Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203199.roa
File:                     AS203199.roa (raw, json)
Hash identifier:          rWRcuCJPbUrQRzAtOSfXmr3ZuCnH4mNAmi33QwUbIdU=
Subject key identifier:   9D:2A:CF:1B:88:B6:8D:BF:73:A3:0A:54:1C:AE:56:9E:17:B2:50:A2
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6CD1B4977E20E7DEC37A9D80129FCA74B4FEDD3A
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203199.roa
Signing time:             Thu 06 Jul 2023 11:17:12 +0000
ROA not before:           Thu 06 Jul 2023 11:12:12 +0000
ROA not after:            Thu 04 Jul 2024 11:17:12 +0000
asID:                     203199
IP address blocks:        2a05:dfc7:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d1:b4:97:7e:20:e7:de:c3:7a:9d:80:12:9f:ca:74:b4:fe:dd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:12 2023 GMT
            Not After : Jul  4 11:17:12 2024 GMT
        Subject: CN=9D2ACF1B88B68DBF73A30A541CAE569E17B250A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:ee:92:59:24:59:0e:25:93:69:a0:d8:7c:
                    01:bf:0b:ea:70:9a:30:68:dc:16:33:5b:a8:ec:06:
                    1c:86:54:49:9e:d0:bf:19:db:92:4d:88:61:b1:36:
                    ea:7e:ed:58:84:96:7e:b2:e5:d5:b9:b3:f7:16:46:
                    de:9c:a9:65:f0:9c:be:8e:98:81:66:11:23:61:bc:
                    10:a1:bd:ce:1a:36:fb:a2:3b:f9:a9:68:c3:8e:56:
                    08:49:2e:d4:3a:a6:63:30:71:31:ef:a5:73:c7:0b:
                    1c:6f:8e:46:bd:81:8e:ca:57:e3:c6:f3:ea:22:a1:
                    b5:7f:4d:8c:15:05:61:a9:2b:9e:49:13:f5:70:85:
                    f5:14:d8:d7:f5:e4:ed:7a:8a:cc:d4:9d:89:c7:f9:
                    3c:25:5b:40:5b:8a:62:87:b5:06:45:09:3e:49:d5:
                    9d:6d:f1:c5:2f:4d:61:43:b3:58:26:e8:5f:4c:02:
                    99:ff:0c:3d:d7:00:e6:68:41:3a:d3:1b:e5:62:13:
                    b1:0a:6f:d6:3c:a4:b4:74:64:29:99:25:aa:b4:97:
                    27:09:cb:d2:d6:a3:45:a5:3d:9f:06:54:1f:78:3d:
                    28:e6:8c:51:a5:43:f4:0e:35:4a:bd:86:88:44:dd:
                    66:c7:09:fd:57:cf:56:17:7d:1e:d3:6e:3e:95:e6:
                    8d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2A:CF:1B:88:B6:8D:BF:73:A3:0A:54:1C:AE:56:9E:17:B2:50:A2
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203199.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:5d:10:71:59:fc:69:0c:4a:de:45:44:96:c2:8a:c2:4f:e7:
         18:65:d2:c9:b6:c3:b2:a7:4c:ec:6e:22:d1:ad:ca:f1:80:2e:
         7b:13:6c:ef:04:a9:d4:d0:f4:ea:bf:ca:14:86:f6:34:72:30:
         8f:1c:e3:88:a7:b6:9d:b5:9d:a6:e0:5d:59:3f:87:90:b2:ca:
         eb:86:28:59:02:dd:e8:02:06:03:72:83:aa:98:29:e5:a7:ae:
         9f:a1:83:9d:00:b9:af:54:1d:51:b8:7e:aa:1c:82:f2:7d:0e:
         ee:b8:fd:99:18:20:4e:12:d0:91:65:93:a7:6b:36:b5:6b:c5:
         a1:7b:8b:b6:a9:66:7e:ce:0e:3b:d1:3e:dc:32:55:b3:e6:9b:
         b5:12:88:9f:64:d8:8f:2a:5c:56:7f:f3:82:4f:37:9c:c8:42:
         5c:af:7b:38:7f:60:31:63:6d:43:65:7d:3c:e4:51:6b:74:aa:
         1c:22:f3:b0:c1:97:c4:e0:53:a2:a1:6a:6d:94:fb:bf:4a:e5:
         7c:a4:50:35:86:b2:0d:3f:d3:24:6a:a7:42:5a:ab:49:a1:90:
         ad:36:43:61:15:7c:cc:13:a2:7a:b3:21:88:df:01:57:10:7e:
         e9:07:95:1b:c2:65:14:ff:c8:2e:96:10:df:cb:b9:0d:c5:8e:
         97:6a:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----