Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203062.roa
File:                     AS203062.roa (raw, json)
Hash identifier:          o3Ja3RCkKmE7AdIdgebeb+g6cZxUz/N0mA21z04Mtsw=
Subject key identifier:   C2:F6:3D:AD:F9:D5:BD:3B:9E:D4:A5:E4:A4:6F:81:1C:50:FF:CF:71
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       640FFED941E6C2DE594B699C531BA79A1C4BBF6E
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203062.roa
Signing time:             Thu 06 Jul 2023 11:17:19 +0000
ROA not before:           Thu 06 Jul 2023 11:12:19 +0000
ROA not after:            Thu 04 Jul 2024 11:17:19 +0000
asID:                     203062
IP address blocks:        2a05:dfc7:1300::/40 maxlen: 48
                          2a05:dfc7:8800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0f:fe:d9:41:e6:c2:de:59:4b:69:9c:53:1b:a7:9a:1c:4b:bf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:19 2023 GMT
            Not After : Jul  4 11:17:19 2024 GMT
        Subject: CN=C2F63DADF9D5BD3B9ED4A5E4A46F811C50FFCF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:94:d0:b8:eb:58:83:71:0b:4d:ab:17:71:
                    66:6e:ef:0b:fd:bf:f1:0d:0f:4d:0f:c2:f4:03:a9:
                    41:c0:a8:d7:f7:88:4d:fc:12:73:a4:10:b6:c8:88:
                    58:66:43:d7:70:76:0a:1e:37:2b:50:78:0f:97:44:
                    3e:5a:0e:b4:7f:9e:5e:d3:61:f2:c5:d1:2b:71:00:
                    25:3f:83:ad:3d:e6:d2:2e:ed:d5:88:73:31:6c:3b:
                    ea:ee:8c:a8:f9:4e:77:94:47:ad:17:50:8d:2f:be:
                    ae:50:85:e7:77:b8:ed:00:d0:a5:99:37:cc:00:e8:
                    91:08:f2:b8:1c:16:27:fb:47:49:94:42:a1:d7:28:
                    87:63:69:78:47:58:ee:65:fd:c5:ed:a3:65:b2:54:
                    ae:13:0c:f3:45:6b:5a:38:3d:04:3c:04:87:fc:77:
                    af:f9:9e:4d:c2:17:5f:08:c4:60:60:6e:8a:35:a2:
                    a6:ef:94:63:fe:c3:6c:a7:91:09:ed:93:20:02:21:
                    20:d5:3f:20:46:aa:2d:e8:53:24:cf:8e:b1:30:cc:
                    8c:b5:3e:56:83:7f:6b:86:07:5c:ac:8c:f5:86:ab:
                    27:3c:0a:8e:46:fa:f9:8a:d4:b8:c7:53:e8:a2:98:
                    ec:46:87:90:ad:6e:75:df:bf:82:71:2a:fa:ba:87:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F6:3D:AD:F9:D5:BD:3B:9E:D4:A5:E4:A4:6F:81:1C:50:FF:CF:71
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203062.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1300::/40
                  2a05:dfc7:8800::/39

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:83:27:24:a5:2e:d8:d6:95:9a:3f:dc:b1:bb:18:17:67:
         01:50:ec:06:30:83:63:65:11:29:50:7c:e0:90:f1:6a:09:5c:
         15:c4:7e:ac:cb:81:e0:02:bd:23:23:b7:15:00:96:24:27:53:
         ec:17:27:05:29:40:9c:3e:f6:1b:2f:4d:46:77:29:10:56:08:
         69:89:f6:cd:c8:8c:5a:24:03:a5:c9:0c:76:31:f9:7b:91:1d:
         9e:ff:bd:d1:3a:ef:3c:26:74:72:95:e7:4f:d3:0e:59:7a:c3:
         f4:4a:52:7c:03:c0:0d:3b:e4:e7:00:4d:f3:91:9a:5d:35:a0:
         23:81:a9:c6:db:50:68:66:1c:06:11:7d:22:b6:a7:d2:89:66:
         59:19:75:9e:7d:e9:0e:92:13:37:c3:c2:9a:cf:2e:ca:d5:12:
         37:67:cd:50:b1:5e:54:dd:1f:9b:4c:0c:a7:4a:69:c7:6a:81:
         3e:28:a1:e4:7b:1e:a0:ee:4c:73:21:db:b3:4c:ad:0a:ea:a8:
         b8:6f:46:13:1a:ef:e0:cc:61:3a:fa:60:fa:21:ac:06:42:43:
         74:7b:aa:f5:91:4a:8a:7d:2b:9a:e3:27:37:d6:b0:03:a3:ec:
         5a:0a:d8:4c:8f:41:53:d9:a2:98:16:cc:0d:a8:11:7e:b8:27:
         88:e7:20:b1
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgIUZA/+2UHmwt5ZS2mcUxunmhxLv24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MDYxMTEyMTlaFw0yNDA3MDQxMTE3MTlaMDMxMTAvBgNV
BAMTKEMyRjYzREFERjlENUJEM0I5RUQ0QTVFNEE0NkY4MTFDNTBGRkNGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1aZTQuOtYg3ELTasXcWZu7wv9
v/END00PwvQDqUHAqNf3iE38EnOkELbIiFhmQ9dwdgoeNytQeA+XRD5aDrR/nl7T
YfLF0StxACU/g6095tIu7dWIczFsO+rujKj5TneUR60XUI0vvq5Qhed3uO0A0KWZ
N8wA6JEI8rgcFif7R0mUQqHXKIdjaXhHWO5l/cXto2WyVK4TDPNFa1o4PQQ8BIf8
d6/5nk3CF18IxGBgboo1oqbvlGP+w2ynkQntkyACISDVPyBGqi3oUyTPjrEwzIy1
PlaDf2uGB1ysjPWGqyc8Co5G+vmK1LjHU+iimOxGh5CtbnXfv4JxKvq6hw9jAgMB
AAGjggHYMIIB1DAdBgNVHQ4EFgQUwvY9rfnVvTue1KXkpG+BHFD/z3EwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjAzMDYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYAKgXfxxMDBgEqBd/HiDAN
BgkqhkiG9w0BAQsFAAOCAQEAiv6DJySlLtjWlZo/3LG7GBdnAVDsBjCDY2URKVB8
4JDxaglcFcR+rMuB4AK9IyO3FQCWJCdT7BcnBSlAnD72Gy9NRncpEFYIaYn2zciM
WiQDpckMdjH5e5Ednv+90TrvPCZ0cpXnT9MOWXrD9EpSfAPADTvk5wBN85GaXTWg
I4GpxttQaGYcBhF9Iran0olmWRl1nn3pDpITN8PCms8uytUSN2fNULFeVN0fm0wM
p0ppx2qBPiih5HseoO5McyHbs0ytCuqouG9GExrv4MxhOvpg+iGsBkJDdHuq9ZFK
in0rmuMnN9awA6PsWgrYTI9BU9mimBbMDagRfrgniOcgsQ==
-----END CERTIFICATE-----