Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS204829.roa
File:                     AS204829.roa (raw, json)
Hash identifier:          xih+WX+tR0x/9SzdivN85wPK6NJ9KNPRbihCeMdLoMI=
Subject key identifier:   40:87:08:25:C2:F2:9B:73:83:FB:D3:6E:0F:B2:68:6D:B6:97:FF:CB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       2153449FC925A35BC37A5422C69EA2B9DA541B83
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS204829.roa
Signing time:             Fri 21 Jul 2023 16:44:58 +0000
ROA not before:           Fri 21 Jul 2023 16:39:58 +0000
ROA not after:            Fri 19 Jul 2024 16:44:58 +0000
asID:                     204829
IP address blocks:        2a05:dfc7:9600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:44:9f:c9:25:a3:5b:c3:7a:54:22:c6:9e:a2:b9:da:54:1b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 21 16:39:58 2023 GMT
            Not After : Jul 19 16:44:58 2024 GMT
        Subject: CN=40870825C2F29B7383FBD36E0FB2686DB697FFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:60:6b:e8:a7:2d:fe:c8:8d:c5:97:e4:0f:
                    e7:3c:5e:05:20:8c:5f:3b:f9:96:4c:61:4f:b6:48:
                    21:8a:53:fe:56:d1:6d:54:64:f3:55:39:9e:68:65:
                    b9:03:50:63:df:2a:20:73:c0:66:7c:08:27:6f:ba:
                    49:e8:9c:81:e0:b8:8e:ee:5e:8c:a6:86:16:c3:b4:
                    f7:5c:1b:19:b9:16:fb:a3:58:65:7d:ba:48:55:9f:
                    fd:98:70:7f:94:18:64:2a:cc:55:c1:cd:20:92:45:
                    dc:ed:eb:b2:6a:93:d5:10:45:9d:14:02:0e:45:f6:
                    60:84:5f:35:c0:ad:50:e5:63:78:2f:d8:c5:a8:79:
                    ee:f1:71:b7:32:0d:3a:aa:1a:30:14:45:4c:c4:5a:
                    60:a6:26:65:ea:c3:16:13:1a:ee:5e:7e:0e:b1:94:
                    89:06:15:e1:f5:4d:d0:24:51:12:47:64:5f:6c:aa:
                    f1:df:39:96:19:d3:6d:28:a0:2a:7b:9b:fa:c4:c6:
                    3a:79:cf:4c:7c:3b:64:39:6a:ba:79:1c:0b:90:0c:
                    64:19:64:a5:bb:77:e6:b4:ba:95:8d:2f:6b:db:12:
                    b6:83:bc:b1:74:4b:f5:cf:98:14:5d:18:53:2c:c1:
                    7e:44:dc:9c:17:36:c6:92:4b:ab:34:85:3f:09:e4:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:87:08:25:C2:F2:9B:73:83:FB:D3:6E:0F:B2:68:6D:B6:97:FF:CB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS204829.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9600::/39

    Signature Algorithm: sha256WithRSAEncryption
         17:92:6a:0e:e6:9d:f5:e5:54:5f:ee:74:66:24:f6:91:a7:19:
         5c:85:fd:08:85:2d:c8:94:1a:79:d3:24:71:8e:55:7a:66:97:
         0d:d0:a2:de:3d:4e:5e:38:60:bb:0e:c6:b1:c7:d1:09:2c:ab:
         f5:e6:bb:c0:5e:68:12:5d:7b:fc:64:dc:74:79:6b:b0:ad:bd:
         74:5b:2f:71:c1:14:db:3e:00:8f:df:ba:40:55:59:b1:2f:cc:
         76:f1:97:9e:f0:ee:0c:ac:6c:04:8a:91:e5:66:2f:1a:aa:28:
         99:2e:3d:bb:ad:4e:d0:5a:d2:67:5c:27:90:b9:48:32:b6:7d:
         b9:34:1d:09:bd:af:03:34:52:96:8d:38:ab:f3:31:5c:c5:5d:
         2f:cc:d1:87:2d:6b:85:13:6b:43:d4:c8:3e:55:af:46:67:76:
         6f:67:c3:43:8e:a6:ad:f7:2f:af:8d:e0:cc:43:e3:a5:4d:6b:
         1a:67:6d:48:0c:b8:c0:94:12:0d:19:9d:ce:24:9b:11:a6:cf:
         a1:56:50:23:0a:46:d1:2c:b0:2d:b8:05:da:c8:d3:f2:32:2c:
         2f:de:ee:bb:91:66:6c:38:00:4b:f7:c4:d6:52:fa:4f:7d:b2:
         8d:6b:d6:92:36:7e:22:29:49:9a:d6:92:11:26:69:50:86:80:
         2a:c8:a1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----