Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203023.roa
File:                     AS203023.roa (raw, json)
Hash identifier:          HcUAAY/3dJyp9rUdMO+ZKsfg53fwqtgDALR/SCqrcFY=
Subject key identifier:   6C:C8:81:FB:F6:5E:24:47:E1:0B:F1:B9:A9:DA:AF:1D:C9:DA:62:5F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       780556C8B0E4D1FA78A6DC4FA99D8D0952B3FDC9
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203023.roa
Signing time:             Tue 15 Aug 2023 07:02:19 +0000
ROA not before:           Tue 15 Aug 2023 06:57:19 +0000
ROA not after:            Tue 13 Aug 2024 07:02:19 +0000
asID:                     203023
IP address blocks:        2a06:1287:300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:05:56:c8:b0:e4:d1:fa:78:a6:dc:4f:a9:9d:8d:09:52:b3:fd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug 15 06:57:19 2023 GMT
            Not After : Aug 13 07:02:19 2024 GMT
        Subject: CN=6CC881FBF65E2447E10BF1B9A9DAAF1DC9DA625F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:1f:dd:26:d9:b1:3d:be:ec:88:19:1e:e0:
                    43:d6:1f:56:b0:94:8e:9c:80:66:22:78:27:fc:d2:
                    3d:32:1c:3f:d0:7f:a5:8b:7a:98:be:ba:83:fd:19:
                    36:5a:23:e4:d2:6b:31:56:f9:f6:68:90:e3:d5:6d:
                    d4:a6:fa:c2:b3:07:f3:bb:7c:1c:5a:cb:7d:0c:d6:
                    36:68:97:a6:54:7c:eb:e3:86:35:54:60:79:63:f1:
                    08:8a:64:14:a1:74:ef:ed:15:d1:54:73:27:b4:ba:
                    41:d2:5b:01:59:2a:e2:95:75:36:58:2a:4f:68:7a:
                    3d:87:b2:00:ac:7b:fd:48:fb:42:6d:b9:e3:89:6c:
                    68:e2:a4:6a:8e:60:fc:07:bb:ab:4d:30:31:8c:9e:
                    d5:2a:a4:40:3f:a8:23:b8:3e:32:5b:02:38:db:ef:
                    6c:0a:e3:4e:70:2d:ff:25:c2:8d:a6:4d:65:4f:99:
                    c2:82:8d:df:59:06:90:77:3e:d4:22:3b:1f:f1:5b:
                    9a:aa:8f:62:e3:00:99:52:66:69:c2:0d:fb:8f:26:
                    ba:ef:8b:5f:e9:13:a1:9e:93:7e:6c:0b:93:c6:69:
                    b7:1d:3b:1f:f6:23:be:b7:1f:39:21:0a:30:18:ca:
                    d0:34:2a:e2:e9:f6:b7:b4:89:0e:89:0d:95:e2:84:
                    67:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C8:81:FB:F6:5E:24:47:E1:0B:F1:B9:A9:DA:AF:1D:C9:DA:62:5F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203023.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:3b:63:ab:45:99:d8:38:26:c8:31:7f:82:02:f5:36:7a:c0:
         e8:5e:9e:37:a2:2a:c6:4f:62:85:45:f8:93:1b:c7:95:f8:10:
         5d:34:ed:7b:02:90:a4:f2:1e:0e:bc:3b:9d:b0:72:4a:c5:ec:
         37:b1:d4:f0:d4:be:a5:71:c2:33:04:87:70:6d:5a:7f:c4:5b:
         10:34:98:bb:98:15:a9:c7:2c:d2:d7:3a:a0:06:a4:37:e8:17:
         e9:67:d6:4a:21:6f:09:af:a9:61:36:0f:ce:c4:6d:26:89:3a:
         9e:f8:1f:ee:8b:50:29:7d:72:51:b4:b5:34:44:c0:2d:11:cf:
         c3:6b:b3:ed:1f:3c:35:ba:21:16:85:42:2c:6e:bd:62:d8:d5:
         5f:3f:00:54:86:26:d5:26:2f:44:09:64:aa:16:7e:0d:88:f4:
         38:46:0c:3f:f2:85:c4:fc:27:15:81:46:32:85:95:fa:88:fb:
         e4:de:ab:23:c0:14:13:45:3b:71:64:56:f2:e2:11:fe:00:10:
         7d:ed:0d:af:14:61:7b:f3:35:08:cb:97:d6:d4:b9:1d:f6:2a:
         7b:5e:a9:54:35:ea:ee:86:85:f0:bd:7e:d7:0a:d7:6c:cf:06:
         19:9c:4b:c4:2e:97:b4:a5:6f:5f:64:5e:79:9d:c6:8f:5b:d0:
         f4:77:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----