Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS199428.roa
File:                     AS199428.roa (raw, json)
Hash identifier:          0Kh7B1jzyd8op9aBFliMdJFDm6uVfmPcH/oJQEeHkVc=
Subject key identifier:   2C:8D:51:23:62:B7:48:D5:2F:FC:77:FB:F7:8D:FC:1C:31:CF:A1:E5
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       37DAB031E97C97F2BC68856654319633ABE7F3B9
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS199428.roa
Signing time:             Sat 12 Aug 2023 21:32:25 +0000
ROA not before:           Sat 12 Aug 2023 21:27:25 +0000
ROA not after:            Sat 10 Aug 2024 21:32:25 +0000
asID:                     199428
IP address blocks:        2a06:1287:bc00::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:da:b0:31:e9:7c:97:f2:bc:68:85:66:54:31:96:33:ab:e7:f3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug 12 21:27:25 2023 GMT
            Not After : Aug 10 21:32:25 2024 GMT
        Subject: CN=2C8D512362B748D52FFC77FBF78DFC1C31CFA1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e0:08:4b:47:cb:dc:ad:20:6b:c9:8a:7d:6f:
                    7c:e9:10:6e:ed:fa:72:cd:18:3d:d6:dc:b1:e3:63:
                    fb:13:e9:38:2c:e6:4f:5e:64:97:e2:36:a8:01:f7:
                    f7:1d:96:b8:df:a0:5f:4b:a3:31:05:c6:b7:0a:7f:
                    bc:cd:98:46:a3:15:67:61:13:96:e1:fe:34:db:a0:
                    29:b5:8a:36:5f:2a:99:63:9b:0b:84:11:0b:e9:23:
                    e3:90:c4:44:63:bb:5e:a0:15:28:fc:c2:e9:b2:cb:
                    50:48:eb:9e:e7:99:17:d4:de:2c:c2:e6:f4:77:93:
                    eb:79:7b:33:f1:57:41:ef:83:3d:1e:72:08:de:05:
                    2c:9d:cd:e5:42:2a:b1:fd:ed:9d:03:9e:2c:97:7f:
                    fa:51:a2:a6:bf:24:1a:c2:6a:06:48:94:58:57:de:
                    e2:f7:17:6d:13:d1:2d:99:46:92:a2:e9:dd:53:f2:
                    fc:45:93:f9:01:3c:90:7a:c8:74:f7:2d:14:88:e4:
                    2f:ee:87:19:e1:8b:9c:71:8e:5d:0c:4b:ba:8b:38:
                    e4:0e:36:99:bb:d6:62:7b:e3:16:ea:b0:b7:f0:7b:
                    4f:b3:44:c9:de:1b:7d:74:a7:b1:de:ec:75:d1:77:
                    b9:f3:00:35:31:26:83:56:26:1b:2e:00:d8:92:5b:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:51:23:62:B7:48:D5:2F:FC:77:FB:F7:8D:FC:1C:31:CF:A1:E5
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS199428.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:bc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         52:27:75:0c:c0:0a:39:f5:a2:d1:26:25:5e:f4:06:06:41:53:
         58:96:06:85:ba:dc:71:5a:80:73:04:ca:24:98:83:97:f7:76:
         29:9f:ae:91:9a:aa:ff:d8:51:8e:11:a9:6d:14:3e:ce:f0:c9:
         74:fa:86:2b:83:ee:79:13:29:cf:c3:ff:36:16:fd:bb:b3:69:
         c9:04:b3:8c:da:4e:80:b9:d7:14:fe:7d:89:66:4b:ee:66:0a:
         0f:d1:6f:65:76:00:95:36:91:d2:83:a0:be:f9:69:0c:69:a7:
         b9:7d:90:f2:58:09:07:b5:36:cc:96:99:b7:6d:b3:02:3a:f9:
         20:b9:b6:d6:33:ed:3b:89:11:00:61:8f:f6:ac:f6:68:a6:cf:
         e5:4d:ab:30:28:c9:cf:95:3f:ae:ee:58:4a:89:27:f7:7f:2f:
         41:1e:90:b2:0f:26:85:90:86:91:25:9c:3a:33:9f:a7:7c:d7:
         dc:3a:c3:ee:e6:02:38:e4:c3:2f:fb:fa:c8:6f:b0:d0:23:de:
         59:bb:11:31:5a:3e:b3:73:95:a5:2d:d5:4a:17:66:8f:2c:ad:
         a2:3a:4b:6d:67:81:7f:d3:1d:4e:d0:39:c6:f6:0d:7c:ea:33:
         28:3e:42:fd:a9:a3:d1:40:a0:ef:94:02:33:03:93:b1:da:f9:
         78:03:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----