Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS200160.roa
File:                     AS200160.roa (raw, json)
Hash identifier:          6l74qbJk6sGZdeX9wEwkKfKkTJcN7s13L9RWXFSzU10=
Subject key identifier:   CD:54:6D:AB:CC:83:29:BD:7D:16:60:7A:5E:C4:AE:0F:54:C7:92:6A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       31E52FD756FC4018768875C147FB0118C095CC48
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS200160.roa
Signing time:             Thu 06 Jul 2023 11:17:31 +0000
ROA not before:           Thu 06 Jul 2023 11:12:31 +0000
ROA not after:            Thu 04 Jul 2024 11:17:31 +0000
asID:                     200160
IP address blocks:        2a05:dfc7:6500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e5:2f:d7:56:fc:40:18:76:88:75:c1:47:fb:01:18:c0:95:cc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:31 2023 GMT
            Not After : Jul  4 11:17:31 2024 GMT
        Subject: CN=CD546DABCC8329BD7D16607A5EC4AE0F54C7926A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d7:99:de:9b:82:42:84:ba:2f:1f:a8:22:06:
                    11:6c:f0:0f:45:6b:7e:70:65:5e:14:a4:a3:33:23:
                    c3:37:b6:64:b6:a4:70:df:1a:12:9d:eb:cd:57:70:
                    43:27:c4:44:76:d9:e3:6e:70:15:6d:2a:96:2a:3c:
                    11:d6:18:e6:a2:f0:95:fb:6f:7d:51:cb:34:8e:4c:
                    88:88:6f:1c:f7:9a:cd:83:cd:5a:e1:96:5a:75:10:
                    bc:46:58:78:3f:f6:0d:12:ee:11:6e:b9:4d:e2:cf:
                    92:36:89:da:9a:44:b3:a3:29:49:d9:2e:65:93:75:
                    47:92:0a:f6:fd:13:c2:0d:7d:d5:30:8f:8a:ec:c3:
                    45:3d:0b:02:a3:72:65:3d:a3:49:23:05:62:4a:44:
                    e4:1e:72:5a:59:7a:a7:93:a7:a1:e4:d8:68:73:ab:
                    60:6e:3a:33:55:c6:91:1b:a6:c5:74:16:6e:23:ba:
                    e2:9c:6b:18:54:cd:08:c2:37:3c:6e:b7:e0:9a:6b:
                    7b:a7:91:9d:a3:cf:4f:cd:4a:1b:74:27:20:50:8e:
                    fc:36:a8:58:09:6a:a6:15:52:fe:e3:8d:58:e3:c8:
                    04:5b:4e:3a:b2:54:75:58:13:4c:d5:0c:7d:2e:d0:
                    21:92:ac:9d:a6:88:67:f7:9b:dc:76:e9:05:ad:f2:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:6D:AB:CC:83:29:BD:7D:16:60:7A:5E:C4:AE:0F:54:C7:92:6A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS200160.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:07:0d:8d:67:cf:ee:65:61:9e:62:8c:af:3d:26:5a:8b:74:
         4d:bf:1b:d8:8a:19:97:8f:95:ee:9a:16:41:0b:38:59:07:ca:
         62:ac:65:63:f8:f6:b9:ca:e2:f6:5d:69:9c:13:30:2e:e6:d2:
         d9:48:a1:d9:e0:b5:5b:16:0b:64:9c:a2:fa:85:c2:66:44:50:
         fa:1d:55:97:b9:9f:4d:04:e9:f3:3e:1d:6c:56:9d:0c:20:2c:
         89:49:2f:1a:df:25:32:32:69:11:46:0d:d9:d4:95:b2:79:b2:
         d9:1c:5d:03:70:a7:eb:1f:42:25:ed:54:ee:e4:f7:20:e7:be:
         88:56:a9:ed:e0:f4:25:3e:7a:cf:b1:44:42:ac:3e:63:a7:9f:
         5e:3e:74:48:0e:85:f1:10:bd:92:de:18:9e:e7:55:09:66:30:
         03:13:e5:85:52:86:23:0b:29:f6:7a:42:86:44:d0:e6:83:63:
         b6:ee:1d:32:55:9a:9d:00:ae:0e:69:c6:9b:4f:6a:eb:39:c3:
         6b:31:18:4e:25:93:eb:80:64:dd:e6:d2:9c:5a:6e:5a:71:ec:
         62:9b:e1:a5:e1:23:64:51:9a:a7:75:6f:33:55:bc:85:43:b9:
         08:24:14:ed:2a:5e:9c:2c:ea:03:87:f0:fd:f3:ca:16:35:42:
         49:fb:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----