Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS199763.roa
File:                     AS199763.roa (raw, json)
Hash identifier:          CU70uNMEbWJNxErei3Yeqx+vlUfl0kMHmOOBeMEFIwE=
Subject key identifier:   B3:9D:0E:38:9A:03:DB:81:DE:B3:CF:4F:6D:B1:ED:C6:ED:36:30:41
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0FD9ED800908A922CF331D51515FF755E20CFCC9
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS199763.roa
Signing time:             Thu 06 Jul 2023 11:17:21 +0000
ROA not before:           Thu 06 Jul 2023 11:12:21 +0000
ROA not after:            Thu 04 Jul 2024 11:17:21 +0000
asID:                     199763
IP address blocks:        2a06:1287:cc00::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d9:ed:80:09:08:a9:22:cf:33:1d:51:51:5f:f7:55:e2:0c:fc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:21 2023 GMT
            Not After : Jul  4 11:17:21 2024 GMT
        Subject: CN=B39D0E389A03DB81DEB3CF4F6DB1EDC6ED363041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:f7:49:c3:b7:43:64:35:9f:61:72:1d:0e:
                    a4:fd:26:99:e0:46:fc:be:55:e3:f5:2c:c9:c8:a0:
                    eb:dc:cb:31:7d:b9:a2:a4:38:f2:75:1b:2a:9c:ff:
                    d7:98:c0:b9:aa:51:97:e5:c7:0b:27:75:a3:ce:30:
                    df:69:20:af:2c:00:64:1d:bb:b0:8c:58:a1:7f:cc:
                    a7:90:1a:54:f8:5d:a8:2b:4d:6e:d5:9b:85:61:be:
                    92:ee:5c:93:a1:fc:5c:e4:8f:41:92:3f:c0:6b:30:
                    24:9c:75:c4:90:d6:de:41:dc:c7:ef:66:51:6a:4b:
                    91:61:db:93:7d:9f:f1:de:17:11:9c:c5:0b:d1:16:
                    f8:9a:b2:32:5a:b3:a5:69:c4:33:0a:4d:b6:84:5f:
                    f5:b3:ad:cc:03:0f:a3:49:ef:90:d0:af:8c:0c:e7:
                    c0:00:cb:13:68:c4:69:07:c5:a9:c9:5b:ec:a9:5c:
                    71:85:a7:73:e8:ec:29:dc:ab:56:2a:fb:75:3a:fb:
                    12:9b:1d:c5:95:74:df:dc:96:1b:a1:47:c3:e5:30:
                    54:24:d5:8f:95:bf:2d:e3:c8:96:b8:05:eb:25:6a:
                    1e:40:33:e0:f0:7d:ff:98:c0:23:43:bd:b5:1e:0b:
                    b7:44:8e:71:81:23:ce:6d:be:8d:21:94:8c:0c:c9:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9D:0E:38:9A:03:DB:81:DE:B3:CF:4F:6D:B1:ED:C6:ED:36:30:41
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS199763.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:cc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:83:e9:03:c3:e0:a0:54:f2:35:17:82:ee:80:92:e7:f0:86:
         67:1b:2b:d2:93:ea:45:e0:a2:ce:4d:f1:ff:aa:ff:dd:75:02:
         c3:e0:2d:47:c1:a6:2b:e6:91:80:15:39:f8:dd:51:38:b6:f3:
         3c:1f:ce:f2:fb:4c:68:db:97:b3:8c:64:7b:d5:58:95:e0:42:
         e8:3e:12:df:af:88:f2:4f:41:2d:3b:a2:0e:56:ba:4a:29:19:
         f5:53:32:ef:43:5b:1a:bf:0b:d6:a1:cb:b8:05:20:db:06:29:
         6d:56:20:a0:2e:9a:9d:6f:03:28:69:c1:07:19:63:dc:f4:0c:
         5c:fe:5e:dd:99:0f:82:32:7e:2c:ac:4d:d5:9d:ba:cf:72:00:
         c0:3f:d7:6b:0a:24:bc:db:1d:2e:76:a7:88:86:73:75:91:66:
         25:1f:25:98:07:10:4d:92:7e:67:53:00:d4:dd:53:44:b2:ce:
         d6:e8:96:91:c2:81:7a:23:1f:21:d7:b2:e7:b9:77:a1:09:8d:
         95:49:da:62:86:59:7c:97:04:58:2e:f8:24:d4:8e:4c:2c:1e:
         e3:31:23:b8:14:50:c7:50:cc:73:13:6b:49:91:5a:dc:f0:3a:
         c7:76:e9:57:5f:a3:67:35:5d:27:95:1c:89:94:bc:9f:ae:2a:
         45:0a:f4:e0
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUD9ntgAkIqSLPMx1RUV/3VeIM/MkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MDYxMTEyMjFaFw0yNDA3MDQxMTE3MjFaMDMxMTAvBgNV
BAMTKEIzOUQwRTM4OUEwM0RCODFERUIzQ0Y0RjZEQjFFREM2RUQzNjMwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUPdJw7dDZDWfYXIdDqT9Jpng
Rvy+VeP1LMnIoOvcyzF9uaKkOPJ1Gyqc/9eYwLmqUZflxwsndaPOMN9pIK8sAGQd
u7CMWKF/zKeQGlT4XagrTW7Vm4VhvpLuXJOh/Fzkj0GSP8BrMCScdcSQ1t5B3Mfv
ZlFqS5Fh25N9n/HeFxGcxQvRFviasjJas6VpxDMKTbaEX/WzrcwDD6NJ75DQr4wM
58AAyxNoxGkHxanJW+ypXHGFp3Po7Cncq1Yq+3U6+xKbHcWVdN/clhuhR8PlMFQk
1Y+Vvy3jyJa4Beslah5AM+Dwff+YwCNDvbUeC7dEjnGBI85tvo0hlIwMyfIxAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUs50OOJoD24Hes89PbbHtxu02MEEwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMTk5NzYzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgYSh8wwDQYJKoZIhvcN
AQELBQADggEBAJCD6QPD4KBU8jUXgu6AkufwhmcbK9KT6kXgos5N8f+q/911AsPg
LUfBpivmkYAVOfjdUTi28zwfzvL7TGjbl7OMZHvVWJXgQug+Et+viPJPQS07og5W
ukopGfVTMu9DWxq/C9ahy7gFINsGKW1WIKAump1vAyhpwQcZY9z0DFz+Xt2ZD4Iy
fiysTdWdus9yAMA/12sKJLzbHS52p4iGc3WRZiUfJZgHEE2SfmdTANTdU0Syztbo
lpHCgXojHyHXsue5d6EJjZVJ2mKGWXyXBFgu+CTUjkwsHuMxI7gUUMdQzHMTa0mR
WtzwOsd26Vdfo2c1XSeVHImUvJ+uKkUK9OA=
-----END CERTIFICATE-----