Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203852.roa
File:                     AS203852.roa (raw, json)
Hash identifier:          KSyIAbmbn1Qfbt6RsWidFsQAqd0veryXUNtRRtEtsoM=
Subject key identifier:   EE:1D:AC:5D:F2:CE:47:04:6E:2C:B9:88:08:D9:49:18:EC:BD:44:82
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       043DF5F9A62C47F678F1408FA7935AB0E32B977C
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203852.roa
Signing time:             Thu 06 Jul 2023 11:17:16 +0000
ROA not before:           Thu 06 Jul 2023 11:12:16 +0000
ROA not after:            Thu 04 Jul 2024 11:17:16 +0000
asID:                     203852
IP address blocks:        2a06:1287:1800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:f5:f9:a6:2c:47:f6:78:f1:40:8f:a7:93:5a:b0:e3:2b:97:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:16 2023 GMT
            Not After : Jul  4 11:17:16 2024 GMT
        Subject: CN=EE1DAC5DF2CE47046E2CB98808D94918ECBD4482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:38:f8:aa:46:ff:1f:03:19:16:c2:13:57:
                    98:b0:26:8d:a7:40:9a:3f:87:5d:c2:9c:55:8d:b7:
                    07:f7:5c:8f:14:de:17:ee:38:3f:60:7f:fd:a6:86:
                    c1:10:5b:65:fc:3e:11:a9:9d:31:6e:aa:01:81:b9:
                    a9:a8:2c:0a:84:bd:bf:6c:ab:f9:69:01:d4:9d:9d:
                    26:ef:e0:72:10:40:46:c8:2d:b2:49:96:4d:4c:59:
                    f1:42:06:3b:9d:8d:58:99:f8:4b:8f:6a:d1:cf:9a:
                    33:6a:8c:90:84:c0:bd:61:2f:64:f7:bd:05:c3:34:
                    b1:f7:2d:a6:8c:44:fe:5f:58:9d:bf:b3:2d:08:ac:
                    55:64:e6:fe:54:cc:27:42:0c:e8:ed:21:80:c1:20:
                    e2:3e:6d:97:0c:da:da:c5:cb:92:80:f0:68:7a:9e:
                    d0:09:f9:e2:fc:88:87:0d:bd:68:57:59:82:52:b3:
                    c6:1d:ae:cb:75:11:8f:94:e8:be:02:7e:13:3c:e6:
                    f3:ef:95:b4:9c:9e:dc:67:01:c0:72:f4:1c:3e:60:
                    10:79:9c:ff:5f:f8:3f:2e:a1:c8:9c:d2:6f:24:68:
                    9e:5f:5a:62:89:07:e1:c6:f1:3d:da:17:57:fd:67:
                    0b:d3:6b:64:26:eb:ca:c6:e6:31:99:36:0b:6e:43:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1D:AC:5D:F2:CE:47:04:6E:2C:B9:88:08:D9:49:18:EC:BD:44:82
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203852.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:86:fa:c3:2c:2a:a2:39:04:82:4a:93:8c:79:10:54:b2:
         87:bd:6e:58:32:56:bc:ff:6f:58:15:07:7b:5b:be:ae:1f:be:
         b9:d7:35:ce:35:c3:85:8a:3e:3a:a1:07:57:a2:ff:b6:88:10:
         17:40:58:f6:2b:83:ee:20:bb:e7:62:27:11:38:c8:34:03:fc:
         3e:7a:97:03:ac:21:12:a5:ac:f9:76:8f:b6:52:37:37:cb:3f:
         3d:30:31:e8:b6:22:71:09:d8:d5:fc:6a:5d:97:f1:54:d3:d4:
         22:06:19:94:0e:f1:8d:f9:63:1e:fa:88:d8:b3:28:2a:4e:c4:
         19:ad:4c:b0:2c:eb:09:41:a3:74:4f:e6:d3:87:0a:f2:d7:ed:
         b8:f7:e8:34:af:32:5d:9f:8d:63:7c:e9:9c:e1:7f:0b:1a:cd:
         9a:36:a9:4c:32:08:67:fc:91:b0:5e:3a:2d:b4:04:65:d1:00:
         7a:87:cd:cc:a2:0a:81:6e:d7:53:e6:a8:74:82:04:8f:a6:41:
         96:bc:54:ae:b1:e8:4f:f1:3e:02:90:92:50:05:b0:87:4a:0b:
         26:74:87:7e:9e:0e:45:d3:73:df:90:02:6e:31:f3:62:29:20:
         ae:2f:bb:95:1f:a6:b2:d9:96:23:f6:19:8f:15:56:40:47:75:
         13:d5:77:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----