Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203686.roa
File:                     AS203686.roa (raw, json)
Hash identifier:          CgvBBFrgLpwZAbIOpFD9InTUdfTjs80PqXSz39ihcPs=
Subject key identifier:   F9:23:76:5A:41:51:20:E1:3E:22:78:4A:3D:5B:E4:92:24:5B:4F:50
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6B2AC1EF4D2EEC6117AB7C8CCA6FC4077E762EA3
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203686.roa
Signing time:             Fri 29 Sep 2023 07:38:22 +0000
ROA not before:           Fri 29 Sep 2023 07:33:22 +0000
ROA not after:            Fri 27 Sep 2024 07:38:22 +0000
asID:                     203686
IP address blocks:        2a05:dfc7:bdfb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2a:c1:ef:4d:2e:ec:61:17:ab:7c:8c:ca:6f:c4:07:7e:76:2e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep 29 07:33:22 2023 GMT
            Not After : Sep 27 07:38:22 2024 GMT
        Subject: CN=F923765A415120E13E22784A3D5BE492245B4F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:81:72:97:66:4b:ed:ba:e0:1b:89:ef:64:
                    90:ce:43:fb:fa:2d:e0:57:39:e6:d1:20:6b:00:0e:
                    f6:fa:99:85:b5:61:d6:b0:5d:43:23:65:9f:db:51:
                    9c:b4:ee:d6:58:b5:d3:14:3a:1e:e2:8c:5e:63:ca:
                    f7:91:d0:1b:12:c5:06:0a:ab:79:3f:a8:2e:60:1c:
                    d7:10:ba:d7:72:5b:2b:85:ef:e3:e8:14:0a:29:c8:
                    d0:e2:3c:6d:f0:1c:dd:de:b6:21:4e:48:f1:41:8e:
                    ae:af:ec:03:c5:46:df:55:2c:87:4b:f0:9d:9b:ef:
                    84:10:df:0f:8a:46:bd:de:d5:75:d8:89:aa:c1:2f:
                    98:1c:b0:54:e4:10:fe:8d:25:4d:a0:fd:d4:92:0b:
                    7f:84:c5:ae:ae:6b:81:9b:c5:39:7a:70:c4:e3:bc:
                    c3:8e:2e:4b:ac:f6:7a:26:bd:93:8c:0a:db:cb:c1:
                    cf:4d:b1:87:a2:a8:82:8b:23:69:b2:e0:88:90:f2:
                    09:41:2f:43:9d:9c:8d:99:d4:9f:db:0a:98:89:fc:
                    65:24:25:0e:18:f0:3c:f6:6a:f0:31:bb:44:bb:5d:
                    f3:5d:f2:38:34:3c:00:01:d4:1c:55:ab:e0:ed:37:
                    63:a8:63:1f:9d:ce:75:df:d9:24:cd:fc:c8:47:0d:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:23:76:5A:41:51:20:E1:3E:22:78:4A:3D:5B:E4:92:24:5B:4F:50
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203686.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:bdfb::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:ee:6a:a0:e3:e4:e9:11:dc:ca:b1:f3:fa:5f:49:e0:e0:82:
         16:22:13:ae:1b:05:94:6f:57:c8:75:cb:d5:3d:62:aa:c5:e3:
         c8:12:b8:9c:af:4a:77:58:13:0c:33:66:69:e7:80:37:6d:a3:
         5a:62:60:84:76:9c:a3:94:d6:e1:1e:b8:b2:93:9f:b4:65:ba:
         8d:10:51:27:05:55:14:dd:3e:58:1b:b0:a4:3a:c8:e2:ce:71:
         b6:9c:8d:8d:ca:33:78:73:a4:3f:db:29:08:4d:2d:11:1b:bb:
         42:b9:a3:9f:93:f7:33:27:bc:4e:1e:e5:bc:f9:95:94:38:d2:
         72:0f:d9:59:88:4a:bf:6b:b4:b3:06:fd:e9:8a:ff:3b:b1:ee:
         b6:34:63:b1:a6:03:55:4b:c7:24:d2:e6:9e:a3:42:be:b2:11:
         6a:cb:db:c3:4e:3a:70:6a:27:c8:7e:44:d4:c6:69:06:e8:4c:
         12:77:c5:83:2d:ff:71:c1:ce:fe:cd:53:15:39:21:9a:4e:36:
         bf:18:88:73:8a:c9:4a:92:6e:5a:fb:46:d7:23:b0:ef:2a:ce:
         95:77:ba:93:cf:75:88:60:9c:0c:fe:42:af:4f:fd:54:59:d6:
         ec:dc:56:34:60:d2:a5:2e:28:e7:82:8b:65:8f:ca:9f:4d:05:
         3a:7f:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----