Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS204508.roa
File:                     AS204508.roa (raw, json)
Hash identifier:          BzLrdcBeduwwM9rbDQHp9J7LUCHRoYxmbbWgRe6WrIA=
Subject key identifier:   EA:C8:9C:54:70:0C:C2:3E:62:3A:7B:97:38:C7:85:F2:1C:CA:5F:1B
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1141242FFA0326AC49556753895F823C0BD50C93
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS204508.roa
Signing time:             Mon 16 Oct 2023 08:16:52 +0000
ROA not before:           Mon 16 Oct 2023 08:11:52 +0000
ROA not after:            Mon 14 Oct 2024 08:16:52 +0000
asID:                     204508
IP address blocks:        2a05:dfc7:800::/39 maxlen: 48
                          2a06:1287:b200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:41:24:2f:fa:03:26:ac:49:55:67:53:89:5f:82:3c:0b:d5:0c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct 16 08:11:52 2023 GMT
            Not After : Oct 14 08:16:52 2024 GMT
        Subject: CN=EAC89C54700CC23E623A7B9738C785F21CCA5F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:28:a3:84:51:25:3f:25:15:85:56:e0:10:
                    5c:fa:60:2a:71:90:7c:5f:03:10:a2:2e:38:cd:3a:
                    39:ad:83:87:61:6b:1d:c7:a7:cb:3c:c3:36:48:f1:
                    77:9d:39:e4:03:c4:b8:ea:14:df:46:0b:c0:80:76:
                    75:59:d2:78:68:e2:b2:e2:27:d3:27:8a:f8:8e:9a:
                    75:9f:4f:4d:07:ab:fc:40:7d:26:c0:51:f4:24:32:
                    99:16:0e:38:28:d4:25:47:cb:8f:c9:c9:bf:b8:d1:
                    c5:3c:c5:b2:7c:51:1d:b9:1f:88:49:88:19:30:8b:
                    6d:8d:9c:42:ee:35:4a:6c:7a:cf:4b:7f:ab:94:48:
                    ec:88:52:a0:c8:8b:d1:6d:35:9c:a8:2d:d9:20:b8:
                    13:2f:24:ee:4a:d4:eb:e4:80:9e:a6:1b:5c:a8:1e:
                    e4:3c:33:4a:c7:c2:68:d1:67:a5:08:fa:0b:82:2a:
                    1b:a1:66:ed:18:5c:79:24:f6:ba:63:6c:d8:92:18:
                    5c:b8:76:ce:ab:db:64:36:d3:43:74:66:42:4f:3a:
                    8c:a3:05:77:81:20:3a:00:8f:e4:a7:bf:a7:34:da:
                    45:bf:6a:9e:29:d5:ab:fc:c3:39:5c:b0:ab:bb:fc:
                    f0:26:5b:5a:05:c6:6c:a2:f2:07:de:87:b2:af:e6:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C8:9C:54:70:0C:C2:3E:62:3A:7B:97:38:C7:85:F2:1C:CA:5F:1B
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS204508.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:800::/39
                  2a06:1287:b200::/39

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:3d:4b:2a:ba:5d:00:1f:55:05:f7:3c:b4:8b:98:87:23:
         23:1d:8b:20:f2:71:96:43:6d:b7:13:31:e8:6e:e8:89:55:73:
         1c:47:0f:f8:38:80:28:3f:69:9a:26:ef:b2:96:3f:1d:d5:0e:
         ea:a9:85:30:cd:50:42:17:78:06:d7:e4:be:b6:22:e6:00:03:
         cc:da:8b:06:d2:52:4d:6b:88:82:3e:18:97:27:93:f1:69:bd:
         91:5b:00:9e:46:cd:77:38:32:4c:35:09:7c:4e:c2:b3:4c:54:
         d3:4b:cc:47:47:01:f3:b3:65:d8:59:29:cf:f9:07:9d:26:aa:
         b9:9a:99:24:93:e5:23:33:a0:2c:bc:8c:58:14:3c:b9:df:c9:
         54:2f:1b:4b:ff:92:72:29:22:c1:ed:52:51:ff:47:63:4f:09:
         5a:a2:77:a7:fa:91:cf:80:c4:d1:9f:47:60:c4:36:5d:3e:5c:
         2c:ae:43:0e:e9:80:53:79:2f:bb:00:b0:1a:1d:2c:06:41:3e:
         05:70:75:52:82:1c:bc:08:5e:bb:8c:8d:c2:52:32:58:43:d2:
         4d:97:7c:1f:d8:2e:82:84:d8:d1:58:bd:f0:45:2b:a4:b4:86:
         0c:60:c9:69:e2:61:f5:8c:0b:9e:d7:78:9f:45:33:13:5c:59:
         02:ac:91:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----