Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS204374.roa
File:                     AS204374.roa (raw, json)
Hash identifier:          k1L/ZKFEOeOKevTjiA+tUZ2vFYCiZw+1uHwVi/5eLY8=
Subject key identifier:   DC:DA:DC:0B:8B:FD:EC:B9:EF:5B:8F:0D:16:F4:6B:47:20:CF:DA:57
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5F4DE8C93E687F623B61A8C47376944D7039D2D5
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS204374.roa
Signing time:             Thu 06 Jul 2023 11:17:07 +0000
ROA not before:           Thu 06 Jul 2023 11:12:07 +0000
ROA not after:            Thu 04 Jul 2024 11:17:07 +0000
asID:                     204374
IP address blocks:        2a06:1287:1300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:4d:e8:c9:3e:68:7f:62:3b:61:a8:c4:73:76:94:4d:70:39:d2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:07 2023 GMT
            Not After : Jul  4 11:17:07 2024 GMT
        Subject: CN=DCDADC0B8BFDECB9EF5B8F0D16F46B4720CFDA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:57:c2:61:42:aa:99:ba:c4:de:d0:4d:74:
                    3d:55:e4:bc:e0:3e:c1:cb:dd:d6:7d:c0:68:3c:d0:
                    0a:63:a9:83:ac:15:99:ad:b1:05:6f:8c:77:b5:ba:
                    03:f6:17:88:b5:ed:87:86:a6:98:10:c6:70:15:05:
                    5f:9b:25:6a:21:38:b8:76:85:e6:88:85:b5:04:f4:
                    3f:0c:ed:99:ed:36:a2:50:bf:33:52:8f:c2:c2:9d:
                    f9:ee:1d:7a:5e:dc:76:df:6f:62:e5:fb:19:40:6c:
                    5d:bd:af:af:b2:a5:a1:7b:cc:05:b2:25:ff:6d:96:
                    eb:af:47:84:b6:64:aa:e6:fd:3b:f1:38:53:a9:9b:
                    45:03:a9:99:6a:2d:0f:d2:af:ce:93:63:0c:78:b9:
                    23:50:fe:05:25:5b:5c:7f:d6:04:74:b9:63:e8:95:
                    8b:aa:44:54:c6:20:aa:da:74:b2:72:5e:52:e1:54:
                    fe:7a:13:5a:67:6f:cc:49:3c:92:64:00:d1:d7:f5:
                    4d:10:cd:e0:48:5a:2a:3c:51:c8:22:b1:9c:c2:69:
                    e4:6b:da:65:b5:d4:2b:7c:3c:f0:29:26:42:90:27:
                    93:23:6c:c5:ed:9e:0b:2b:76:47:c7:11:9e:07:ce:
                    f9:ff:e4:a6:8f:b3:65:ca:dd:3c:d6:ee:cb:37:d0:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DA:DC:0B:8B:FD:EC:B9:EF:5B:8F:0D:16:F4:6B:47:20:CF:DA:57
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS204374.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:a9:03:e5:2d:ef:0f:22:12:19:03:da:61:52:08:78:f0:66:
         32:08:2c:4d:07:0a:a5:e2:d8:b6:b9:52:a2:1e:e0:d4:74:fe:
         2d:ce:2e:64:cf:ae:4c:1f:39:22:2f:13:32:ca:37:3b:fd:31:
         e0:29:48:21:e1:4d:53:39:bf:22:81:24:da:e0:f8:6b:5c:9e:
         7e:66:91:a3:26:86:e8:d2:13:81:31:eb:f5:23:e1:f8:8d:20:
         1f:dc:74:fb:ec:39:e2:cb:05:3f:68:28:e0:78:1b:a3:5e:37:
         a5:c2:59:9b:b6:29:d4:f2:ab:72:c4:6b:88:a7:6e:e9:5f:bd:
         71:4a:06:a3:9b:1c:8f:d9:44:99:83:4d:0e:f9:4b:34:c3:f4:
         fa:31:fa:e5:94:7b:fd:6a:a8:fc:81:84:2a:94:ba:f8:2f:2c:
         9b:e9:52:53:d8:dd:f5:42:11:21:c1:24:9b:49:79:99:8f:3d:
         3e:e1:01:83:d5:18:22:c7:b8:13:00:55:11:69:08:b5:70:ab:
         1f:7f:ce:ab:3b:d5:7f:98:05:2a:e4:2f:0b:5c:f0:e7:86:67:
         5d:b7:bc:3d:cf:c3:1e:fa:ed:c7:91:af:df:86:1d:d7:bb:db:
         ad:59:f4:05:ef:2b:b6:46:49:f2:a0:dc:01:f6:d6:5d:ad:3c:
         09:62:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----