Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203909.roa
File:                     AS203909.roa (raw, json)
Hash identifier:          /Rjyd9I8klnpd7jveAVu1oS9qtI9zwXkcngJXubaaAM=
Subject key identifier:   A2:8A:DC:42:A7:00:E6:A3:65:CD:9F:22:1D:33:1A:15:29:00:41:3A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       09ED15368F596E47335B36A8BAF7097B1CB8BE45
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203909.roa
Signing time:             Thu 06 Jul 2023 11:17:17 +0000
ROA not before:           Thu 06 Jul 2023 11:12:17 +0000
ROA not after:            Thu 04 Jul 2024 11:17:17 +0000
asID:                     203909
IP address blocks:        2a05:dfc7:24::/47 maxlen: 47
                          2a06:1287:30::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ed:15:36:8f:59:6e:47:33:5b:36:a8:ba:f7:09:7b:1c:b8:be:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:17 2023 GMT
            Not After : Jul  4 11:17:17 2024 GMT
        Subject: CN=A28ADC42A700E6A365CD9F221D331A152900413A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:d6:50:52:c8:11:6f:f3:7f:da:6b:02:ac:
                    8c:cd:b7:6c:e5:a7:fe:f2:72:cf:b8:1a:81:ac:5c:
                    8f:5f:1f:ef:46:2b:96:cf:7b:bc:e4:8a:4d:f7:92:
                    7a:be:19:9c:49:9c:33:f3:1a:79:f4:43:03:6a:62:
                    df:f5:8f:07:17:b0:ea:68:1e:b1:2c:49:43:ac:d9:
                    a1:d8:8a:a7:9c:e3:4f:c9:46:65:72:ea:5b:8b:9e:
                    19:6f:92:66:29:7d:4f:d0:ec:34:6e:c7:0d:2b:c5:
                    a5:13:06:8b:2e:98:d7:50:4b:88:ce:3b:68:e6:3f:
                    56:ac:4b:12:0e:ba:f2:88:e4:f7:c2:97:86:61:c8:
                    d6:e6:57:7a:9d:ab:06:7d:91:9b:78:bd:3c:61:8d:
                    72:5d:71:4a:85:5d:1e:63:19:7d:b6:07:7f:29:5b:
                    67:b7:c7:e3:9d:5e:f1:4d:94:61:e5:eb:62:48:34:
                    1e:16:7b:ba:82:04:cc:47:ec:f9:01:1a:d9:e5:f5:
                    70:10:1e:9b:a5:7b:a5:1f:d1:ac:2e:f8:f9:6c:69:
                    14:b3:35:5b:46:79:5b:19:84:a6:ae:a8:b8:13:36:
                    02:c0:cf:a7:06:b0:b1:4d:d3:5d:e1:b7:80:61:6a:
                    a8:6c:44:ea:f7:ca:28:5d:47:43:e8:a7:f2:2c:e3:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8A:DC:42:A7:00:E6:A3:65:CD:9F:22:1D:33:1A:15:29:00:41:3A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203909.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:24::/47
                  2a06:1287:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         b7:1f:ce:9f:1c:00:67:67:cb:3c:8a:9d:d8:50:ef:44:aa:6a:
         15:49:ec:96:ad:44:2c:8b:43:39:9d:0f:eb:82:aa:66:b3:1a:
         51:57:28:d9:0d:23:0c:9e:33:7b:37:1b:2b:72:4c:b3:e8:85:
         e3:9a:f6:f1:13:53:e8:fb:3b:ff:0a:a7:90:f0:1a:53:b8:75:
         5d:90:65:09:4d:40:f1:e1:1d:c4:58:3c:c4:72:0f:d7:03:2a:
         63:4a:6d:45:3c:72:6d:bf:b9:7e:25:bf:fc:17:01:fa:54:33:
         5e:d8:14:7e:d5:16:67:e8:47:fb:ad:dd:56:3f:d7:01:2a:b9:
         26:3b:a1:52:cb:a9:94:08:64:8a:1b:6c:05:0d:94:76:8a:eb:
         78:12:91:51:d3:8f:b1:21:b6:70:6b:f7:7d:c0:20:dc:4b:bd:
         0d:64:24:2b:1f:ea:d0:0b:9f:cf:19:b8:92:33:a7:7b:0f:01:
         26:6b:79:23:63:d0:a2:d4:8d:9c:d6:26:52:73:db:bc:aa:7a:
         c0:e2:d4:54:8b:c4:84:fc:14:95:72:ee:dc:6d:36:e8:88:c1:
         90:63:ff:0c:25:df:e6:08:d8:b1:10:a3:3b:33:6c:94:1e:51:
         46:44:7f:18:c8:52:9a:6b:c2:4d:de:ce:67:84:fe:c0:c0:6b:
         79:57:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----