Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS199376.roa
File:                     AS199376.roa (raw, json)
Hash identifier:          sclP5tTptYhrxZ/ijy4e+EzeZwPHEZNuCWlavx8LM0A=
Subject key identifier:   04:7A:09:EF:5B:30:49:E8:93:6C:06:A1:BD:8D:6E:A2:01:C0:F5:D6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4DA7C92BDFBA89F266459C5325E9D6012D332B35
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS199376.roa
Signing time:             Fri 27 Oct 2023 11:12:15 +0000
ROA not before:           Fri 27 Oct 2023 11:07:15 +0000
ROA not after:            Fri 25 Oct 2024 11:12:15 +0000
asID:                     199376
IP address blocks:        2a05:dfc7:9c00::/38 maxlen: 48
                          2a05:dfc7:be00::/39 maxlen: 48
                          2a06:1287:5520::/44 maxlen: 48
                          2a06:1287:5560::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:a7:c9:2b:df:ba:89:f2:66:45:9c:53:25:e9:d6:01:2d:33:2b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct 27 11:07:15 2023 GMT
            Not After : Oct 25 11:12:15 2024 GMT
        Subject: CN=047A09EF5B3049E8936C06A1BD8D6EA201C0F5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0f:d0:ff:f5:66:c3:1c:69:59:77:62:87:ef:
                    6b:14:dc:8c:ed:ba:ae:b1:fc:74:10:c8:01:ca:cd:
                    1b:cd:a4:a2:d7:89:69:6f:90:94:96:fc:ce:a4:a1:
                    23:6b:ae:c5:10:53:58:9a:61:20:9d:9d:39:b3:25:
                    69:20:d0:04:c5:33:b6:cd:ed:31:45:c3:9a:bf:5c:
                    98:c1:eb:df:ca:66:11:c6:50:32:e7:8d:a3:8d:88:
                    bc:dd:9d:31:3a:86:6a:68:12:28:c3:da:27:d8:17:
                    fe:60:9a:c0:8e:1e:34:0c:fb:98:11:82:48:6b:10:
                    26:be:24:e4:0b:d0:76:a8:cd:3f:49:42:8b:13:63:
                    c8:b9:0d:4c:da:45:fc:9a:5a:4a:95:36:d2:66:25:
                    34:8e:d9:ed:f2:07:52:96:df:cd:8a:6e:0b:fe:78:
                    ef:54:dc:8b:c7:7b:ea:6e:57:0b:16:1e:57:b5:dd:
                    e4:91:20:76:49:68:32:65:82:d3:57:be:3d:3c:1e:
                    00:df:d0:b9:de:f7:09:91:db:25:9b:e5:b5:1b:ab:
                    4d:01:1f:8e:fe:72:0c:c2:9b:be:62:5f:c6:c7:b5:
                    1c:ce:69:6a:7d:7e:68:8f:10:ab:7a:1b:d8:1f:64:
                    82:54:16:f6:f6:20:43:e7:a5:5d:8b:72:0e:cc:ea:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:09:EF:5B:30:49:E8:93:6C:06:A1:BD:8D:6E:A2:01:C0:F5:D6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS199376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9c00::/38
                  2a05:dfc7:be00::/39
                  2a06:1287:5520::/44
                  2a06:1287:5560::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:11:b5:84:1a:f2:17:b9:74:7c:16:3c:65:82:ee:60:c3:34:
         68:e8:e9:dd:14:2f:e7:c8:66:24:8e:a4:7c:f6:49:dc:5e:bb:
         82:15:9c:b3:8f:4e:1c:06:64:9a:83:35:8b:6a:0d:e7:44:d5:
         cc:c6:8b:19:ff:1a:11:ef:9f:8c:74:91:53:94:27:19:b8:83:
         46:6a:9b:12:53:ec:13:7c:55:c6:4f:e7:0c:e5:18:59:d7:d3:
         f2:cb:96:62:d6:44:6c:36:c0:7c:8a:2f:47:a3:e6:44:3d:a4:
         0d:d0:c2:7e:ff:79:7f:b0:87:f6:95:05:fa:bf:9a:31:cf:4e:
         3b:2b:67:a9:8a:dd:4e:87:17:dc:c3:54:2e:58:eb:74:5c:63:
         50:60:f5:67:28:3b:ac:2c:9f:04:62:45:bf:c4:fe:21:0e:38:
         a3:67:ff:e5:ac:86:34:06:e8:4d:8b:0e:3a:26:2d:51:75:5e:
         e2:6d:f2:1b:65:b8:8e:f0:4e:16:17:fd:64:60:a2:a8:c0:d2:
         a2:ff:05:78:a7:0e:8d:16:ed:5e:d2:62:a5:00:d4:fe:b6:db:
         7a:34:1b:2b:0d:50:3d:fc:48:f9:74:79:71:b1:d5:b4:97:4b:
         45:1c:37:16:0c:eb:0d:86:c4:f1:63:c3:0c:d9:67:77:56:22:
         60:13:3d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----