Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS199680.roa
File:                     AS199680.roa (raw, json)
Hash identifier:          l2Pn5B+81lEG6zk7mBZuhvqoBdr1jfy1mWbDFEZipOs=
Subject key identifier:   42:4C:96:BA:47:A0:FF:6F:56:46:B3:A9:84:B4:D0:7E:08:4F:48:22
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       19561E13ABBFBBE3FA7837EBAD1F4EBE15037821
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS199680.roa
Signing time:             Thu 06 Jul 2023 11:17:23 +0000
ROA not before:           Thu 06 Jul 2023 11:12:23 +0000
ROA not after:            Thu 04 Jul 2024 11:17:23 +0000
asID:                     199680
IP address blocks:        2a05:dfc7:9000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:56:1e:13:ab:bf:bb:e3:fa:78:37:eb:ad:1f:4e:be:15:03:78:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:23 2023 GMT
            Not After : Jul  4 11:17:23 2024 GMT
        Subject: CN=424C96BA47A0FF6F5646B3A984B4D07E084F4822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:30:78:6f:f6:a4:f7:e7:b1:33:33:5d:4b:
                    a0:76:75:8d:5b:4a:0b:63:90:f6:75:3b:0c:a3:48:
                    05:6e:0b:c5:24:eb:d0:05:40:ba:0b:08:19:c4:6b:
                    10:0a:2b:71:00:09:e9:1c:ac:df:45:b5:6f:95:2c:
                    f2:c0:a0:18:dc:5e:3b:67:7b:55:e6:30:f1:1d:da:
                    14:6e:63:ee:1d:2d:2b:04:a9:51:aa:9b:da:57:26:
                    1f:e2:0a:66:63:4a:99:75:b4:c0:30:20:d7:8f:68:
                    29:a9:dc:77:ae:ae:12:4a:e6:08:a9:68:c9:b3:ba:
                    17:57:23:58:06:12:be:64:b2:bc:83:4e:17:ae:34:
                    8f:d9:85:e3:80:95:2a:c3:4c:47:6c:fb:d5:71:21:
                    c9:5f:b9:15:c3:1a:4e:18:54:da:fd:5c:8c:08:95:
                    ea:fa:15:c2:d1:15:49:9e:98:ed:0f:75:4f:06:a8:
                    5c:4c:ad:2a:93:2e:a2:7e:0a:dd:56:c0:65:e5:4d:
                    18:0a:78:8f:65:01:07:ee:e6:ca:79:14:16:8f:b9:
                    38:06:9d:05:db:ae:80:a5:b1:71:a1:15:c6:51:b1:
                    1e:1a:60:76:4a:92:63:91:36:7c:9c:e7:b0:40:40:
                    82:ed:1c:b2:95:9f:36:3c:67:35:f2:0e:76:3b:b5:
                    d2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:96:BA:47:A0:FF:6F:56:46:B3:A9:84:B4:D0:7E:08:4F:48:22
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS199680.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9000::/39

    Signature Algorithm: sha256WithRSAEncryption
         a4:6a:e6:2e:f3:b8:c2:68:6c:0b:2d:c2:18:2c:71:16:03:69:
         da:48:06:91:7e:60:fe:49:ee:ef:55:45:a1:bc:a1:70:f3:e9:
         43:9e:0b:18:38:02:b2:9d:19:b5:6e:06:32:4e:ee:a7:ba:24:
         fe:1c:3b:a7:f9:1b:cd:20:c2:65:47:a8:d9:3e:12:eb:52:33:
         05:8e:1c:e4:18:66:8c:96:fd:54:ba:6f:2f:c7:de:d5:92:cf:
         f2:4d:42:e8:04:f3:f1:a9:e7:7a:6d:bf:86:58:d0:45:95:ef:
         b6:35:6e:15:b4:cf:c1:e7:41:d2:ae:ad:1d:4c:c0:cf:a3:f0:
         fb:da:b9:0c:99:e7:af:93:28:7b:54:47:6d:ab:ad:c1:a8:5d:
         76:ec:a5:bb:16:fb:97:3c:03:a8:e2:e7:95:ad:7c:7f:0a:86:
         99:b2:f7:c3:f4:91:be:6c:93:12:4c:44:38:68:d5:98:37:ae:
         f2:32:44:3b:23:f2:44:7c:28:c8:0c:08:b6:ed:20:1d:17:66:
         ff:7a:35:de:a7:b6:e2:06:40:4c:fa:ba:d8:d2:3d:bc:d2:72:
         7b:78:47:70:4b:0e:20:a3:31:b1:3b:1f:8b:20:39:57:e4:52:
         43:e3:66:07:8e:d3:d2:13:8e:ba:2f:dc:97:59:fd:f5:83:a6:
         4f:d8:bf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----