Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS200897.roa
File:                     AS200897.roa (raw, json)
Hash identifier:          eD4BfOQoMfK31Bim18KN1oIq7YTUNdkVefGr/FUeB7w=
Subject key identifier:   7D:AC:FD:8C:7C:61:50:43:97:EC:BC:1F:CF:E4:4D:CE:76:29:C2:DB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       25402EF87AE8AF7C9CDA2B833D2BD4D9A9A33475
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS200897.roa
Signing time:             Thu 06 Jul 2023 11:17:32 +0000
ROA not before:           Thu 06 Jul 2023 11:12:32 +0000
ROA not after:            Thu 04 Jul 2024 11:17:32 +0000
asID:                     200897
IP address blocks:        2a05:dfc7:8::/48 maxlen: 48
                          2a05:dfc7:100::/43 maxlen: 48
                          2a05:dfc7:2900::/43 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:40:2e:f8:7a:e8:af:7c:9c:da:2b:83:3d:2b:d4:d9:a9:a3:34:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:32 2023 GMT
            Not After : Jul  4 11:17:32 2024 GMT
        Subject: CN=7DACFD8C7C61504397ECBC1FCFE44DCE7629C2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:b1:6e:0f:d2:77:8e:8f:7b:be:5c:52:96:
                    d8:fb:96:cb:35:c1:e4:03:24:aa:ef:ab:da:a5:21:
                    19:24:bd:00:bd:96:f9:c6:a5:23:d8:ac:c7:5f:85:
                    97:b0:e8:35:f9:2c:e1:ab:07:9e:43:8f:1c:6c:4f:
                    08:e1:ac:8d:09:10:8b:d1:e4:fb:52:58:7d:dd:f0:
                    4b:66:90:d8:62:32:1b:35:8a:6a:00:a4:9c:54:f0:
                    da:40:52:29:74:35:de:db:e1:05:63:25:00:d9:d5:
                    ef:4b:86:4e:7d:40:7a:a4:9f:60:e4:93:81:fe:68:
                    4c:e2:27:c4:b3:e1:1b:55:0d:16:19:de:77:07:79:
                    fe:3e:bc:3b:83:62:b3:0b:e2:83:d1:85:ea:50:96:
                    1d:5d:36:cf:15:66:4f:12:f3:a5:3f:2c:6f:88:35:
                    56:35:f5:13:95:21:c3:41:1d:da:79:f2:20:7a:6d:
                    3e:68:cb:d3:1a:25:70:cb:dc:9f:b7:ca:7b:cd:09:
                    7f:ed:2a:6a:9f:97:a1:32:92:28:ee:07:f7:0c:a4:
                    73:36:31:71:3b:6a:96:8d:c9:07:24:64:d8:bf:b9:
                    dd:69:67:9c:70:13:1c:30:cb:46:e1:71:6c:6c:42:
                    b5:af:e0:ae:6a:ca:cb:72:69:6c:53:71:a5:cf:98:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:FD:8C:7C:61:50:43:97:EC:BC:1F:CF:E4:4D:CE:76:29:C2:DB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS200897.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8::/48
                  2a05:dfc7:100::/43
                  2a05:dfc7:2900::/43

    Signature Algorithm: sha256WithRSAEncryption
         02:b1:05:f6:72:5a:c6:18:c7:7a:89:db:d1:bd:e0:0d:86:f5:
         d7:e2:47:3a:f8:73:f9:91:60:44:b9:02:7f:37:4a:22:ec:a8:
         9b:0d:fb:da:0a:57:db:ca:4a:18:88:8a:73:53:ee:52:ea:22:
         2a:a5:0b:08:f2:ff:dc:cd:0f:8c:bb:3c:ea:84:38:0c:9c:a7:
         8d:41:75:34:09:6c:c5:45:b1:55:c9:46:5b:c8:21:9b:20:d3:
         7f:c2:45:c3:c2:f7:d6:6d:d2:31:69:73:1f:5c:76:e4:f6:3e:
         cf:b3:29:70:b0:68:c8:ea:bc:ba:47:a4:91:ab:bf:d9:c7:df:
         33:25:00:9a:2b:51:8e:2a:7f:77:8a:ae:86:9a:c8:48:63:0c:
         f4:66:56:f2:07:ac:e1:4e:c3:1c:e4:9a:de:6d:98:10:34:9d:
         c3:08:ba:9f:bb:ac:7d:d3:b7:6d:39:68:f8:59:b2:69:27:33:
         db:ed:bc:70:a8:30:f2:0b:15:fb:2f:8e:af:f4:75:07:78:87:
         d7:3b:86:fb:fd:71:b4:8d:86:a5:54:fb:de:85:dc:49:e3:ca:
         3c:b9:b5:da:2b:ad:e5:65:05:83:4d:f9:25:52:4c:52:46:4a:
         ad:94:cb:83:45:69:db:55:2c:56:f3:d4:e7:60:c2:76:9a:ed:
         87:d0:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----