Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS200952.roa
File:                     AS200952.roa (raw, json)
Hash identifier:          yEXnyAIFqzuqkDQZwFZdo2RcnPZitpWBxxXQzSCRkAQ=
Subject key identifier:   40:6C:D6:E1:49:45:65:37:4A:E4:C8:59:F1:84:08:D4:E6:71:09:8D
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5954D0CE753A9E85BC0AD758ADC8197C10893479
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS200952.roa
Signing time:             Tue 11 Jul 2023 15:45:41 +0000
ROA not before:           Tue 11 Jul 2023 15:40:41 +0000
ROA not after:            Tue 09 Jul 2024 15:45:41 +0000
asID:                     200952
IP address blocks:        2a05:dfc7:2600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:54:d0:ce:75:3a:9e:85:bc:0a:d7:58:ad:c8:19:7c:10:89:34:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 11 15:40:41 2023 GMT
            Not After : Jul  9 15:45:41 2024 GMT
        Subject: CN=406CD6E1494565374AE4C859F18408D4E671098D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:2f:d9:30:02:57:e8:7e:c5:29:40:f8:f7:
                    2a:af:60:d3:62:99:80:e4:2b:eb:22:0b:58:67:72:
                    c0:49:8c:45:54:ab:54:4a:da:a7:01:cd:9c:3d:d1:
                    c5:40:a7:f9:41:09:72:ed:60:93:e9:1c:8b:69:a2:
                    19:4c:9a:ab:f4:40:b1:27:73:ec:a1:e8:c3:50:36:
                    05:da:23:6e:f3:5e:1b:81:7b:5b:37:9b:1e:49:4f:
                    05:d9:99:f1:5c:2b:ab:41:a9:34:5a:28:c9:f8:48:
                    d0:fb:64:1d:9a:fe:2d:d3:34:48:b4:22:42:db:57:
                    33:9c:35:bc:31:11:db:31:a9:a8:07:29:c1:f4:a3:
                    ce:52:a5:af:17:72:31:72:3c:01:cf:3b:88:76:0c:
                    d9:68:d6:67:65:83:bd:ad:34:88:8d:56:fa:32:48:
                    dd:04:a9:8a:62:f8:d4:5e:60:aa:df:9c:b5:94:86:
                    bf:97:ca:dd:0c:f5:7c:f8:f5:28:06:61:73:e6:b3:
                    6b:50:62:41:58:ba:e6:a6:fd:65:8c:9e:fb:ee:59:
                    ee:42:21:9a:1d:ed:b8:0d:ae:85:ff:cf:19:84:bc:
                    95:b9:3b:64:ac:8e:89:8a:8d:67:c6:93:26:96:41:
                    c3:3a:99:44:d0:53:cb:fa:5a:e9:0f:cf:48:5b:c7:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6C:D6:E1:49:45:65:37:4A:E4:C8:59:F1:84:08:D4:E6:71:09:8D
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS200952.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2600::/39

    Signature Algorithm: sha256WithRSAEncryption
         84:95:b5:58:56:a9:59:5e:85:83:1c:aa:a7:d7:21:bc:d4:a4:
         e6:fe:0f:7d:3b:18:9d:59:d6:0d:74:43:a3:18:42:8c:aa:e5:
         52:f6:d7:b2:df:22:55:85:20:4e:d3:b1:6a:45:4d:e4:b8:4d:
         fc:bd:47:b4:90:23:42:1a:b4:e4:b1:82:c3:aa:ed:0c:4e:30:
         4d:ac:f9:b5:47:df:c5:a1:df:e3:88:74:3e:90:90:c6:d7:0d:
         72:ca:06:ff:e1:27:c5:df:b1:d2:87:93:1d:c8:e0:22:c4:58:
         d7:86:93:45:3d:71:b0:07:df:62:8b:14:a8:74:5a:ee:fc:12:
         09:18:b6:15:b5:69:16:39:c4:d5:d7:2f:e0:5a:2c:24:ba:99:
         e0:4b:42:90:8e:0e:6c:3b:7c:52:98:d3:6a:de:81:9f:7f:d1:
         db:30:22:82:99:be:0a:30:29:31:e7:29:f0:8b:89:43:d6:b9:
         ea:1f:be:bb:4f:f6:a6:74:58:f0:80:62:cb:9f:84:b4:ee:15:
         df:65:40:2c:37:da:9d:e0:7b:5e:db:73:6c:72:36:52:db:d8:
         09:36:a2:d6:1a:2e:09:1c:d1:05:27:ad:ce:6a:1b:85:fa:11:
         6b:61:02:de:d2:e5:12:6b:f5:c5:2b:9d:d6:d6:e3:65:60:b6:
         6f:65:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----