a:be:a7:83:c1:0e:2d:af:8e:42:72:0c:32:88:e5:d8:
         cb:a8:f9:b2:7b:7e:98:7a:47:51:e7:93:ca:09:0c:73:b0:c4:
         9f:fa:bc:60:10:6d:2b:6b:48:7a:70:7b:83:63:5d:7c:f2:01:
         f4:ee:1e:23:5d:60:94:c7:84:f1:5d:ec:4b:56:92:c3:dc:97:
         5b:45:dd:6d:83:e1:b0:97:0b:02:a9:ec:84:94:5b:57:5d:fe:
         6d:e5:50:61:39:14:41:49:a7:41:4a:24:48:59:3a:aa:33:1b:
         9e:3d:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----