Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS202939.roa
File:                     AS202939.roa (raw, json)
Hash identifier:          fEE9sMY2jh9k/bDNQjpwccx7CCOwVp4uPWWe+4OQANc=
Subject key identifier:   67:DD:48:43:FF:D9:D5:52:01:E1:FD:3A:0D:18:49:DC:5A:ED:FE:80
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       03B8F685D8EA119668895D207C3790544DF2ECB6
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS202939.roa
Signing time:             Thu 06 Jul 2023 11:17:18 +0000
ROA not before:           Thu 06 Jul 2023 11:12:18 +0000
ROA not after:            Thu 04 Jul 2024 11:17:18 +0000
asID:                     202939
IP address blocks:        2a06:1287:ac00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b8:f6:85:d8:ea:11:96:68:89:5d:20:7c:37:90:54:4d:f2:ec:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:18 2023 GMT
            Not After : Jul  4 11:17:18 2024 GMT
        Subject: CN=67DD4843FFD9D55201E1FD3A0D1849DC5AEDFE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:a0:18:06:26:77:82:16:34:f1:65:13:96:
                    40:b7:d9:0f:ea:2b:33:b0:5b:03:4f:d8:19:f0:21:
                    a9:26:60:e2:d7:df:d1:0c:ac:0f:03:1e:6f:68:7c:
                    6f:f2:09:20:8a:7f:19:ec:eb:eb:3c:b7:b2:02:84:
                    43:69:67:26:f4:40:4d:74:1d:75:0c:e8:e5:8d:9d:
                    f4:bd:fc:bd:f9:07:db:2e:11:75:49:82:66:f0:80:
                    c6:83:97:0e:29:9c:83:b3:4d:fe:9e:a2:7c:84:71:
                    e2:d2:3f:f6:48:4e:d3:07:cf:3d:5d:90:59:0c:6a:
                    ca:24:20:ab:4a:96:93:5a:b6:1f:9a:cf:a1:5b:93:
                    b1:f1:53:7f:75:80:90:5c:be:33:36:b6:59:2c:74:
                    0b:67:3e:f6:fd:88:3e:51:e6:8e:3b:90:d4:00:63:
                    0b:a7:89:8e:ad:d8:1c:12:f0:ef:8b:5c:e1:86:33:
                    78:9c:69:3e:3a:19:fa:5a:ee:c6:fe:33:7b:45:62:
                    9c:92:e9:9e:53:0f:de:7e:95:3e:d6:a1:8f:c3:cc:
                    fe:e9:06:34:20:a4:c3:92:19:c6:6c:15:f5:b0:e2:
                    2b:ad:72:97:a4:4f:2c:13:0e:9d:0a:04:28:b4:fd:
                    2e:30:e9:f3:82:fd:ef:17:10:20:83:55:2f:2b:4c:
                    29:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DD:48:43:FF:D9:D5:52:01:E1:FD:3A:0D:18:49:DC:5A:ED:FE:80
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS202939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:ac00::/39

    Signature Algorithm: sha256WithRSAEncryption
         34:20:26:9a:7b:64:19:d8:45:7c:8a:27:83:01:09:70:a4:40:
         41:f7:5c:ad:23:92:d5:46:64:cd:84:81:e1:0f:ce:52:8f:3f:
         be:dd:db:43:f4:7f:05:bd:4d:ff:a1:6b:9e:c5:be:c7:eb:48:
         fb:48:dc:24:63:6f:fe:b5:d4:dc:c1:3f:46:fe:57:54:db:e9:
         29:5e:ce:1c:33:3c:48:d6:15:d6:59:56:ab:61:3d:9d:b9:e2:
         2c:5c:a8:92:a9:1f:e5:77:1b:15:3c:74:6a:92:37:bc:c7:13:
         73:78:90:b7:b6:57:68:d2:0c:38:07:74:32:66:e6:ac:e2:a7:
         49:22:1d:fd:7d:7b:3f:0e:fd:aa:57:82:06:24:b7:83:1e:5c:
         55:a7:d6:a1:d3:78:19:9c:60:39:26:66:4a:80:b4:87:10:65:
         b6:75:8e:0a:7f:88:f3:96:ab:da:2c:67:81:47:9c:08:81:95:
         7d:0c:dc:ae:de:f5:3a:a2:27:66:5f:3f:9f:33:b7:5a:21:79:
         b2:7e:54:58:e8:80:d6:d4:e9:cb:f9:d3:eb:7f:1a:f7:87:cc:
         69:d8:f0:18:19:71:ba:29:17:c4:8a:1c:b6:11:1e:90:89:6e:
         63:df:70:8c:e3:a0:00:b2:64:0e:6c:6b:97:c5:77:a1:61:f0:
         c3:9e:cf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----