Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203069.roa
File:                     AS203069.roa (raw, json)
Hash identifier:          1aGhHK5PGM5imUNTOUzqJ60DgURvC4xMNn2PudbPJyI=
Subject key identifier:   9C:53:74:A2:EA:92:D5:6A:3A:7E:D0:A4:A3:07:94:5A:C7:49:52:5F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1B3C0349BE943B7318A9B5287791E43A8ACC900C
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203069.roa
Signing time:             Thu 06 Jul 2023 11:17:29 +0000
ROA not before:           Thu 06 Jul 2023 11:12:29 +0000
ROA not after:            Thu 04 Jul 2024 11:17:29 +0000
asID:                     203069
IP address blocks:        2a05:dfc7:2f5c::/48 maxlen: 48
                          2a05:dfc7:4400::/39 maxlen: 39
                          2a05:dfc7:4800::/40 maxlen: 48
                          2a05:dfc7:6000::/39 maxlen: 39
                          2a06:1287:8200::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:03:49:be:94:3b:73:18:a9:b5:28:77:91:e4:3a:8a:cc:90:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:29 2023 GMT
            Not After : Jul  4 11:17:29 2024 GMT
        Subject: CN=9C5374A2EA92D56A3A7ED0A4A307945AC749525F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:4f:74:ec:83:9c:c6:75:da:93:8c:85:e3:
                    88:be:3e:40:be:82:79:5e:b8:f1:f4:d9:11:6a:22:
                    97:45:d3:92:44:ca:a1:2d:c0:91:9a:a7:1f:18:5c:
                    72:b2:a3:57:d3:66:63:e8:b4:8e:14:42:f5:9d:e2:
                    c0:21:88:15:bb:b8:0b:d4:f6:0b:2e:75:be:0e:2e:
                    44:43:3d:db:66:d8:50:94:60:da:b9:1c:e2:e2:60:
                    f1:c2:83:a2:a2:b8:8f:a2:b9:21:4a:70:f6:12:d6:
                    e3:a2:50:2f:bd:09:71:68:77:9f:bd:90:d5:2f:7c:
                    03:89:fd:6e:6f:ac:d5:6b:17:ee:cb:5e:f4:0a:58:
                    fb:6c:f9:47:15:0b:88:e0:a6:4e:30:92:3c:a1:f7:
                    66:e1:20:2f:3d:a9:22:ea:f1:d5:4b:cd:ad:fc:d4:
                    e6:19:51:3d:8d:12:15:be:6f:fe:dd:d4:bf:9e:06:
                    dd:b3:37:bb:9d:be:49:a5:cc:e4:5c:d4:4c:5d:26:
                    5d:bb:0d:bf:b3:23:94:3c:84:62:59:02:c4:da:f1:
                    c1:07:fb:20:4b:c8:c4:ee:25:a5:cf:98:3c:75:42:
                    e2:fb:b9:da:0e:8b:1f:6a:f2:63:64:af:fe:35:d1:
                    b0:62:4a:d1:42:e1:fb:42:2d:46:c6:ff:22:19:76:
                    5a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:74:A2:EA:92:D5:6A:3A:7E:D0:A4:A3:07:94:5A:C7:49:52:5F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203069.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2f5c::/48
                  2a05:dfc7:4400::/39
                  2a05:dfc7:4800::/40
                  2a05:dfc7:6000::/39
                  2a06:1287:8200::/39

    Signature Algorithm: sha256WithRSAEncryption
         29:55:68:88:0b:3a:e9:05:60:58:f8:08:35:cc:d4:b3:96:ad:
         96:b8:08:d0:7c:32:c8:53:7e:65:be:01:c5:1c:f8:e6:30:bf:
         01:6a:56:d6:02:23:1d:0a:9a:59:f6:7e:31:a4:6a:68:a2:cd:
         00:56:e4:68:88:7e:d9:00:58:b9:c8:20:d9:a1:5c:9e:1c:06:
         b7:b8:ad:10:3b:c6:0e:21:b2:f0:f5:0b:ea:aa:57:06:4e:8d:
         db:ee:fe:d0:d1:65:d4:b7:05:16:43:d6:7b:b9:ad:94:48:b3:
         12:c8:02:67:53:98:c9:ab:6c:7f:23:e9:ae:88:57:2d:8a:14:
         1d:e6:86:0c:d6:82:03:3c:8e:56:ea:c1:a4:9a:16:a1:ac:51:
         90:a4:18:3e:2c:29:ae:5b:b0:31:3e:44:c4:dc:f5:bb:d6:76:
         e7:01:5b:25:cd:3d:35:91:63:be:90:f1:dc:72:ac:71:bd:61:
         78:a0:e3:ed:2c:c5:bf:4b:99:b5:c7:84:fd:a9:93:5a:d1:7f:
         c9:2c:b0:04:ab:bf:04:85:54:d9:66:3b:42:05:11:70:97:22:
         29:7b:a1:83:79:9a:a8:06:7d:ca:1e:71:fd:46:ea:e9:7e:1b:
         18:81:a1:42:cb:f5:87:55:bc:48:03:11:b8:db:bd:4d:e3:c1:
         15:d6:5a:8b
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUGzwDSb6UO3MYqbUod5HkOorMkAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MDYxMTEyMjlaFw0yNDA3MDQxMTE3MjlaMDMxMTAvBgNV
BAMTKDlDNTM3NEEyRUE5MkQ1NkEzQTdFRDBBNEEzMDc5NDVBQzc0OTUyNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2U907IOcxnXak4yF44i+PkC+
gnleuPH02RFqIpdF05JEyqEtwJGapx8YXHKyo1fTZmPotI4UQvWd4sAhiBW7uAvU
9gsudb4OLkRDPdtm2FCUYNq5HOLiYPHCg6KiuI+iuSFKcPYS1uOiUC+9CXFod5+9
kNUvfAOJ/W5vrNVrF+7LXvQKWPts+UcVC4jgpk4wkjyh92bhIC89qSLq8dVLza38
1OYZUT2NEhW+b/7d1L+eBt2zN7udvkmlzORc1ExdJl27Db+zI5Q8hGJZAsTa8cEH
+yBLyMTuJaXPmDx1QuL7udoOix9q8mNkr/410bBiStFC4ftCLUbG/yIZdlrXAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUnFN0ouqS1Wo6ftCkoweUWsdJUl8wHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjAzMDY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAvBAIAAjApAwcAKgXfxy9cAwYBKgXfx0QD
BgAqBd/HSAMGASoF38dgAwYBKgYSh4IwDQYJKoZIhvcNAQELBQADggEBAClVaIgL
OukFYFj4CDXM1LOWrZa4CNB8MshTfmW+AcUc+OYwvwFqVtYCIx0Kmln2fjGkamii
zQBW5GiIftkAWLnIINmhXJ4cBre4rRA7xg4hsvD1C+qqVwZOjdvu/tDRZdS3BRZD
1nu5rZRIsxLIAmdTmMmrbH8j6a6IVy2KFB3mhgzWggM8jlbqwaSaFqGsUZCkGD4s
Ka5bsDE+RMTc9bvWducBWyXNPTWRY76Q8dxyrHG9YXig4+0sxb9LmbXHhP2pk1rR
f8kssASrvwSFVNlmO0IFEXCXIil7oYN5mqgGfcoecf1G6ul+GxiBoULL9YdVvEgD
EbjbvU3jwRXWWos=
-----END CERTIFICATE-----