Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS204136.roa
File:                     AS204136.roa (raw, json)
Hash identifier:          lfwN56Li0QYJjcxVrXBdJ620YO1oCfa5pbUagdmoftY=
Subject key identifier:   A5:24:EF:E7:63:35:C0:44:FD:3E:1A:32:EC:F0:53:EF:17:0A:1F:5D
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4D0288643C32343DD994F2980B7DAB0023025ED7
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS204136.roa
Signing time:             Thu 06 Jul 2023 11:17:15 +0000
ROA not before:           Thu 06 Jul 2023 11:12:15 +0000
ROA not after:            Thu 04 Jul 2024 11:17:15 +0000
asID:                     204136
IP address blocks:        2a05:dfc7:dfc7::/48 maxlen: 48
                          2a05:dfc7:dfc8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:02:88:64:3c:32:34:3d:d9:94:f2:98:0b:7d:ab:00:23:02:5e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:15 2023 GMT
            Not After : Jul  4 11:17:15 2024 GMT
        Subject: CN=A524EFE76335C044FD3E1A32ECF053EF170A1F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:c2:60:e3:6c:ef:88:3a:8f:29:07:31:7d:
                    e9:ee:4a:ac:51:73:32:a3:d4:97:f9:f8:38:24:e8:
                    31:b8:6b:31:e7:57:5a:97:0a:91:6b:12:5a:b5:92:
                    1c:a2:03:88:75:a2:e0:2a:42:43:6d:29:11:88:3a:
                    0d:e3:b8:e2:20:91:23:48:a8:0e:0d:47:b9:2b:21:
                    fb:1a:c6:e5:4b:dd:3b:05:c5:27:c9:a0:0e:e6:45:
                    6c:a2:ca:be:77:bb:03:7f:c9:08:e3:c8:57:74:41:
                    d3:f4:b4:d3:6a:f9:2e:f6:f2:a4:bc:3d:fb:e9:39:
                    60:87:af:83:12:49:f2:70:69:4f:44:0e:09:3c:9a:
                    8d:08:3e:72:73:c9:02:9b:e9:fb:76:ad:f5:21:f9:
                    f0:f5:04:24:86:e7:d4:d0:48:10:44:29:89:be:d5:
                    b0:c6:d8:1c:b8:ca:df:5c:5e:cc:d9:7e:f7:d1:a2:
                    dc:23:db:8d:cd:e1:ed:f1:28:6f:db:3e:58:37:7d:
                    6c:3f:28:c3:e1:73:f1:04:34:63:16:29:19:5b:1c:
                    48:df:37:9d:cf:7b:53:f0:7e:58:46:71:65:76:c7:
                    a3:5c:c5:0e:c7:ce:0f:79:97:2d:36:90:43:cc:2a:
                    5d:2e:9f:c1:80:84:3e:05:f0:7e:6f:d4:b9:75:30:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:24:EF:E7:63:35:C0:44:FD:3E:1A:32:EC:F0:53:EF:17:0A:1F:5D
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS204136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:dfc7::-2a05:dfc7:dfc8:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:69:24:33:b5:1a:3c:3d:57:45:e7:bc:73:b6:f9:fb:c9:
         23:af:b1:28:77:1d:df:f6:15:7c:aa:75:f3:64:d5:f6:f2:81:
         76:92:e5:cc:23:8b:3a:08:91:c0:46:06:a0:cc:ed:ba:cf:c8:
         03:39:3b:d8:bd:b9:f2:85:4a:0a:20:e1:53:ca:fc:02:54:72:
         c0:aa:4a:d9:1c:f5:bb:44:18:75:a9:64:ff:37:3e:41:5a:fb:
         eb:6f:ef:53:11:c7:9a:37:1f:39:54:2a:3f:47:56:2b:b4:70:
         17:38:ce:b9:64:32:d3:2d:21:fd:04:c6:59:b0:d3:01:b3:2d:
         5c:af:10:77:8a:f9:c0:17:da:2e:d4:3f:a0:8d:0b:ae:d6:71:
         70:1e:16:07:04:b7:6e:82:77:f5:a2:37:51:af:06:01:68:fa:
         1a:6c:65:02:70:6a:07:92:78:54:e7:a4:d2:84:70:79:fb:05:
         39:91:be:a5:a0:52:6c:06:a0:9a:09:7a:9e:60:c5:c0:a0:b3:
         e5:06:9c:39:82:5f:84:64:47:a2:e0:d7:e5:67:13:ef:7c:c6:
         2e:82:42:f7:41:23:46:2c:a7:17:b6:10:c0:d7:21:39:01:05:
         84:90:cf:a1:a8:b9:25:88:58:1d:2e:9f:2c:fb:9b:58:c1:31:
         90:3d:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----