Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203458.roa
File:                     AS203458.roa (raw, json)
Hash identifier:          a9EkEvVmaGZCeB8x/ugb3OFcwgI/HA3O2XgwiA/1b1A=
Subject key identifier:   DC:74:80:FE:48:89:8E:94:8C:B0:9A:FE:ED:62:EF:CA:83:19:E7:AC
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3DE325848C9B83AA41E88BFBE79D5281052F91F5
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203458.roa
Signing time:             Thu 06 Jul 2023 11:17:24 +0000
ROA not before:           Thu 06 Jul 2023 11:12:24 +0000
ROA not after:            Thu 04 Jul 2024 11:17:24 +0000
asID:                     203458
IP address blocks:        2a06:1287:4900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e3:25:84:8c:9b:83:aa:41:e8:8b:fb:e7:9d:52:81:05:2f:91:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:24 2023 GMT
            Not After : Jul  4 11:17:24 2024 GMT
        Subject: CN=DC7480FE48898E948CB09AFEED62EFCA8319E7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:af:07:0b:4b:86:91:8e:46:9a:0b:5b:43:5d:
                    af:40:05:d6:6c:97:bd:25:4c:04:be:39:76:d4:7d:
                    97:8a:f2:8c:9c:32:79:60:61:3f:22:1e:ca:42:1a:
                    63:07:d7:7a:76:03:c8:00:33:9c:71:de:e8:c5:97:
                    29:5e:86:ad:c3:3b:f9:f2:1f:87:fb:cf:27:a6:7d:
                    7f:e5:01:af:ea:1e:a5:1b:9f:42:1e:f5:67:60:79:
                    0a:d1:0a:be:65:90:4d:ac:de:55:c3:be:83:8b:cc:
                    1c:e1:90:2d:e0:d4:a5:c8:e6:9c:3c:3e:7c:76:52:
                    ff:8a:24:72:74:15:91:f4:63:3e:53:ee:6d:21:24:
                    56:ed:32:4b:72:6f:a7:28:6f:06:9a:d4:42:81:1e:
                    b0:21:43:f9:43:7f:c9:81:22:3a:d7:28:aa:34:0b:
                    b5:c4:37:b5:2d:ac:b2:e4:1c:f4:12:30:d6:55:53:
                    1c:e3:35:47:ed:41:56:f2:36:82:64:c5:6d:ef:f6:
                    89:b9:91:e3:45:56:e5:92:cd:68:c1:fb:90:e6:bc:
                    a3:7e:7e:82:f8:58:94:dc:7e:24:d2:be:7f:85:52:
                    0c:07:22:03:44:bf:96:ce:af:8f:50:0d:41:ca:75:
                    f4:87:85:53:57:66:20:11:43:0c:7f:c2:6e:21:92:
                    78:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:80:FE:48:89:8E:94:8C:B0:9A:FE:ED:62:EF:CA:83:19:E7:AC
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203458.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:7b:4e:9b:a2:8e:8d:e6:d6:ca:16:f9:1f:9d:a4:60:9b:
         45:17:7a:66:ee:fa:88:4f:eb:6a:1b:63:79:6b:40:ee:f7:be:
         78:06:0a:02:59:2f:6c:df:d6:77:a9:7a:29:d9:75:f6:53:79:
         94:90:df:b7:2b:57:e4:e8:0c:dc:57:8e:38:46:48:80:a8:90:
         05:ac:d8:ef:c9:0b:84:86:d0:6c:18:e0:c9:b6:25:81:7f:fc:
         2c:81:cb:ec:c0:92:9b:d4:ec:e0:e1:35:10:2d:16:65:63:fe:
         f0:4b:37:ab:f4:99:92:b6:92:1e:fc:79:93:fd:d7:d9:03:ff:
         c5:4e:e1:71:ba:78:77:c6:15:be:99:44:c7:8e:93:c4:41:b4:
         ef:07:1a:66:dc:47:4d:11:72:0d:f1:bd:d2:f7:d5:bd:62:40:
         72:7d:b6:20:fb:32:84:e4:ba:19:e4:13:ce:d9:ce:98:9f:fc:
         9b:34:9c:21:82:ce:62:61:32:52:b1:5f:15:7c:ff:83:92:57:
         1c:50:5a:48:dc:82:4b:20:f2:02:f1:11:6c:ba:64:b4:9e:20:
         18:62:43:cf:85:f3:5c:b0:d1:6d:10:02:71:f1:5e:f2:d9:fe:
         12:1b:a3:5b:6a:ff:f5:e8:0c:ef:47:c1:7d:c2:3a:48:85:cc:
         93:2c:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----