Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS201097.roa
File:                     AS201097.roa (raw, json)
Hash identifier:          4mpw/8NUPj0SQxJTAR5Z0LEvTixrATaO+r8mxlsAE6o=
Subject key identifier:   68:91:7B:84:94:C2:6B:F6:59:C4:4B:17:5E:EF:6F:C4:67:6E:2E:3E
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       57028D777846C31945A7F1ED3F64B951055FFF78
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS201097.roa
Signing time:             Thu 06 Jul 2023 11:17:33 +0000
ROA not before:           Thu 06 Jul 2023 11:12:33 +0000
ROA not after:            Thu 04 Jul 2024 11:17:33 +0000
asID:                     201097
IP address blocks:        2a06:1287:f800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:02:8d:77:78:46:c3:19:45:a7:f1:ed:3f:64:b9:51:05:5f:ff:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:33 2023 GMT
            Not After : Jul  4 11:17:33 2024 GMT
        Subject: CN=68917B8494C26BF659C44B175EEF6FC4676E2E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:07:e5:63:96:52:f3:4b:36:35:d9:9a:04:
                    fe:05:12:1e:7b:88:5a:a3:74:94:5b:e8:a1:9c:0c:
                    f3:66:db:75:02:c4:83:e0:ad:ed:6a:e3:aa:74:96:
                    4c:ca:e0:84:cf:ed:67:3e:60:2b:27:6d:ad:40:18:
                    6c:4a:e1:df:d9:6f:4e:a5:b9:0c:af:cc:fd:8a:cc:
                    f1:b2:a0:28:4f:22:f6:1e:2b:2f:c8:7f:9a:9a:d5:
                    01:ba:15:35:13:d7:8d:3e:87:71:ff:8d:15:be:80:
                    96:c3:58:7d:f9:42:15:57:d9:38:05:3c:eb:77:ce:
                    94:14:88:01:12:29:92:2c:de:30:8d:37:f3:8e:84:
                    55:8d:af:a5:ec:06:a4:6a:53:a0:23:b9:14:8f:5e:
                    ac:22:ec:67:f0:57:12:6b:5c:4d:30:90:b5:df:a7:
                    35:f7:70:2c:15:34:40:e6:76:fc:5e:10:08:46:67:
                    fe:5d:5d:4e:c9:ee:5c:06:10:60:6b:61:57:34:83:
                    c8:20:c8:bf:8b:f7:df:0b:55:3d:c9:ba:6e:f9:a4:
                    2d:8d:1f:e0:0b:2d:b1:66:fb:de:f9:bb:0f:47:4b:
                    3e:60:82:d2:9d:80:8a:a2:ab:4e:d4:69:ca:46:1d:
                    03:86:67:31:b7:8c:1b:f5:8b:c2:8e:ed:7e:97:5e:
                    20:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:91:7B:84:94:C2:6B:F6:59:C4:4B:17:5E:EF:6F:C4:67:6E:2E:3E
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS201097.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:f800::/39

    Signature Algorithm: sha256WithRSAEncryption
         55:f9:4e:90:41:ec:0a:11:d3:af:7e:04:3f:67:f6:e3:65:ca:
         7b:75:76:0a:bc:b4:c9:b6:fa:42:e4:f2:02:f4:18:e8:20:3a:
         3b:9d:c4:37:10:12:0b:db:26:79:08:72:2c:3b:6c:76:e6:8b:
         0c:8e:c8:f7:1e:7d:50:b0:5a:17:fb:8b:5b:2d:bc:ef:f7:38:
         82:89:00:00:51:0e:69:11:df:fb:57:4e:32:5f:83:10:b6:23:
         4c:71:25:82:8f:b6:8f:e4:d4:48:02:9f:dd:82:0b:49:a3:ea:
         7b:65:dc:99:1e:13:2a:b1:ab:70:d8:83:0e:58:e8:4d:c5:be:
         88:de:f6:d8:a6:76:98:8f:62:0f:23:88:54:5b:aa:f3:ea:8a:
         83:85:95:d7:4d:1f:b6:33:36:ac:30:26:8f:cc:27:21:5d:91:
         fe:8d:c1:66:bc:83:a2:77:b6:4d:7b:53:46:46:c7:a7:ea:53:
         88:bb:e2:55:1a:24:47:43:a6:6c:2e:0f:01:f3:46:2c:e6:5f:
         1c:f7:c5:6b:d4:7e:e3:f3:93:1a:b2:e4:c0:67:ad:2d:47:e2:
         98:85:14:f9:8d:78:87:50:81:01:52:3c:73:60:a5:e6:ba:28:
         06:0b:14:d6:be:ea:30:7d:35:da:ec:a4:80:b3:1b:44:20:71:
         85:3f:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----