Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS205432.roa
File:                     AS205432.roa (raw, json)
Hash identifier:          sZY+NDXS4Ne5f36HGhsjvuePTXpr4jBl9VugY2KlF60=
Subject key identifier:   86:ED:87:64:B4:BE:70:32:32:56:9D:ED:2A:C3:D9:CD:B6:7A:9D:B5
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       7FA34714D582D4500B8A44535B4A2905A76CD09A
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS205432.roa
Signing time:             Sun 03 Sep 2023 13:37:50 +0000
ROA not before:           Sun 03 Sep 2023 13:32:50 +0000
ROA not after:            Sun 01 Sep 2024 13:37:50 +0000
asID:                     205432
IP address blocks:        2a05:dfc7::/32 maxlen: 48
                          2a06:1287::/32 maxlen: 48
                          2a06:1287:7400::/39 maxlen: 39
                          2a06:9f45::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a3:47:14:d5:82:d4:50:0b:8a:44:53:5b:4a:29:05:a7:6c:d0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep  3 13:32:50 2023 GMT
            Not After : Sep  1 13:37:50 2024 GMT
        Subject: CN=86ED8764B4BE703232569DED2AC3D9CDB67A9DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:59:f1:95:bd:1b:17:d0:dc:53:94:0a:a0:
                    2f:4c:49:9c:01:99:01:3b:d7:46:b0:92:a5:bf:ec:
                    0a:65:ac:78:66:2a:43:de:b3:5f:66:b5:a1:5b:75:
                    80:f3:36:a5:6c:6a:29:37:61:cd:ae:ed:2a:c8:1d:
                    c4:dc:1b:21:97:2d:f8:6e:6f:96:92:11:a4:e5:fa:
                    03:be:ea:f1:6b:df:e3:d6:94:e1:ee:19:fa:8c:37:
                    c5:69:35:79:d5:85:e0:0f:1c:67:94:ce:a8:14:9c:
                    48:9a:da:7a:6e:31:15:05:9e:b8:19:65:12:75:ac:
                    92:8a:2e:9a:a6:db:e8:bf:ec:d9:87:bd:53:db:68:
                    c4:40:2c:99:43:55:c8:c1:aa:a1:36:cd:d4:aa:1a:
                    5f:ba:0b:ea:67:c0:a7:e2:e0:3a:62:5c:1b:4a:53:
                    3a:2c:75:29:c4:c6:80:57:34:e4:94:7d:0c:f7:d3:
                    12:e7:a8:be:18:8c:32:2c:33:2b:f7:d2:ae:53:08:
                    35:68:52:80:7c:4e:92:51:5e:db:3a:c3:76:8d:d9:
                    d7:b7:b6:c4:0f:f4:5c:4c:c0:ca:35:e0:21:d9:71:
                    d4:e7:cf:d9:2a:79:2c:38:fc:35:4f:bf:e6:a4:6f:
                    5c:75:4c:94:60:99:1b:b1:e5:de:e5:3d:1b:8c:0c:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:ED:87:64:B4:BE:70:32:32:56:9D:ED:2A:C3:D9:CD:B6:7A:9D:B5
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS205432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7::/32
                  2a06:1287::/32
                  2a06:9f45::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:14:10:84:c7:c0:65:11:36:28:4d:39:9e:bf:d8:eb:50:83:
         87:69:e1:1b:e7:76:4b:f3:fd:56:d3:a6:ae:d2:a9:74:d8:ac:
         b8:ea:89:a3:f5:49:a1:3f:63:16:90:73:27:d8:83:b3:cf:2a:
         4c:e4:f0:7d:df:b5:b3:77:d8:13:98:92:3d:8c:d0:74:1d:5c:
         c5:30:e3:ac:90:6b:1b:52:b9:ab:f5:0e:c0:31:18:7b:db:8e:
         a3:1b:9d:5d:a4:15:cb:8f:ca:29:d3:7b:d9:fc:41:0b:fc:44:
         a8:20:75:ea:de:37:01:42:dc:7c:4e:a7:ab:d2:5e:b9:27:e4:
         b2:e0:42:f8:90:97:16:94:53:63:21:38:e7:4c:ef:3e:af:73:
         90:05:08:26:3d:16:8e:ec:7c:20:de:26:2e:39:9e:4d:7a:13:
         20:1f:6f:48:90:7f:7a:56:89:04:d9:c2:43:84:5c:fb:d0:10:
         6d:97:15:ed:13:5e:57:17:84:6d:67:a5:fe:57:27:b7:7f:d8:
         88:60:12:4e:a2:92:a2:0f:b1:2c:72:ed:e0:08:d6:71:81:e8:
         11:45:96:f9:1e:0c:70:f1:c5:ed:17:31:12:8c:ad:df:23:40:
         87:f5:fe:3c:ee:47:1b:be:b4:09:5b:1b:f1:6c:30:f4:e0:a2:
         45:2b:97:d5
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUf6NHFNWC1FALikRTW0opBads0JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA5MDMxMzMyNTBaFw0yNDA5MDExMzM3NTBaMDMxMTAvBgNV
BAMTKDg2RUQ4NzY0QjRCRTcwMzIzMjU2OURFRDJBQzNEOUNEQjY3QTlEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqFnxlb0bF9DcU5QKoC9MSZwB
mQE710awkqW/7AplrHhmKkPes19mtaFbdYDzNqVsaik3Yc2u7SrIHcTcGyGXLfhu
b5aSEaTl+gO+6vFr3+PWlOHuGfqMN8VpNXnVheAPHGeUzqgUnEia2npuMRUFnrgZ
ZRJ1rJKKLpqm2+i/7NmHvVPbaMRALJlDVcjBqqE2zdSqGl+6C+pnwKfi4DpiXBtK
UzosdSnExoBXNOSUfQz30xLnqL4YjDIsMyv30q5TCDVoUoB8TpJRXts6w3aN2de3
tsQP9FxMwMo14CHZcdTnz9kqeSw4/DVPv+akb1x1TJRgmRux5d7lPRuMDCTXAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUhu2HZLS+cDIyVp3tKsPZzbZ6nbUwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjA1NDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUAKgXfxwMFACoGEocDBQAq
Bp9FMA0GCSqGSIb3DQEBCwUAA4IBAQBzFBCEx8BlETYoTTmev9jrUIOHaeEb53ZL
8/1W06au0ql02Ky46omj9UmhP2MWkHMn2IOzzypM5PB937Wzd9gTmJI9jNB0HVzF
MOOskGsbUrmr9Q7AMRh7246jG51dpBXLj8op03vZ/EEL/ESoIHXq3jcBQtx8Tqer
0l65J+Sy4EL4kJcWlFNjITjnTO8+r3OQBQgmPRaO7Hwg3iYuOZ5NehMgH29IkH96
VokE2cJDhFz70BBtlxXtE15XF4RtZ6X+Vye3f9iIYBJOopKiD7Escu3gCNZxgegR
RZb5Hgxw8cXtFzESjK3fI0CH9f487kcbvrQJWxvxbDD04KJFK5fV
-----END CERTIFICATE-----