Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS199186.roa
File:                     AS199186.roa (raw, json)
Hash identifier:          KFW26ab+JyT9lFPjfjw64LTmjx0m4jnE0UqRZUE7eRM=
Subject key identifier:   3E:8C:64:8E:1A:48:67:BB:A3:51:65:A1:24:54:9C:10:41:AD:F4:9E
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6E1874FE0126C69A1CDCB2AD4AA4AF8BF77FFA52
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS199186.roa
Signing time:             Fri 28 Jul 2023 15:42:38 +0000
ROA not before:           Fri 28 Jul 2023 15:37:38 +0000
ROA not after:            Fri 26 Jul 2024 15:42:38 +0000
asID:                     199186
IP address blocks:        2a05:dfc7:ee00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:18:74:fe:01:26:c6:9a:1c:dc:b2:ad:4a:a4:af:8b:f7:7f:fa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 28 15:37:38 2023 GMT
            Not After : Jul 26 15:42:38 2024 GMT
        Subject: CN=3E8C648E1A4867BBA35165A124549C1041ADF49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:ed:fe:3b:f6:c7:67:04:24:bf:49:5e:9e:
                    e3:88:cb:3c:30:6b:b7:4b:8d:06:c3:9b:d6:d3:2a:
                    d3:95:5b:7e:3d:5d:a3:d1:e5:f0:e0:5f:90:86:9b:
                    fb:23:b3:dd:fb:26:6a:c0:3b:93:cd:1e:35:9b:c4:
                    03:6e:e2:9f:1f:77:8f:fc:6c:57:4f:01:c8:fe:19:
                    6e:99:93:b2:2c:52:fd:37:ff:69:c7:88:ab:6c:7d:
                    94:ee:7d:07:30:da:5a:3d:54:c9:e2:6e:e9:e7:28:
                    b3:ae:64:02:00:80:a8:86:9e:1f:36:04:fb:39:74:
                    aa:fc:b0:cf:df:51:74:26:56:d0:f0:1d:d8:d7:0a:
                    f8:86:1a:5d:56:b7:93:c4:b3:22:fc:b2:17:3d:44:
                    48:16:08:b5:dd:b1:42:cb:a8:ef:1d:95:f5:8d:3e:
                    b3:cc:47:7a:70:d1:1d:0c:0f:88:f3:f0:65:a4:48:
                    2a:5d:da:4e:b5:52:d1:e2:f0:bc:b1:ba:8c:f0:73:
                    a0:dc:a7:31:4d:72:33:72:8e:85:44:6e:8a:48:47:
                    0d:3b:3d:0e:36:05:73:be:1a:e9:7e:2e:04:4c:81:
                    e2:5a:df:d6:49:e1:ca:8e:62:9a:61:49:79:bf:48:
                    35:3f:51:e1:92:ae:e2:f2:3c:5c:81:37:90:cf:c0:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8C:64:8E:1A:48:67:BB:A3:51:65:A1:24:54:9C:10:41:AD:F4:9E
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS199186.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:ee00::/39

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:69:c2:ba:23:4b:9c:ff:30:53:72:33:78:b6:24:5a:c5:
         94:a1:bf:95:11:de:d2:4f:e6:7f:a1:2c:0e:cd:69:72:1a:fa:
         5b:6c:a3:18:90:e3:b6:ea:76:a4:28:e5:02:25:2a:4d:ac:e3:
         ab:b6:2f:d5:f6:84:3c:64:8d:1c:fc:3f:d3:03:01:c0:87:b7:
         78:9d:16:78:da:86:da:6c:fc:72:fe:8a:fb:92:42:34:46:2b:
         dc:18:d5:14:db:01:7f:80:fd:2c:6d:b6:16:0a:46:a0:0e:d2:
         d7:9f:6b:3a:cc:47:24:b7:58:ff:a7:2c:15:0b:cc:f1:ea:51:
         82:28:97:04:62:89:44:f9:f4:7f:36:70:e6:1c:96:62:32:69:
         f2:3f:f7:f4:06:c9:b0:0d:be:4f:51:76:51:a1:21:42:15:b5:
         70:2b:8a:ba:b3:8d:d2:2f:83:5d:89:87:ef:aa:44:2d:87:f1:
         55:a4:63:85:95:97:e8:f5:7e:4b:f5:05:4b:43:ee:2d:77:16:
         40:e4:80:a3:c4:8b:c8:fb:06:fa:d2:7f:67:05:e6:3c:d1:6d:
         32:0f:48:c9:99:51:4f:9b:b9:16:f5:94:6d:28:c3:04:58:21:
         43:0f:9e:86:cb:4d:41:81:21:0a:3d:28:47:6d:22:8e:67:2e:
         35:20:4c:9c
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUbhh0/gEmxpoc3LKtSqSvi/d/+lIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MjgxNTM3MzhaFw0yNDA3MjYxNTQyMzhaMDMxMTAvBgNV
BAMTKDNFOEM2NDhFMUE0ODY3QkJBMzUxNjVBMTI0NTQ5QzEwNDFBREY0OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0H+3+O/bHZwQkv0lenuOIyzww
a7dLjQbDm9bTKtOVW349XaPR5fDgX5CGm/sjs937JmrAO5PNHjWbxANu4p8fd4/8
bFdPAcj+GW6Zk7IsUv03/2nHiKtsfZTufQcw2lo9VMnibunnKLOuZAIAgKiGnh82
BPs5dKr8sM/fUXQmVtDwHdjXCviGGl1Wt5PEsyL8shc9REgWCLXdsULLqO8dlfWN
PrPMR3pw0R0MD4jz8GWkSCpd2k61UtHi8Lyxuozwc6DcpzFNcjNyjoVEbopIRw07
PQ42BXO+Gul+LgRMgeJa39ZJ4cqOYpphSXm/SDU/UeGSruLyPFyBN5DPwAlbAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUPoxkjhpIZ7ujUWWhJFScEEGt9J4wHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMTk5MTg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgXfx+4wDQYJKoZIhvcN
AQELBQADggEBADu0acK6I0uc/zBTcjN4tiRaxZShv5UR3tJP5n+hLA7NaXIa+lts
oxiQ47bqdqQo5QIlKk2s46u2L9X2hDxkjRz8P9MDAcCHt3idFnjahtps/HL+ivuS
QjRGK9wY1RTbAX+A/SxtthYKRqAO0tefazrMRyS3WP+nLBULzPHqUYIolwRiiUT5
9H82cOYclmIyafI/9/QGybANvk9RdlGhIUIVtXArirqzjdIvg12Jh++qRC2H8VWk
Y4WVl+j1fkv1BUtD7i13FkDkgKPEi8j7BvrSf2cF5jzRbTIPSMmZUU+buRb1lG0o
wwRYIUMPnobLTUGBIQo9KEdtIo5nLjUgTJw=
-----END CERTIFICATE-----