Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS199762.roa
File:                     AS199762.roa (raw, json)
Hash identifier:          s7nG7rGJJL2e3SjPQqmcx7VfWuCsdmK1HqlJrfiEtLA=
Subject key identifier:   05:81:C9:67:EC:CA:88:F6:F0:69:C2:18:91:1C:FE:FB:5C:CB:C2:70
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       337FF0B809A66AC33B72666B7DDF46449A23FDCA
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS199762.roa
Signing time:             Mon 16 Oct 2023 08:16:27 +0000
ROA not before:           Mon 16 Oct 2023 08:11:27 +0000
ROA not after:            Mon 14 Oct 2024 08:16:27 +0000
asID:                     199762
IP address blocks:        2a05:dfc7:9c00::/38 maxlen: 48
                          2a06:1287:5400::/39 maxlen: 48
                          2a06:1287:5410::/44 maxlen: 44
                          2a06:1287:5420::/44 maxlen: 44
                          2a06:1287:5430::/44 maxlen: 44
                          2a06:1287:5440::/44 maxlen: 44
                          2a06:1287:5450::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7f:f0:b8:09:a6:6a:c3:3b:72:66:6b:7d:df:46:44:9a:23:fd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct 16 08:11:27 2023 GMT
            Not After : Oct 14 08:16:27 2024 GMT
        Subject: CN=0581C967ECCA88F6F069C218911CFEFB5CCBC270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b6:62:62:c3:c6:50:a6:a9:b6:5f:aa:53:33:
                    69:5c:ce:fb:3c:eb:e2:55:93:68:16:1f:44:cd:95:
                    c3:79:22:c4:90:e9:68:76:31:16:84:9d:9d:9f:e2:
                    ff:f1:3b:3c:8c:54:28:1a:9d:63:db:40:64:fe:8c:
                    4b:17:94:61:fe:d0:df:9d:4f:b1:de:ed:de:d5:30:
                    75:91:b7:9d:cf:a8:c7:50:67:3a:43:94:91:e9:2f:
                    3f:2a:0b:35:e2:2f:43:8c:8d:8f:6a:0b:e0:6c:25:
                    0e:21:06:b0:95:10:4c:00:9c:8f:b7:dc:27:f3:0f:
                    75:81:31:07:6d:89:42:fc:f5:21:be:86:08:54:c0:
                    06:a1:40:31:0d:cf:ad:33:a0:db:23:bd:36:dc:85:
                    f7:0b:dc:d5:d6:8a:56:a6:2d:e6:cd:c0:24:91:f2:
                    ce:6e:ef:93:12:5d:ea:d7:e5:bb:94:65:c4:03:e9:
                    73:13:64:1e:7c:8e:63:11:76:bf:b9:c3:9b:2f:27:
                    21:2c:a7:a5:7f:4f:48:b6:28:c1:6f:b5:6e:54:dc:
                    8a:4c:4a:62:87:7d:94:8c:4d:f3:8c:ea:45:4b:0d:
                    e3:01:fb:31:da:10:10:ea:70:91:02:b6:7e:11:9a:
                    db:d4:15:f9:cf:fd:06:84:f8:7b:ae:42:08:b3:d5:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:81:C9:67:EC:CA:88:F6:F0:69:C2:18:91:1C:FE:FB:5C:CB:C2:70
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS199762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9c00::/38
                  2a06:1287:5400::/39

    Signature Algorithm: sha256WithRSAEncryption
         66:da:fe:01:31:c9:f2:46:a4:6d:3b:be:47:95:49:3f:13:66:
         04:ec:4e:9a:b8:6c:c2:56:b6:e9:eb:45:c8:a9:e2:dc:b6:01:
         d2:18:e1:16:64:84:bf:13:e9:de:56:4e:d7:a8:19:fb:94:46:
         63:c4:60:83:e1:4e:c9:24:16:e7:85:ef:5d:6e:7e:e5:e7:b7:
         12:81:f8:fe:fc:37:dc:44:a2:c8:d8:a8:6d:2a:a6:86:fc:34:
         b9:1e:53:be:50:10:10:f3:86:da:ed:ca:36:f3:ef:2c:10:a4:
         1f:08:3c:fe:fc:04:e2:51:ed:9e:4f:92:10:f9:de:71:5c:db:
         56:d6:e5:f5:b4:d5:ed:3f:06:d3:f7:c8:f3:53:de:b7:00:80:
         22:8b:5d:77:01:9a:1f:ed:08:b7:2e:6f:8c:7a:3a:a2:b2:3a:
         95:b5:c9:ec:9e:5b:e1:f9:f2:d3:44:ef:19:46:b5:73:d3:f5:
         55:97:84:73:2e:85:b2:1e:4b:1e:22:84:22:8f:84:17:2c:cd:
         4d:52:78:69:36:bf:77:aa:73:97:da:f8:83:cb:08:0d:5c:61:
         73:53:d2:60:bc:10:f4:b1:cd:c4:78:8f:52:ab:f6:4c:c5:c4:
         8d:a1:a7:c6:3b:10:97:c4:50:a5:b7:f2:9f:2f:3c:f1:39:fe:
         53:66:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----