Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS202990.roa
File:                     AS202990.roa (raw, json)
Hash identifier:          pHVEqjAGxqd8I/yrE6GA462R1mtQEOYgatzI9Rr5vpk=
Subject key identifier:   C7:4E:0C:D0:07:D8:F4:0B:97:C5:7D:30:21:F2:31:F9:40:6F:DA:EB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       40AF215693E984DBE1A06AB7A0F55359B91DF647
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS202990.roa
Signing time:             Thu 06 Jul 2023 11:17:08 +0000
ROA not before:           Thu 06 Jul 2023 11:12:08 +0000
ROA not after:            Thu 04 Jul 2024 11:17:08 +0000
asID:                     202990
IP address blocks:        2a06:1287:8000::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:af:21:56:93:e9:84:db:e1:a0:6a:b7:a0:f5:53:59:b9:1d:f6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:08 2023 GMT
            Not After : Jul  4 11:17:08 2024 GMT
        Subject: CN=C74E0CD007D8F40B97C57D3021F231F9406FDAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:5e:75:da:59:53:b6:ad:2c:a8:de:01:49:
                    f7:50:7e:4f:8e:96:78:ef:4c:a1:44:c2:a7:e6:1d:
                    7f:e5:23:9e:5a:83:c2:e6:a9:93:6b:a9:e5:93:23:
                    74:79:1b:0d:de:c0:33:0a:29:1c:c9:c5:34:96:7d:
                    81:ba:44:54:65:25:47:b8:d7:13:d7:b3:ed:2d:1c:
                    b7:c3:bb:14:c7:dc:02:b3:47:af:27:39:65:df:d9:
                    04:00:29:87:c3:cc:0b:97:1b:9b:bf:be:c6:54:8a:
                    df:e6:b1:94:51:83:6a:6f:82:80:fe:7b:d4:c9:78:
                    5e:7a:32:26:08:4e:0f:a4:8b:4c:be:9b:00:2d:b9:
                    86:83:7d:4b:fe:42:d1:76:ee:14:8f:1a:2f:1e:cc:
                    d3:31:77:1a:15:53:31:e1:c8:fb:8a:9e:15:c0:a8:
                    9c:18:d1:e2:fc:db:22:29:2b:7e:93:9d:8e:c0:d2:
                    4a:d6:28:23:5f:95:17:64:92:8b:ec:c5:cd:5d:80:
                    2d:8d:43:ed:d9:f9:cf:9d:75:7c:5e:1c:ee:78:ee:
                    a3:6a:dc:29:9e:97:d7:31:d9:a8:2c:9b:23:bb:f3:
                    f1:53:a6:a2:cb:2f:ab:01:db:02:9d:89:ba:ab:41:
                    55:bf:b1:a6:24:ce:9b:b2:8f:1e:7b:67:dd:81:6c:
                    6e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4E:0C:D0:07:D8:F4:0B:97:C5:7D:30:21:F2:31:F9:40:6F:DA:EB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS202990.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         7d:26:31:bb:48:c4:cb:df:4e:82:d0:1c:91:87:23:85:1f:74:
         23:2c:30:18:0d:95:bd:55:79:e3:34:ee:c5:b2:15:86:ce:31:
         2f:79:ad:88:80:7e:98:b7:55:30:e5:48:03:7a:df:27:06:e6:
         60:b8:79:bc:6b:92:25:45:e8:aa:8a:65:c3:ca:b4:24:43:6a:
         b4:ff:cb:b4:9b:8e:16:2d:11:4d:32:ea:55:3c:6e:4d:72:e4:
         ff:fc:dc:35:81:57:eb:61:7f:dd:11:67:1d:5e:c3:10:ff:af:
         92:26:bc:c3:b8:28:a5:a8:b2:b2:44:b4:1d:98:75:fe:a6:36:
         9c:b9:71:7b:f0:1c:19:cf:46:f4:3c:6d:73:24:cb:0c:02:10:
         d3:91:22:30:93:9c:5d:5f:89:02:48:16:69:3c:8d:59:a0:43:
         3f:1d:c6:8c:20:2e:aa:db:1f:fa:bf:d6:04:60:ab:3d:70:3e:
         53:c5:8c:e8:81:c3:c6:43:9b:d4:19:0d:29:41:5b:2a:f5:33:
         89:84:45:ca:77:fe:d5:4e:de:77:ca:45:6e:1e:8e:ac:d8:de:
         d7:5d:d3:58:42:24:b1:c6:f7:bf:1f:69:70:d9:f2:98:27:ec:
         1a:c3:28:67:72:09:b6:18:ee:89:8e:79:25:53:24:4e:eb:c5:
         7d:3b:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----