Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203453.roa
File:                     AS203453.roa (raw, json)
Hash identifier:          8MQ8N1r6oMONFW2AtAVcNUFHaAU5mBLMxIfbR5m+lvY=
Subject key identifier:   52:A5:33:7F:48:90:8D:A7:72:D5:1B:FD:AD:1E:7D:2A:4E:FA:5D:7C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       08C67C9AE9FCC6103D1DC148662B1A9C1EA074FF
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203453.roa
Signing time:             Thu 06 Jul 2023 11:17:16 +0000
ROA not before:           Thu 06 Jul 2023 11:12:16 +0000
ROA not after:            Thu 04 Jul 2024 11:17:16 +0000
asID:                     203453
IP address blocks:        2a05:dfc7:104::/48 maxlen: 48
                          2a05:dfc7:2300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c6:7c:9a:e9:fc:c6:10:3d:1d:c1:48:66:2b:1a:9c:1e:a0:74:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:16 2023 GMT
            Not After : Jul  4 11:17:16 2024 GMT
        Subject: CN=52A5337F48908DA772D51BFDAD1E7D2A4EFA5D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:a3:a1:cb:f3:49:75:b2:87:20:2f:51:8a:
                    19:4d:87:15:ab:7a:40:8f:38:80:3e:77:44:c2:c4:
                    2f:63:18:98:32:1c:52:85:a6:e0:3d:63:60:b8:33:
                    ad:b1:b9:2f:b3:17:dd:f8:79:f0:82:0c:33:b3:e4:
                    fc:5d:c4:9b:f1:1f:d9:45:f6:68:10:a2:05:df:4a:
                    e9:68:28:d2:b5:e2:f3:65:0b:71:69:29:bb:f4:87:
                    73:ae:e8:90:f0:5f:7d:3a:0d:8e:9b:39:c4:d0:09:
                    09:0a:1d:03:38:5b:2b:2d:7c:4e:0c:00:48:9f:7b:
                    e7:b7:be:35:ed:81:67:66:af:73:10:ca:ac:a0:ee:
                    29:d1:b2:dd:84:fe:93:a0:44:a1:d3:fe:83:a3:67:
                    a2:98:87:73:43:4b:26:b6:77:2a:96:3b:11:b3:c0:
                    9f:f8:8f:6d:42:3d:11:a3:11:49:66:20:06:5b:d5:
                    44:8a:be:6e:67:ad:c9:df:0d:d0:d8:3e:51:41:79:
                    4a:72:dc:19:c9:71:df:5b:88:0a:0d:e3:a6:9d:8d:
                    fe:cb:80:71:28:6a:e8:65:7b:d7:68:27:ff:5d:e3:
                    33:f2:da:f2:45:a3:01:c3:55:c6:31:5d:a0:35:ed:
                    63:5c:79:1a:5f:66:4e:b7:a2:24:b9:10:54:a1:d3:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A5:33:7F:48:90:8D:A7:72:D5:1B:FD:AD:1E:7D:2A:4E:FA:5D:7C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203453.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:104::/48
                  2a05:dfc7:2300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:92:84:98:65:fa:95:ef:1e:03:56:7f:5f:e5:17:92:77:5c:
         3f:1b:41:4c:f2:3e:eb:a6:3c:48:8e:df:23:40:6e:af:aa:d9:
         f5:a4:12:ca:36:49:2c:a2:94:e2:07:94:37:0a:c6:6d:fe:4d:
         51:bb:6d:db:0c:83:49:df:e8:cf:93:6d:b4:0c:38:80:d3:4f:
         1e:31:24:6d:31:49:6c:f6:f2:84:26:a3:f0:f5:87:d2:1c:99:
         a6:63:9c:18:57:2e:03:78:00:f6:fa:6b:6a:3e:01:32:fa:7b:
         d5:59:52:a8:0a:af:5d:89:31:44:66:06:39:90:a5:f0:91:49:
         6b:52:c9:33:33:1e:62:42:76:9e:8b:3f:1a:86:ab:08:89:e8:
         07:a6:b2:0e:01:88:e1:41:ad:f1:cb:32:8c:27:9c:4b:17:5a:
         f6:ba:18:69:05:dd:af:62:6c:66:35:f7:10:af:9c:1c:e3:c2:
         15:32:4f:71:34:49:d7:44:d5:e1:37:6b:9b:32:3a:b5:80:93:
         94:86:72:7d:e3:c6:94:77:54:28:42:77:8a:d9:a9:1c:0f:a5:
         99:56:82:2c:fa:bc:bd:7a:f4:ac:f3:03:dc:fc:b2:1a:4e:a4:
         9c:8d:6e:0f:a8:dc:dd:8c:84:d6:49:11:e2:5d:e9:61:c6:66:
         b3:86:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----