Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS202338.roa
File:                     AS202338.roa (raw, json)
Hash identifier:          OCHPN+PObkhZYKjaOanU+x+S1Ksi8vA314bjgb9hJ7E=
Subject key identifier:   8F:9A:C5:F4:B7:67:25:AC:64:D4:73:FF:6D:6D:73:03:B4:48:00:E6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3A33667E4BE2AEF47EF15214F82261E9009D61D1
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS202338.roa
Signing time:             Thu 06 Jul 2023 11:17:33 +0000
ROA not before:           Thu 06 Jul 2023 11:12:33 +0000
ROA not after:            Thu 04 Jul 2024 11:17:33 +0000
asID:                     202338
IP address blocks:        2a05:dfc7:6900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:33:66:7e:4b:e2:ae:f4:7e:f1:52:14:f8:22:61:e9:00:9d:61:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:33 2023 GMT
            Not After : Jul  4 11:17:33 2024 GMT
        Subject: CN=8F9AC5F4B76725AC64D473FF6D6D7303B44800E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:33:1d:1c:3c:57:1e:6a:6c:48:cd:cc:b6:
                    b1:6b:16:73:b2:84:e8:d5:f3:4d:65:e6:64:be:9f:
                    cc:37:75:21:ad:28:0b:b7:c3:49:9f:01:ca:51:76:
                    e4:50:4d:4d:18:56:ed:b9:d3:95:c0:eb:dd:07:f4:
                    b9:88:49:8f:78:42:f5:fd:3f:48:f0:d9:fc:25:c8:
                    b0:0e:3f:ea:e4:da:15:68:66:ba:ae:01:ff:e6:79:
                    da:cf:34:06:1b:46:d7:60:7e:be:2e:bb:1a:46:d8:
                    5a:94:66:5a:5c:7b:9a:df:d1:c1:13:88:a7:57:16:
                    78:3d:ea:22:31:4a:32:d9:ea:d0:9a:f5:49:bc:4c:
                    49:13:5a:51:24:e3:4d:2d:97:90:59:35:5b:e8:28:
                    f8:f2:24:d0:b5:7c:57:bc:7a:f5:03:fa:f6:79:23:
                    48:ab:ff:76:1b:b9:f4:5d:3b:b1:9a:f0:07:df:fa:
                    6f:58:85:0b:33:18:f7:57:d8:65:8e:45:7f:ba:6a:
                    0f:70:8d:9d:8f:cf:f6:d4:96:b3:85:0f:4d:c7:df:
                    03:07:d8:40:8e:25:d2:d2:f3:69:c3:6e:ae:7e:13:
                    01:c1:af:ce:73:56:a5:62:30:1b:70:7f:92:ce:20:
                    46:8c:10:22:42:cd:c8:31:42:ac:0e:60:62:f7:53:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9A:C5:F4:B7:67:25:AC:64:D4:73:FF:6D:6D:73:03:B4:48:00:E6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS202338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6900::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:83:60:f0:54:7f:5d:3d:6b:f9:d4:ea:ed:ea:bf:fd:15:3b:
         a1:a7:07:93:f5:e1:36:df:4d:7b:74:d1:82:8c:36:7c:28:20:
         a7:b7:da:e4:ae:2c:4d:c4:2f:fc:45:ef:a7:9d:d5:21:56:f7:
         fe:ce:6d:d5:97:91:59:f1:2a:b7:35:55:15:4d:ac:02:0e:02:
         ec:44:2b:08:f6:e1:99:5e:29:ad:b0:88:0d:c3:70:24:39:02:
         87:1e:45:cf:29:ae:f3:f0:69:59:da:77:73:5e:4f:e6:ba:cf:
         f5:34:d0:d0:0c:c8:d2:1b:47:d7:14:0c:46:17:5c:3b:f6:0f:
         d3:d3:ee:b9:42:f9:a1:48:0b:94:3d:54:cc:8d:9f:7e:31:e8:
         1c:10:62:db:75:90:be:e5:6f:ff:84:fb:22:c0:d2:fd:bc:ff:
         c8:a5:19:a6:1e:94:90:74:df:23:53:89:d8:fd:40:69:42:17:
         6a:4c:63:1a:c8:37:52:dd:10:64:06:68:65:18:5c:a7:03:88:
         cd:6f:21:97:f9:f7:ae:31:6d:92:30:b2:78:6b:04:ad:ad:92:
         e3:54:7b:c3:94:70:d3:2c:7d:41:e7:f5:8f:4d:92:38:a7:30:
         6a:ad:b0:c5:f3:8d:14:dd:3b:ab:0c:01:1c:3b:06:dc:3a:e4:
         4f:82:2d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----