Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS202828.roa
File:                     AS202828.roa (raw, json)
Hash identifier:          5D0yqYCgCIP2AhkWOIM79OmaENEpoGdtrG8N0NYCOpY=
Subject key identifier:   F0:1C:1A:85:18:A7:AD:C7:0F:2F:C1:D9:68:A2:58:D7:13:D2:00:B6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       49FA5F8A9E0FB959DAE48D3ED4DF5DD306A3922D
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS202828.roa
Signing time:             Thu 06 Jul 2023 11:17:12 +0000
ROA not before:           Thu 06 Jul 2023 11:12:12 +0000
ROA not after:            Thu 04 Jul 2024 11:17:12 +0000
asID:                     202828
IP address blocks:        2a05:dfc7:2100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fa:5f:8a:9e:0f:b9:59:da:e4:8d:3e:d4:df:5d:d3:06:a3:92:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:12 2023 GMT
            Not After : Jul  4 11:17:12 2024 GMT
        Subject: CN=F01C1A8518A7ADC70F2FC1D968A258D713D200B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:0b:a9:63:28:7d:78:65:7a:53:74:ea:d5:
                    a6:68:c0:71:c5:94:53:47:32:fe:d2:83:70:5c:69:
                    4e:57:b8:2e:a9:d1:d1:74:5b:af:67:74:62:a2:fd:
                    c5:46:12:8d:99:b2:83:f9:37:f6:29:48:de:c8:ef:
                    47:08:58:d2:b8:62:9e:fb:c8:30:c1:5f:df:37:23:
                    a4:e0:0e:44:ee:4e:b6:04:99:2b:97:fa:35:ad:31:
                    db:42:eb:af:08:a9:4c:98:7f:6e:a4:da:19:fc:64:
                    29:cf:74:86:b1:70:9a:ff:74:f8:f7:69:c3:c9:5d:
                    83:76:6f:fb:ca:40:fc:49:bc:40:3a:e6:48:66:15:
                    85:67:a8:d1:bf:4c:03:08:06:5e:a6:ee:68:27:58:
                    b5:f5:ed:ec:81:f8:de:9a:8e:cb:13:3d:15:e3:99:
                    b9:c1:d1:9e:e7:83:78:41:03:7b:c4:f2:8c:db:ee:
                    ea:36:83:55:ff:a6:86:2f:00:15:80:80:32:04:48:
                    93:3a:91:01:c1:82:1f:3a:84:c3:eb:38:62:11:d7:
                    6c:e8:04:5a:49:50:37:d3:bb:12:de:bd:9f:85:44:
                    c6:32:c5:00:7d:54:cf:66:6e:c7:d0:41:8f:c5:8c:
                    2f:72:8a:04:be:b3:e9:ae:6c:76:12:e8:10:f1:34:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:1A:85:18:A7:AD:C7:0F:2F:C1:D9:68:A2:58:D7:13:D2:00:B6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS202828.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5a:71:fd:92:e0:2e:e9:9b:20:78:de:a1:20:41:04:10:e8:70:
         55:71:ef:1e:4d:b2:88:ba:40:18:05:52:68:9a:bd:aa:92:ed:
         0d:21:6c:62:cc:e3:21:f9:51:e5:3c:fd:68:37:c7:fc:a1:30:
         bf:dc:e2:93:05:ba:cb:a7:ef:47:89:d7:bd:ef:1e:41:f2:9f:
         77:4c:b9:42:de:04:93:65:c9:61:7d:86:a8:c8:a5:8e:3c:c2:
         51:7c:0c:d8:24:06:d6:c7:97:65:b5:5c:5a:7b:3a:b7:e0:89:
         18:47:46:fe:55:f7:3a:d6:d6:f7:c0:66:33:6a:06:04:ae:3b:
         e3:9b:d4:e8:62:03:a2:10:fb:eb:a7:68:4d:b3:bd:19:d0:57:
         42:0d:fe:8d:59:59:d0:9e:78:c2:85:4f:6a:22:2f:3c:a2:05:
         e5:01:b2:cf:72:24:c3:91:ff:d0:44:9a:85:c6:01:63:2f:49:
         17:c5:a0:c6:77:99:86:9b:a7:5a:b8:11:d2:7e:f5:fa:6a:a0:
         bb:a8:7f:bc:14:be:31:1c:ea:11:4d:f2:e9:a2:bc:9b:5b:a1:
         f9:14:02:03:68:88:00:dc:c6:26:11:01:04:9e:51:08:2f:16:
         3e:52:94:84:5c:ba:59:32:91:cc:51:09:b1:af:00:55:d7:d4:
         ed:ff:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----