Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS204291.roa
File:                     AS204291.roa (raw, json)
Hash identifier:          TTaTB0H6lANTmMjdB90cbHiuTKL/39KhVVbv5PJjPV4=
Subject key identifier:   47:32:73:0B:72:F4:EC:7D:78:6C:3D:13:5C:C5:3F:A3:5F:9B:D7:98
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       15E8800CD83815FA0464152D18D48559C9F6EFA7
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS204291.roa
Signing time:             Thu 06 Jul 2023 11:17:20 +0000
ROA not before:           Thu 06 Jul 2023 11:12:20 +0000
ROA not after:            Thu 04 Jul 2024 11:17:20 +0000
asID:                     204291
IP address blocks:        2a06:1287:e4f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e8:80:0c:d8:38:15:fa:04:64:15:2d:18:d4:85:59:c9:f6:ef:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:20 2023 GMT
            Not After : Jul  4 11:17:20 2024 GMT
        Subject: CN=4732730B72F4EC7D786C3D135CC53FA35F9BD798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:c6:e8:02:a2:c3:43:c3:40:25:9e:b8:23:
                    bf:95:fc:2d:cf:6e:ec:14:18:b4:87:58:65:38:fb:
                    95:32:93:f3:bf:08:53:73:40:de:92:c1:8c:68:2b:
                    ff:0c:8d:ad:0b:af:68:d1:dc:4e:92:ef:f5:6c:ca:
                    67:12:fa:c0:f7:ba:55:97:1d:b6:28:34:a7:43:08:
                    58:89:7d:a4:7f:04:9e:91:0f:83:e7:4d:5b:4a:06:
                    53:54:73:ab:f8:a1:7a:3f:e2:6b:ec:e0:76:94:68:
                    e3:6e:da:cf:2c:6b:0b:67:29:70:6d:86:0f:ca:11:
                    1d:b4:11:a1:50:e5:1b:23:5a:e0:cb:bd:71:13:0a:
                    06:d7:9a:06:56:5e:89:ec:67:3f:e7:23:b7:4b:b7:
                    d2:f5:d0:37:98:2d:af:cd:7c:3a:80:79:64:a7:b9:
                    4a:ae:0e:ca:61:95:c6:36:0b:53:27:2c:7d:5e:38:
                    dd:92:da:7a:72:3e:20:c2:cc:92:19:f1:4d:cc:ea:
                    76:4e:91:65:e9:9f:5e:ae:0d:ee:2a:b1:c7:e3:f2:
                    29:97:18:52:1b:34:17:bd:ee:c2:50:90:5b:ad:4d:
                    af:5b:cd:82:9d:a3:78:8f:92:99:79:48:42:2f:0b:
                    1f:0e:63:1e:42:d4:8a:36:60:1b:8b:dd:f3:93:42:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:32:73:0B:72:F4:EC:7D:78:6C:3D:13:5C:C5:3F:A3:5F:9B:D7:98
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS204291.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:e4f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:09:18:92:5e:d6:a8:77:ad:b4:cf:e2:a9:e7:34:65:52:
         6a:ce:90:aa:49:7d:77:8e:07:22:7d:77:2f:7d:23:34:db:cf:
         2e:59:bd:e2:7a:b1:b0:d5:28:27:19:b7:4d:93:8b:a5:6d:21:
         66:5c:1b:05:fc:1a:80:18:64:dd:bb:79:e3:2f:e1:d6:4c:13:
         19:ef:be:a1:68:41:b6:a9:3b:c5:97:60:3b:b1:f4:8c:a3:f2:
         11:b3:fd:89:96:70:62:d7:b0:65:c8:78:a2:b0:8f:c9:27:e0:
         0a:20:63:15:6a:bf:71:94:67:41:84:4f:8d:64:a9:29:cf:5c:
         99:85:85:5d:48:f7:cb:bd:15:30:7c:72:62:ed:af:7e:3b:59:
         6c:53:e9:34:78:9f:2a:9a:63:30:14:e7:0f:c0:c3:b3:b0:62:
         bc:e1:d9:f3:4b:d7:53:91:9a:61:ff:b3:62:88:7c:42:b6:a1:
         eb:d4:cb:e1:52:a1:3e:4d:08:3a:b7:6d:4b:a2:48:15:47:5b:
         9a:83:8e:88:ab:2e:f0:55:49:e2:55:bb:21:7f:55:41:32:8c:
         6d:75:e2:3e:50:25:30:fb:9a:46:c2:3c:e3:0e:14:7b:eb:82:
         a3:40:a1:1e:49:c3:72:85:bb:69:14:0c:e2:d2:8e:fa:c5:73:
         32:6e:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----