Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS202988.roa
File:                     AS202988.roa (raw, json)
Hash identifier:          CQp902ID4HViNIqNOg2DVq+PzUWwIo4681290V2htZY=
Subject key identifier:   2E:70:84:05:B6:08:C3:FC:5D:6A:DC:7C:2F:A5:98:FE:05:7B:39:BB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7437CA82CCB7E301E8B7F8EAC6E0700E333B35C4
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS202988.roa
Signing time:             Mon 31 Jul 2023 11:02:21 +0000
ROA not before:           Mon 31 Jul 2023 10:57:21 +0000
ROA not after:            Mon 29 Jul 2024 11:02:21 +0000
asID:                     202988
IP address blocks:        2a05:dfc7:1500::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:37:ca:82:cc:b7:e3:01:e8:b7:f8:ea:c6:e0:70:0e:33:3b:35:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 31 10:57:21 2023 GMT
            Not After : Jul 29 11:02:21 2024 GMT
        Subject: CN=2E708405B608C3FC5D6ADC7C2FA598FE057B39BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:e6:ba:52:ac:8d:0a:b9:95:b0:bd:46:be:
                    bc:57:84:43:8c:ba:b9:3f:3c:ba:87:25:67:36:a7:
                    2d:5f:cb:7b:fa:31:9e:63:bb:63:0f:08:fa:10:72:
                    cc:8b:c2:91:e3:d5:59:75:fe:aa:42:a2:0d:15:14:
                    81:a7:41:f2:14:bb:87:46:85:09:c0:55:ed:d2:ed:
                    09:3c:6d:9c:7c:4e:db:0d:13:4a:53:2c:97:ed:82:
                    90:b9:c3:2c:60:70:d5:f9:4c:91:6e:85:92:48:70:
                    d4:76:8e:37:a2:78:89:bb:59:d7:60:1d:c1:a3:d1:
                    f6:4c:1e:0b:f1:c7:6f:bc:54:4b:cb:f7:d7:ec:24:
                    91:bc:c6:38:57:03:3e:2f:dc:11:d2:b0:62:64:f1:
                    06:0a:b6:be:1c:66:50:f3:44:87:7c:34:ed:d7:f5:
                    9b:72:62:e0:d3:8d:97:f1:56:8d:61:5f:fd:1b:1f:
                    55:c1:02:fc:9a:8a:14:37:dd:8c:bd:0d:98:af:52:
                    64:42:dd:d1:c6:b0:39:68:99:e6:54:5f:8e:36:fb:
                    a7:4e:11:18:b7:72:f9:20:b5:d2:33:cf:f7:8c:0e:
                    ea:4e:86:bd:e8:82:59:02:ef:5d:e0:93:e1:e7:65:
                    b8:07:e4:ad:78:7d:9a:0e:0d:4e:63:e4:cd:81:28:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:70:84:05:B6:08:C3:FC:5D:6A:DC:7C:2F:A5:98:FE:05:7B:39:BB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS202988.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:1e:c1:e5:99:f0:11:cc:3c:a4:8d:9f:b9:26:b3:82:70:
         02:cb:70:b5:4e:06:1d:34:4d:67:df:a5:3f:2e:31:c8:48:d2:
         24:0d:02:f5:54:ae:b3:93:9f:bd:22:50:d9:60:a7:d2:e1:84:
         f3:64:f9:20:9e:ac:03:1a:0c:23:51:34:6d:b7:8a:3d:c6:c5:
         c5:e9:ad:04:33:f9:66:93:6a:16:cc:a6:a8:ef:be:b9:ce:c0:
         7c:a9:e5:3a:6f:db:9a:99:2c:54:f7:12:a4:2c:21:f9:18:dd:
         59:3d:67:60:13:ea:40:4a:5c:a3:1a:53:24:76:01:a1:7d:6f:
         6b:66:a5:00:34:0d:70:39:1e:29:31:62:00:7f:29:ff:61:de:
         26:31:cb:aa:93:89:ca:03:67:c3:b1:2f:8c:b9:54:c9:1a:42:
         8e:33:83:7f:8c:40:9d:9d:16:44:11:63:52:45:c8:a4:0f:a4:
         9e:51:43:87:80:10:fb:39:af:bc:ec:79:32:26:77:9d:cb:cc:
         c9:ed:8c:5f:de:ec:30:c8:0b:7c:4d:7a:88:0e:8f:fa:80:f7:
         14:2f:e3:c4:30:66:7c:31:d0:1c:7b:c8:77:a2:af:79:63:c3:
         fc:3e:a2:c3:14:6b:ca:77:3b:6b:75:c5:81:e8:dc:76:7d:97:
         1b:83:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----