Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS200579.roa
File:                     AS200579.roa (raw, json)
Hash identifier:          wlULjfUcgZd6pbPCkUKyUfkLdthlzQ8F4+TOc1+HuKI=
Subject key identifier:   E9:A7:EB:08:C5:C8:7F:21:E9:19:88:D5:0A:2E:CC:A4:46:58:0B:CB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       165E0AAE7737B7AA0A933AFEFEF672DB9F839467
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS200579.roa
Signing time:             Thu 06 Jul 2023 11:17:27 +0000
ROA not before:           Thu 06 Jul 2023 11:12:27 +0000
ROA not after:            Thu 04 Jul 2024 11:17:27 +0000
asID:                     200579
IP address blocks:        2a06:1287:900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5e:0a:ae:77:37:b7:aa:0a:93:3a:fe:fe:f6:72:db:9f:83:94:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:27 2023 GMT
            Not After : Jul  4 11:17:27 2024 GMT
        Subject: CN=E9A7EB08C5C87F21E91988D50A2ECCA446580BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:5b:53:f3:12:d0:cf:6c:ce:e3:04:e9:83:
                    de:45:64:95:e0:50:5f:28:0e:58:74:00:70:c6:c9:
                    0a:4f:1e:da:02:74:15:0f:c3:f1:55:85:c1:1d:b0:
                    ec:0a:55:7e:33:44:5e:56:01:b5:b2:b9:7e:0e:e8:
                    e2:8d:b5:08:08:d4:5f:93:98:96:22:fa:8a:58:a6:
                    9d:bc:f2:96:b3:03:7c:a3:ec:23:3f:88:f9:30:12:
                    35:8f:0c:d8:88:af:8c:7d:2b:bf:ab:20:0b:e7:59:
                    d3:4b:12:28:28:c4:b7:ba:7c:61:7a:30:e6:98:1c:
                    c3:50:6b:3f:1f:eb:5c:05:0e:0b:ec:08:ca:91:5e:
                    14:e0:cb:a1:16:94:00:09:bf:a9:40:eb:45:07:ef:
                    c1:db:09:c9:38:8f:3a:94:06:c8:9c:58:4b:27:00:
                    da:d3:8b:1b:a3:f4:b5:53:21:0a:6b:77:dc:86:72:
                    25:eb:03:3c:d9:24:01:05:89:a8:09:9e:a2:91:e0:
                    38:12:f5:bd:8a:6a:75:95:c2:f2:56:d3:b5:0a:f2:
                    b1:9b:da:ca:4b:5c:35:35:6d:82:16:69:b5:0d:65:
                    02:7a:85:bf:60:d6:1b:0f:86:93:25:ae:d4:03:89:
                    68:80:a4:3a:52:94:56:6a:44:60:bf:3e:fd:3e:ab:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A7:EB:08:C5:C8:7F:21:E9:19:88:D5:0A:2E:CC:A4:46:58:0B:CB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS200579.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:20:4f:e6:b1:cc:28:2e:38:8d:1f:49:31:81:04:f9:3f:71:
         8e:3e:8c:0c:bf:01:ef:8b:e1:82:63:e4:f1:86:cf:49:cd:76:
         ac:96:f9:e4:5c:92:8f:45:d2:ff:00:17:3b:dd:b5:f6:b5:ac:
         20:7e:fe:20:be:32:63:3e:7a:16:c1:f6:d0:a4:13:c7:0c:a2:
         2f:9b:19:c0:7c:98:60:4d:8e:09:82:f0:e9:bb:e3:90:e8:fa:
         4b:c0:96:7d:e7:a7:ff:d9:96:14:79:a0:2c:7f:a0:7a:96:a0:
         42:50:cb:cb:b4:45:9e:86:3c:5f:1e:36:74:36:a0:26:44:88:
         ba:94:2e:5c:1e:74:b8:ac:11:e3:20:62:88:a7:38:9d:12:98:
         60:3b:64:65:20:6d:2d:d0:68:cd:db:73:59:21:2a:45:31:34:
         71:09:4a:26:9e:28:0e:c0:17:12:50:db:d1:8d:84:b5:bc:f9:
         84:55:f8:13:ef:d1:4c:ec:25:41:33:95:a7:68:d3:62:25:6d:
         27:90:74:a7:90:36:8a:4c:27:01:5d:8a:a3:34:6d:36:4b:ca:
         7b:e5:6e:c5:de:62:3f:7d:47:b0:fa:3d:fc:cf:8d:6c:59:cb:
         ca:cb:e5:30:2d:e8:ce:a3:43:e6:18:96:d3:43:6a:df:f4:f9:
         6f:a0:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----