Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          8H9VLKJOeYv3VK2ew4ru+4Fylc59XTRZAz71WS+SjoU=
Subject key identifier:   0B:13:97:BB:35:27:D4:C4:37:6E:82:DB:45:25:EB:B5:DC:EF:A6:DF
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0A73A8DF6E02CEF700645C5A921B01090F45716C
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS20473.roa
Signing time:             Thu 03 Aug 2023 11:55:14 +0000
ROA not before:           Thu 03 Aug 2023 11:50:14 +0000
ROA not after:            Thu 01 Aug 2024 11:55:14 +0000
asID:                     20473
IP address blocks:        2a05:dfc7:c000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:73:a8:df:6e:02:ce:f7:00:64:5c:5a:92:1b:01:09:0f:45:71:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug  3 11:50:14 2023 GMT
            Not After : Aug  1 11:55:14 2024 GMT
        Subject: CN=0B1397BB3527D4C4376E82DB4525EBB5DCEFA6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9b:25:66:91:51:e8:44:b9:33:dc:21:78:d8:
                    72:d7:71:fc:9b:89:b2:eb:09:d9:a9:32:b1:9c:8d:
                    74:78:d6:e3:c3:ca:a8:c7:ed:46:2e:c9:0d:05:b9:
                    8f:c8:ce:4f:84:61:cd:52:66:c3:bc:38:1d:ee:47:
                    43:26:75:c0:11:8a:75:a0:97:9d:b8:f8:37:0a:40:
                    86:42:09:3b:58:ee:59:29:71:aa:7a:55:ed:79:0b:
                    b1:02:91:39:79:f9:c1:c1:9f:57:c6:0d:a0:f8:25:
                    d8:9f:dd:8a:70:7f:ca:3c:8d:30:15:26:6b:3e:e1:
                    b4:d2:57:89:d3:6c:ef:72:4d:27:ca:4a:4c:c6:4b:
                    24:27:81:d6:ff:98:d5:ed:d4:1e:22:c7:3a:b9:73:
                    83:6d:08:0c:68:e2:58:7b:7e:3b:ef:30:4c:76:a4:
                    1a:9d:df:59:cf:90:bc:77:b9:25:4b:c8:b0:e7:45:
                    5a:fa:80:2f:c0:9c:34:de:44:d1:e1:07:d1:b8:3c:
                    45:ea:56:61:92:ab:bb:66:2f:48:d2:30:79:9b:c7:
                    05:88:a7:8d:1b:18:8b:f8:b8:c7:96:44:31:f4:23:
                    b9:ee:e8:97:5b:7c:07:75:0c:e2:bf:a0:21:b9:c0:
                    69:95:5f:e7:e5:04:58:81:3a:6d:3e:df:64:11:88:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:13:97:BB:35:27:D4:C4:37:6E:82:DB:45:25:EB:B5:DC:EF:A6:DF
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:c000::/39

    Signature Algorithm: sha256WithRSAEncryption
         b6:fa:74:6c:35:65:98:15:57:23:5e:29:7c:d9:bb:a3:0b:ae:
         82:e3:b1:6f:89:47:9a:88:91:9e:2b:e2:d9:52:cf:7a:fe:4c:
         1d:be:e0:8e:49:b0:7c:94:ce:3f:1d:fd:eb:7c:22:be:6e:24:
         0a:39:c6:98:a5:b4:d4:fc:f6:84:05:9a:25:5e:97:be:01:1a:
         38:33:82:9c:1e:c4:72:32:c5:fd:6b:3f:a9:5f:15:3b:aa:f6:
         dc:9b:09:d9:f9:68:0c:6a:86:7d:40:f8:cd:92:31:c3:3d:98:
         69:23:12:88:7a:a7:20:f1:fd:b9:f9:1f:ef:48:91:11:09:42:
         ac:61:06:62:77:97:1a:f1:c5:90:49:5f:c8:49:ae:69:91:15:
         fd:b8:b8:19:1e:31:42:39:7e:36:b4:c7:e4:ad:81:ff:fb:29:
         1c:a6:8c:77:50:bf:b2:ff:b8:6e:23:9e:7e:dc:97:93:25:ea:
         f1:92:55:8b:ec:b3:08:de:8d:3c:d6:ef:fd:4a:92:42:4e:95:
         81:ee:a8:3d:ea:0c:22:5e:fe:f8:43:8f:fb:22:fc:88:3e:45:
         57:30:f1:a4:5a:63:9b:a2:65:98:0f:69:84:72:7e:4c:4a:e1:
         86:88:df:64:ba:84:b3:fb:1b:57:9b:c8:29:d3:d0:97:70:b8:
         12:a0:1f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----