Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS200993.roa
File:                     AS200993.roa (raw, json)
Hash identifier:          rYlp3tg9gpS7VcnFWoH0hmvqbmY0E1b4wVTGPCQCA7I=
Subject key identifier:   5B:3D:FF:69:6A:52:66:E0:DA:EB:92:B5:05:39:77:66:F8:E5:FE:C4
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1B896BF2C00C15C7EBB9B864A35A3B41266FCE82
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS200993.roa
Signing time:             Fri 14 Jul 2023 11:57:34 +0000
ROA not before:           Fri 14 Jul 2023 11:52:34 +0000
ROA not after:            Fri 12 Jul 2024 11:57:34 +0000
asID:                     200993
IP address blocks:        2a06:1287::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:89:6b:f2:c0:0c:15:c7:eb:b9:b8:64:a3:5a:3b:41:26:6f:ce:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 14 11:52:34 2023 GMT
            Not After : Jul 12 11:57:34 2024 GMT
        Subject: CN=5B3DFF696A5266E0DAEB92B505397766F8E5FEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:b8:ef:e6:09:e8:ab:58:4c:c2:31:40:f7:
                    14:69:2c:35:c9:f7:ad:fb:64:99:ac:e4:0e:85:90:
                    d8:86:1f:8b:a3:5a:05:95:ac:0c:2b:54:ce:68:e3:
                    f1:68:23:bb:66:7e:3e:1c:5d:0b:0c:42:0a:6c:2c:
                    f3:59:0e:4f:e3:63:ae:e1:68:87:b8:bd:40:91:2d:
                    f1:66:8c:f1:82:e0:12:f8:cb:5f:25:45:9a:78:78:
                    b6:30:47:46:e1:55:c7:04:38:b5:7e:2e:e4:1a:94:
                    26:98:a5:eb:7b:20:72:1c:f1:82:2c:e8:3c:d3:37:
                    e9:3d:a9:eb:a9:04:fc:de:a6:fa:a4:96:a0:73:19:
                    1c:1b:10:bf:97:fa:eb:6e:7c:43:64:2b:a8:56:1a:
                    5b:67:fe:bb:ae:2c:b0:8e:01:ac:76:6b:0c:39:f6:
                    71:dc:d4:1f:91:31:17:7e:41:73:d2:8c:4f:c2:e5:
                    13:83:bc:8c:67:ed:b1:c5:68:84:b5:10:18:fd:da:
                    60:5a:ee:64:cd:50:17:6f:13:8a:30:32:f9:18:a1:
                    7c:89:8c:a8:e1:1d:5b:6f:80:fb:28:e7:08:9b:8c:
                    84:41:5d:12:d5:83:30:9d:0b:a2:95:dc:bc:7e:d7:
                    42:59:a4:f0:02:be:7f:8d:7e:30:4e:ef:5f:32:5b:
                    1d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3D:FF:69:6A:52:66:E0:DA:EB:92:B5:05:39:77:66:F8:E5:FE:C4
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS200993.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287::/44

    Signature Algorithm: sha256WithRSAEncryption
         cc:61:7d:da:9a:0f:eb:4e:37:12:2c:ee:4a:e4:3c:10:c7:82:
         53:59:c6:2c:32:d4:0d:93:f1:c9:81:4d:e1:07:85:d9:2a:ee:
         83:88:37:0b:dc:ca:68:82:0d:07:45:f2:7c:e7:26:82:54:d9:
         57:89:91:8e:e3:80:2b:9b:ee:14:b8:82:c7:b2:87:39:a6:eb:
         84:69:2e:73:ec:04:5a:bc:df:46:33:07:56:00:79:2a:05:30:
         2d:c0:7f:14:39:3e:07:12:81:04:cd:4d:18:ec:85:eb:47:bd:
         55:59:bb:43:3f:69:67:82:eb:75:05:b3:e7:22:36:ad:04:88:
         2a:75:61:e4:aa:b5:17:af:8f:6f:af:be:54:32:1c:6b:45:b7:
         59:94:5b:8c:e3:e7:05:41:23:25:d3:5e:d1:62:c3:36:14:c7:
         a9:9b:f7:d0:da:78:f1:f1:1c:34:80:af:f0:91:ee:64:13:0f:
         2f:36:27:ec:f2:d2:d3:35:e7:83:01:f9:a9:82:d9:b7:a8:79:
         95:55:50:43:6f:1d:1f:74:9d:f0:e0:7f:02:eb:83:94:1d:a4:
         37:f5:b0:ff:77:89:1c:81:f0:be:51:18:ed:25:91:04:30:45:
         a3:3f:eb:5a:81:68:15:6d:19:a3:46:22:e4:8b:3a:1b:86:b8:
         2d:4d:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----