Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS199459.roa
File:                     AS199459.roa (raw, json)
Hash identifier:          NxNtIDG8jCV/F8QQZsXCRs5lvsr4LhMGFjY5izp4YH4=
Subject key identifier:   1B:8A:3C:39:55:86:F3:DA:F0:98:11:2D:95:91:EC:BE:39:3D:3A:5E
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       227987CB28A119729EBB0E712309C92924E0FE82
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS199459.roa
Signing time:             Wed 12 Jul 2023 08:38:13 +0000
ROA not before:           Wed 12 Jul 2023 08:33:13 +0000
ROA not after:            Wed 10 Jul 2024 08:38:13 +0000
asID:                     199459
IP address blocks:        2a06:1287:8800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:87:cb:28:a1:19:72:9e:bb:0e:71:23:09:c9:29:24:e0:fe:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 12 08:33:13 2023 GMT
            Not After : Jul 10 08:38:13 2024 GMT
        Subject: CN=1B8A3C395586F3DAF098112D9591ECBE393D3A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0e:3c:08:45:e9:76:9e:cc:48:d9:6b:ad:48:
                    dc:8e:86:38:fc:8b:25:0e:57:f3:e4:2e:8b:15:75:
                    16:67:42:9e:23:71:ac:70:30:f8:a5:f6:29:91:7a:
                    7e:9d:e2:b1:f3:a2:6e:02:a5:42:81:b2:ad:ec:31:
                    69:95:1b:91:1b:38:53:3c:27:bd:16:88:fa:54:42:
                    fb:5e:98:a9:c4:9d:3f:0e:69:3f:52:db:be:b0:ec:
                    ba:2d:10:52:99:f3:7b:ad:07:ef:d9:41:8c:bf:ed:
                    08:7b:a7:f9:d4:b9:d7:e8:03:7c:5f:ed:7a:52:b6:
                    55:10:4d:93:e3:29:1e:6e:73:d6:32:e8:d2:21:03:
                    41:3f:f3:3d:dc:43:c0:5d:11:49:66:b9:64:bf:e8:
                    4b:c3:e5:3d:b8:09:32:fe:c5:83:fc:af:26:8c:ea:
                    ab:05:71:e3:55:af:9d:91:e1:88:7e:d6:a7:ad:5c:
                    30:68:3e:c6:7a:8b:53:ca:ca:a9:7a:21:5d:bd:7a:
                    00:c1:9a:a0:4a:75:e5:8b:03:2e:96:35:78:b6:c0:
                    40:0b:4c:7c:40:2e:00:e4:78:04:f0:f9:38:1e:86:
                    7d:60:0f:20:f2:d4:ce:2e:8f:c7:13:3f:50:21:0e:
                    cb:3e:77:fd:9e:74:42:29:cb:d8:eb:6e:90:e7:17:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8A:3C:39:55:86:F3:DA:F0:98:11:2D:95:91:EC:BE:39:3D:3A:5E
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS199459.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:41:ba:75:01:65:25:6e:85:26:6d:fd:8c:0b:01:9d:e7:31:
         7c:4c:aa:a8:4c:29:36:3a:3a:89:ca:5c:0c:86:77:06:c5:ce:
         8d:e0:4a:5b:42:73:3a:4b:dc:e7:17:e0:dd:a9:5c:88:97:46:
         3e:9f:fe:ed:0b:7e:36:ed:4c:21:56:09:e1:83:c3:cb:03:6e:
         c4:a8:26:e2:62:ae:ec:b0:5d:e0:3e:4d:d3:8b:cb:43:b1:fb:
         29:12:2d:90:d1:da:0b:d9:9f:1f:73:ba:12:36:88:a1:a1:4b:
         5e:54:25:4e:9d:33:8b:dc:a0:79:70:70:5e:5e:fb:b9:b8:4d:
         ff:72:ce:6f:9a:79:1c:2b:de:2e:e7:ed:f8:dc:53:85:1c:43:
         28:18:b4:56:55:74:b8:15:67:b4:b0:75:58:e4:94:27:d0:16:
         78:ee:23:70:71:bf:6f:61:b6:c3:24:54:8a:79:ce:10:1d:f8:
         5a:73:fe:62:6e:c0:4e:4a:e0:e8:a6:fe:fc:05:9e:f7:c3:f5:
         fc:90:d8:ef:67:9d:48:3d:7e:7d:8f:d5:79:81:99:97:cd:09:
         3e:32:6a:7f:17:0e:e9:32:1e:0b:55:1a:9f:79:0e:b3:61:a9:
         4c:3c:b0:6b:73:16:ce:4c:15:d2:df:58:56:ed:99:c4:e4:cb:
         b8:32:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----