Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203323.roa
File:                     AS203323.roa (raw, json)
Hash identifier:          3VQCwkWBba4bH+n/F1+hvJLZE9cHTOjVsWgNdKEUol4=
Subject key identifier:   E8:CE:05:2C:95:CF:93:24:42:AC:18:A7:6D:A0:D9:47:0B:B8:64:16
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       162A04D951E7FCA315C5BAC5CA1752AD072B45D5
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203323.roa
Signing time:             Wed 12 Jul 2023 08:36:49 +0000
ROA not before:           Wed 12 Jul 2023 08:31:49 +0000
ROA not after:            Wed 10 Jul 2024 08:36:49 +0000
asID:                     203323
IP address blocks:        2a05:dfc7:9400::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2a:04:d9:51:e7:fc:a3:15:c5:ba:c5:ca:17:52:ad:07:2b:45:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 12 08:31:49 2023 GMT
            Not After : Jul 10 08:36:49 2024 GMT
        Subject: CN=E8CE052C95CF932442AC18A76DA0D9470BB86416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2f:d1:9f:7d:72:34:f4:24:bb:29:ed:84:d6:
                    1b:a1:3e:05:33:62:0f:87:75:71:17:38:ea:76:73:
                    29:c8:04:1b:60:c2:f4:0c:79:bd:c0:e4:58:46:11:
                    e0:f3:cf:3d:b0:aa:44:25:1b:55:75:d3:a7:ae:28:
                    f7:1e:2d:1d:7f:c3:b6:25:e3:f3:98:f9:7f:16:3e:
                    34:76:b0:25:1e:d0:73:46:e6:9e:ee:56:84:eb:93:
                    56:3c:6d:1f:53:3c:33:2d:03:c1:71:6d:2a:8a:75:
                    79:81:17:99:8a:ec:1d:fe:a4:61:75:fb:c6:88:dc:
                    0f:d7:f8:61:9f:e3:47:77:48:c1:32:08:7f:49:4a:
                    55:3f:96:a0:7c:7f:90:61:8e:c2:d3:08:dc:34:3f:
                    4e:64:dc:3f:0b:29:5b:15:fc:e2:2b:92:42:38:ba:
                    f0:60:bf:69:69:b2:2f:1f:43:cd:70:fb:eb:9f:5a:
                    9f:f7:d9:e3:cb:05:14:7e:0e:fc:eb:06:2d:2a:87:
                    26:dc:0d:cb:b4:4b:a3:48:50:00:53:e6:d6:1c:7b:
                    90:22:09:88:81:15:5f:2c:6c:4b:95:5d:e8:a4:5c:
                    75:4a:13:b2:6b:1e:ab:9b:e6:27:59:1a:32:ca:22:
                    97:45:cb:76:28:9a:89:a9:42:eb:35:1a:bf:a7:4e:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CE:05:2C:95:CF:93:24:42:AC:18:A7:6D:A0:D9:47:0B:B8:64:16
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9400::/39

    Signature Algorithm: sha256WithRSAEncryption
         72:77:3b:b0:7c:ec:a7:ac:a1:6e:e7:e2:f3:a4:11:e0:48:3e:
         83:12:e0:f8:76:df:91:ac:85:9e:26:6c:b8:93:3a:08:a7:f4:
         3a:97:9a:d8:fc:9d:13:cf:89:62:78:c6:24:73:a3:1b:39:b2:
         56:7f:08:b0:67:c4:e6:6f:89:da:81:f1:07:9e:b9:d9:4d:c9:
         14:a4:f8:0a:d7:e1:6d:8b:30:9f:aa:89:e8:90:cc:37:ad:dc:
         b4:27:0a:a0:68:99:58:d5:b8:d2:c4:86:25:0f:d7:c6:82:37:
         b0:8b:e6:74:e7:48:c7:95:6c:22:28:be:4d:2d:1d:7c:48:ea:
         a3:5d:f1:4e:9d:0d:ff:6e:d0:16:ae:46:9f:59:c2:b3:cd:1f:
         74:8a:9b:65:43:93:5a:75:a4:38:99:a2:21:99:f8:07:60:3a:
         e1:be:15:bc:5a:c5:7a:8b:d2:4d:3b:91:f4:26:ae:0e:a5:fd:
         05:d9:38:32:1e:56:05:9f:9b:6c:22:37:af:2e:b3:d9:d7:31:
         58:86:91:16:83:f6:e8:93:dc:c1:43:b4:1e:1d:a9:4f:40:7f:
         41:d5:8e:92:90:1e:33:c2:77:de:4a:3b:96:80:a1:ff:eb:85:
         ec:b5:5e:e1:53:3e:78:09:9f:5a:b4:72:70:e0:ad:06:f3:dd:
         c2:2f:ef:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----