Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS203913.roa
File:                     AS203913.roa (raw, json)
Hash identifier:          1WlBcn/iPvQ+TbQfpvlh9bLAivDJUHKLBTrdodmphYk=
Subject key identifier:   81:E6:1A:84:91:FA:30:FA:DF:AC:30:61:42:E6:AF:74:15:02:92:9E
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7F6CE7CD62610353C85429908D6D250C10199F2F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS203913.roa
Signing time:             Mon 10 Jul 2023 13:50:25 +0000
ROA not before:           Mon 10 Jul 2023 13:45:25 +0000
ROA not after:            Mon 08 Jul 2024 13:50:25 +0000
asID:                     203913
IP address blocks:        2a05:dfc7:dc00::/39 maxlen: 48
                          2a06:1287:1600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6c:e7:cd:62:61:03:53:c8:54:29:90:8d:6d:25:0c:10:19:9f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 10 13:45:25 2023 GMT
            Not After : Jul  8 13:50:25 2024 GMT
        Subject: CN=81E61A8491FA30FADFAC306142E6AF741502929E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:c7:1f:48:00:55:b4:d9:2c:86:fb:db:ab:
                    0a:f6:26:4c:eb:14:62:da:2a:8a:82:84:32:38:76:
                    83:48:e0:24:08:71:c7:fa:d9:80:08:aa:d1:cb:ba:
                    c7:2b:5c:4d:ad:0b:61:0c:a7:20:1e:44:80:f9:8c:
                    20:5e:12:cf:ec:3d:bd:76:37:07:f0:23:c9:d7:9b:
                    48:65:de:83:d4:46:17:b3:21:ef:d4:59:31:f4:d0:
                    2e:1e:a1:4b:a9:f8:f2:b1:f5:9c:24:34:05:75:10:
                    a7:77:95:f6:43:a6:d9:16:12:13:1b:44:60:02:7e:
                    03:00:d3:13:f5:d4:85:6b:b3:41:df:74:e3:f8:c5:
                    c1:21:9e:44:d8:24:67:19:ed:47:d1:64:c0:a0:ad:
                    52:e3:dc:17:4f:e1:cf:70:88:9b:9e:71:a1:6b:f2:
                    be:d1:04:fb:b7:67:7c:85:2e:91:8a:7b:d4:b7:f6:
                    97:5e:c0:62:6f:45:41:b2:86:4a:f8:42:dc:36:ef:
                    4d:50:cd:fa:dc:2b:74:ed:8f:e8:22:79:dd:eb:0b:
                    cf:fa:40:21:24:a4:bf:1b:c1:70:2e:80:4b:ea:95:
                    04:d4:1d:e8:48:73:83:95:b6:24:1c:ad:ed:7b:84:
                    89:af:69:0a:3b:7b:26:db:de:7a:bc:e7:2d:36:81:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E6:1A:84:91:FA:30:FA:DF:AC:30:61:42:E6:AF:74:15:02:92:9E
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS203913.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:dc00::/39
                  2a06:1287:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:fe:d4:da:3a:6f:46:54:47:b6:51:37:0f:d3:3f:44:4e:f9:
         4d:7f:6c:45:f4:96:3c:25:49:51:d7:4d:64:a4:14:2c:14:43:
         6e:9e:d2:35:40:62:d5:76:9d:f2:8e:2e:ff:49:e3:29:f0:ba:
         ef:91:99:8a:b2:d6:15:64:33:9e:2a:d3:db:3e:2c:03:9f:34:
         47:3c:6e:c1:23:d3:72:a4:c7:f3:b6:3a:5e:b6:d9:e6:6c:73:
         44:d2:8b:a0:a4:0f:78:8a:9b:85:5a:d8:4f:41:e2:69:55:c7:
         33:30:34:e8:00:a0:39:86:76:62:bb:7f:10:89:c5:51:41:5a:
         67:5e:55:03:d6:fb:de:10:9e:0f:54:6a:32:87:00:f6:35:a8:
         e8:7d:88:f7:61:48:4e:da:1b:21:38:ff:2d:ca:cf:ea:cf:99:
         8a:4e:40:8f:34:ee:b6:fd:64:d7:33:1f:05:38:7c:fe:48:a6:
         12:6a:91:57:83:6b:30:ba:a4:b9:6d:a9:d1:36:89:ba:88:1e:
         0c:bb:bd:1a:7e:42:6c:d8:5d:fd:be:27:4f:4d:28:14:d7:b6:
         1b:b7:19:bb:b9:6e:b8:21:bc:29:bb:42:af:44:19:d5:0e:09:
         e3:fd:55:99:2a:e2:50:94:d1:83:cf:86:ca:70:93:b2:79:5d:
         9d:60:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----