Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS199052.roa
File:                     AS199052.roa (raw, json)
Hash identifier:          k9C4f4vky1jVDRFbMan7WnU2tMHuHXhwfdscw4OHo2c=
Subject key identifier:   66:76:E1:DB:BE:FD:1D:4B:90:C6:49:9D:1A:67:3C:2F:61:3E:69:B3
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7E19F2EF621E6E2AEABEC9BC8A8F780A5AB09830
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS199052.roa
Signing time:             Thu 06 Jul 2023 11:17:11 +0000
ROA not before:           Thu 06 Jul 2023 11:12:11 +0000
ROA not after:            Thu 04 Jul 2024 11:17:11 +0000
asID:                     199052
IP address blocks:        2a06:9f45:1fa3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:19:f2:ef:62:1e:6e:2a:ea:be:c9:bc:8a:8f:78:0a:5a:b0:98:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:11 2023 GMT
            Not After : Jul  4 11:17:11 2024 GMT
        Subject: CN=6676E1DBBEFD1D4B90C6499D1A673C2F613E69B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:ee:49:40:93:13:92:04:5a:d7:d4:50:72:
                    a1:7e:b1:be:4e:d4:08:1c:7b:64:ce:23:75:86:f3:
                    a7:fe:f1:b7:d9:f3:6e:fe:77:b4:37:cb:17:71:85:
                    ac:91:7e:54:0e:5b:26:52:f2:d5:b3:98:0b:12:b5:
                    b1:40:ef:61:45:71:92:85:02:64:b0:de:ad:05:f0:
                    1f:3c:da:5b:62:5e:b1:0a:2f:99:01:fb:70:1f:7d:
                    32:be:1e:2e:0f:29:7a:52:3f:fa:41:74:53:cb:9e:
                    a2:bc:4c:7f:34:6c:5d:af:de:2a:6e:89:a1:95:1a:
                    53:d0:c5:65:55:b5:e5:3e:09:38:39:4b:ac:87:12:
                    15:83:f5:28:d7:e3:fc:09:8a:cb:d8:ae:33:16:1b:
                    16:77:ad:14:b0:8c:f7:07:b9:3c:4f:81:37:0f:2d:
                    b4:a0:b9:58:9b:30:2f:f1:05:ed:24:b3:f6:8f:b8:
                    cd:aa:eb:26:4d:cb:6e:ff:e2:bd:9e:e6:e5:b3:e4:
                    59:00:ea:ac:6d:09:fc:ab:8f:02:d3:fb:a1:0f:cb:
                    f4:5b:c9:dc:20:d1:ef:4e:7c:61:23:cb:45:3b:98:
                    8f:24:a0:5d:d7:c8:1e:cc:e6:6c:50:de:fc:ee:5e:
                    2b:82:7e:8e:ec:35:27:fa:68:84:fd:51:08:51:5d:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:76:E1:DB:BE:FD:1D:4B:90:C6:49:9D:1A:67:3C:2F:61:3E:69:B3
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS199052.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f45:1fa3::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:86:b0:70:a5:5b:a2:09:0a:f6:6d:14:60:fe:4f:06:da:24:
         38:d4:15:37:e4:7c:5c:4c:81:fd:46:0c:20:e5:1b:b2:9c:a7:
         12:17:4d:d4:aa:8f:b0:4b:71:c8:f4:86:e9:21:79:5b:7f:5e:
         b0:ab:89:43:03:54:a9:47:3c:b4:d0:00:b9:cb:5c:68:3b:6c:
         54:cb:c8:f4:a4:5c:19:c4:f3:65:3f:b1:30:75:12:3a:86:b3:
         8f:12:8a:46:54:02:c2:7a:e7:6f:a3:28:a4:88:90:10:65:ca:
         0c:0b:59:5a:8e:a5:9d:07:69:ce:53:a1:34:84:80:4e:4d:0c:
         a8:20:28:bc:0b:07:0e:61:03:8d:74:74:3c:ed:28:37:d7:a5:
         2f:f8:3b:6b:00:99:ab:f8:ed:01:f7:c6:92:76:46:99:4e:60:
         9a:bc:f7:35:ca:6f:d0:0c:fd:be:73:d8:a2:99:0a:ba:65:e1:
         20:2d:f9:cc:03:6c:f0:ea:46:59:a6:c1:93:fd:e1:05:5c:ff:
         18:45:34:8b:8a:00:84:f7:e4:61:bf:8f:b4:29:92:fb:43:b6:
         91:ce:6d:84:4c:db:8d:c9:9a:98:93:0d:a2:56:5c:c0:aa:73:
         9c:e1:11:3a:e9:82:63:2f:1d:15:f9:d9:6b:e3:95:b0:8a:aa:
         e4:a0:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----