Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS202685.roa
File:                     AS202685.roa (raw, json)
Hash identifier:          iY9uFrW4gBvCCq16ap7nwdctRVI2Kk8/JS7ueStcvD8=
Subject key identifier:   20:C6:D3:4D:A2:43:85:AC:F4:90:98:58:07:78:9C:EE:DD:B5:7E:59
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       33A0FF5DA46F0689F99CAD07DDF76DDF723E68A5
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS202685.roa
Signing time:             Wed 16 Aug 2023 06:51:54 +0000
ROA not before:           Wed 16 Aug 2023 06:46:54 +0000
ROA not after:            Wed 14 Aug 2024 06:51:54 +0000
asID:                     202685
IP address blocks:        2a05:dfc7:4000::/39 maxlen: 39
                          2a06:1287:d000::/37 maxlen: 48
                          2a06:1287:e800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a0:ff:5d:a4:6f:06:89:f9:9c:ad:07:dd:f7:6d:df:72:3e:68:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug 16 06:46:54 2023 GMT
            Not After : Aug 14 06:51:54 2024 GMT
        Subject: CN=20C6D34DA24385ACF490985807789CEEDDB57E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:8d:45:16:78:41:70:ce:45:6e:24:90:37:
                    50:d9:23:f4:98:59:16:b8:d8:df:97:a3:98:c2:5c:
                    54:87:32:17:57:40:06:ab:01:58:2c:e4:8e:ff:a4:
                    81:4e:cc:4f:02:24:ae:50:48:94:c0:33:79:c8:b0:
                    52:2d:81:5a:21:d9:cf:37:b7:81:bb:a6:a6:a0:b1:
                    7c:fe:95:ad:99:70:f0:49:ca:f1:5c:67:92:cb:7c:
                    58:c2:10:3b:73:b4:79:64:c4:0f:ef:c6:ed:1a:d9:
                    1b:a1:29:88:43:c9:39:0e:0f:e2:47:d0:2d:16:9c:
                    9e:ef:86:59:0c:7a:cd:9f:25:b0:7d:9b:a1:de:00:
                    95:ae:43:ec:f2:3d:f1:19:61:d3:70:35:44:8f:98:
                    1e:d4:ea:1a:8c:be:02:76:f4:51:7a:c0:58:33:19:
                    4f:71:3c:d4:58:2a:96:82:60:32:38:64:41:18:c6:
                    a9:cd:39:aa:b5:2c:f7:5d:bd:f9:11:7b:c5:e5:6d:
                    28:52:42:f9:cc:07:3e:4a:88:3a:93:25:36:23:64:
                    c8:5b:3e:82:41:70:56:78:24:b1:0c:6e:2a:8f:20:
                    2d:5f:4d:7e:e2:a0:cc:4d:00:fc:c3:79:be:9b:fa:
                    15:a0:f1:75:84:ac:b9:37:68:87:19:77:df:46:02:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C6:D3:4D:A2:43:85:AC:F4:90:98:58:07:78:9C:EE:DD:B5:7E:59
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS202685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4000::/39
                  2a06:1287:d000::/37
                  2a06:1287:e800::/39

    Signature Algorithm: sha256WithRSAEncryption
         73:f7:bf:4b:70:dc:db:f0:ce:7b:dc:3a:f9:7d:4c:f1:9d:ef:
         ba:f4:cb:38:44:6c:d3:af:93:05:a8:c9:c9:bc:72:2b:49:a5:
         7e:72:a9:1e:e7:44:86:4e:cf:71:c5:c0:30:4c:65:d2:93:16:
         44:7d:93:75:86:d1:ba:85:3d:ce:fc:51:4c:2c:72:38:c4:3b:
         d2:99:24:b1:f4:51:45:60:31:75:e2:9d:c4:1e:74:1a:03:ea:
         7d:d8:e1:db:6b:81:30:80:b2:4d:17:41:cc:6c:89:30:f0:ce:
         d8:8a:49:4b:9c:21:66:03:21:b6:84:0d:2a:b6:c4:2c:f3:8b:
         e0:b5:87:69:94:e4:c4:68:c9:3b:21:4a:07:8e:8e:e7:c9:e5:
         a2:fd:61:95:a9:39:51:18:9d:56:09:02:1c:4d:b1:6c:5f:d4:
         d5:2b:2f:3a:2d:d1:27:82:4a:ed:d9:eb:76:35:38:0f:70:0b:
         cc:2b:01:ef:c3:87:5f:a2:7a:53:fe:a9:d9:ff:2d:e8:d5:bf:
         95:df:c9:04:56:f8:ce:e1:5e:2e:2f:bd:e2:d6:97:cd:b5:1f:
         b9:37:f6:41:ad:cd:ad:e2:cb:0b:77:fc:a0:bf:cf:53:76:87:
         16:cc:e4:0c:9a:dd:10:19:db:c1:6a:4d:8b:56:d3:7d:aa:2e:
         4a:a0:fe:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----