Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS204789.roa
File:                     AS204789.roa (raw, json)
Hash identifier:          0jAfq7vGpM3bpaVLBJ6U2UWSJ1YYEimAQNMzNRRHjEA=
Subject key identifier:   B9:9D:0C:51:58:BA:AE:35:E1:FA:65:0B:74:CB:84:E9:A8:E5:64:2B
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0E687F117F36E72F4D4F94C93BE067FDD8E41C24
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS204789.roa
Signing time:             Thu 06 Jul 2023 11:17:22 +0000
ROA not before:           Thu 06 Jul 2023 11:12:22 +0000
ROA not after:            Thu 04 Jul 2024 11:17:22 +0000
asID:                     204789
IP address blocks:        2a05:dfc7:4700::/40 maxlen: 48
                          2a06:1287:9000::/36 maxlen: 36
                          2a06:1287:b000::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:68:7f:11:7f:36:e7:2f:4d:4f:94:c9:3b:e0:67:fd:d8:e4:1c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:22 2023 GMT
            Not After : Jul  4 11:17:22 2024 GMT
        Subject: CN=B99D0C5158BAAE35E1FA650B74CB84E9A8E5642B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:56:2c:1a:e9:13:3b:a1:17:02:02:84:54:
                    77:e1:12:22:66:9f:51:50:8f:65:38:bf:ea:45:e6:
                    4d:ff:be:e0:e0:75:99:ce:4c:33:f6:8c:96:38:0f:
                    bf:2e:37:94:2b:fe:d8:3b:a8:a5:6f:1b:b1:af:bb:
                    2b:df:e7:c4:d3:af:cc:39:84:af:19:88:8c:69:10:
                    ce:7d:5e:a4:dd:1b:5a:2d:2b:73:1d:65:60:d2:d9:
                    2e:7c:77:16:14:5c:c6:20:e0:0a:73:c2:9e:a1:aa:
                    40:66:fb:58:40:bc:b7:07:20:13:d2:ff:ab:1a:a4:
                    9a:9f:10:e7:2e:a9:63:12:df:e8:a4:c7:d9:3e:fe:
                    7d:62:d8:5b:2f:6b:91:4b:d6:95:f2:43:91:45:95:
                    b2:15:3e:1d:d8:05:69:ba:d0:a7:15:53:fd:f2:70:
                    5e:19:1d:cf:36:5e:33:89:c8:4f:c5:83:11:39:d6:
                    6b:01:57:89:c3:5b:91:64:a8:34:1b:cc:9d:19:1d:
                    65:4c:e2:bf:6a:33:ae:a4:e9:cb:f4:47:aa:00:f7:
                    59:c4:c8:ad:1b:a9:c4:a3:f4:3e:a8:87:ce:72:1f:
                    81:04:49:39:55:47:8a:4b:ce:53:d8:d6:9a:14:59:
                    06:fd:ac:9e:3e:92:01:f4:09:3d:98:13:99:56:3e:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9D:0C:51:58:BA:AE:35:E1:FA:65:0B:74:CB:84:E9:A8:E5:64:2B
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS204789.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4700::/40
                  2a06:1287:9000::/36
                  2a06:1287:b000::/39

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:7e:11:cc:1f:63:36:3e:52:f2:4c:3c:21:b8:a2:68:7d:
         eb:fb:b9:d8:df:b9:4e:3d:7d:da:21:80:65:b2:c7:1a:6a:5d:
         77:60:37:ea:31:65:88:c7:bc:e2:30:52:23:8e:61:20:1d:42:
         a8:54:48:f5:e3:0d:65:e5:dc:60:cf:74:f5:ed:6d:e2:9a:6b:
         14:7f:ab:7b:37:ee:11:cf:9f:d3:20:8a:a8:c7:14:b1:7f:7c:
         24:e8:1a:9a:81:26:c8:3d:0f:fc:79:69:43:a1:b1:43:1c:5b:
         5f:d6:85:a4:3b:62:5d:72:f9:6a:d4:27:16:5b:79:49:68:cf:
         85:23:57:6c:7e:5b:66:99:6c:63:2f:ab:ef:cd:28:a3:d9:af:
         78:ec:ff:66:2f:dd:49:87:14:ee:5f:e1:e8:ad:a2:af:ef:5b:
         50:76:a1:87:f0:6b:25:9c:d2:fa:57:d7:c8:5b:16:e2:3c:3f:
         e7:4f:40:47:80:61:77:ea:98:f1:30:2f:ce:f6:00:b2:ff:79:
         ba:a3:d3:16:a5:4f:b4:b5:ea:91:f4:67:17:b8:93:1e:16:f0:
         44:6c:da:13:d6:ed:d6:ac:90:9f:de:58:a5:99:35:62:63:08:
         19:24:fc:66:0f:64:55:3b:d0:85:a9:9b:b0:bf:7e:94:30:ef:
         09:44:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----