Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS205531.roa
File:                     AS205531.roa (raw, json)
Hash identifier:          LnE5gYkTq+z8B/eVL3BVBHDCHOT6x17q6oe2A0ZV1hU=
Subject key identifier:   95:85:00:AE:08:76:48:04:4C:A6:14:07:40:E0:B2:71:37:CA:24:0F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       08553F5DDDE1BA6CDEC6A8EE88B79B33A45B52AA
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS205531.roa
Signing time:             Thu 06 Jul 2023 11:17:19 +0000
ROA not before:           Thu 06 Jul 2023 11:12:19 +0000
ROA not after:            Thu 04 Jul 2024 11:17:19 +0000
asID:                     205531
IP address blocks:        2a05:dfc7:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:55:3f:5d:dd:e1:ba:6c:de:c6:a8:ee:88:b7:9b:33:a4:5b:52:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:19 2023 GMT
            Not After : Jul  4 11:17:19 2024 GMT
        Subject: CN=958500AE087648044CA6140740E0B27137CA240F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6b:47:78:05:9c:23:26:23:d7:4e:69:c4:28:
                    f1:c7:0f:bc:bc:3e:18:21:fb:47:1a:8c:10:10:a2:
                    72:83:1f:7c:55:4d:b7:f6:ce:c9:cb:78:2f:33:57:
                    8f:28:47:2a:fa:df:64:79:c2:d7:a8:cf:77:8f:70:
                    7a:0e:8d:1f:83:e0:9d:71:b4:17:96:af:23:de:1b:
                    2f:b1:fb:0c:0e:84:ab:0c:d8:3f:72:37:d8:39:74:
                    93:22:fb:1f:14:e0:75:b8:0a:91:68:16:f6:e1:45:
                    d5:d1:f5:68:31:09:57:be:8b:4b:d4:d4:7b:57:89:
                    d4:ba:bc:8f:cf:4a:90:90:79:df:41:fe:a2:d3:0f:
                    62:cc:a5:00:49:74:14:70:5f:6b:4a:cc:99:ab:7c:
                    6f:38:71:97:9e:a1:a9:41:2d:6f:f6:61:fe:99:0e:
                    cc:7a:a3:9d:7c:5d:34:6b:46:e2:03:c0:42:ce:23:
                    fd:36:6b:8c:0d:9b:0d:6f:14:72:be:86:1e:76:15:
                    73:b5:cf:99:10:9e:98:ae:4a:b5:27:60:b8:bb:84:
                    17:45:49:6c:36:94:b1:43:ea:b4:bc:b0:92:dd:cb:
                    3e:fd:7c:f7:bf:ca:6c:12:af:fa:7d:80:aa:cd:04:
                    01:5f:d5:b9:d5:27:f2:43:7b:ae:7e:9f:f9:6e:6d:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:00:AE:08:76:48:04:4C:A6:14:07:40:E0:B2:71:37:CA:24:0F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS205531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:9b:35:b7:7b:63:d7:ab:4e:b3:00:ce:02:36:04:d7:8c:
         1d:8a:06:2b:1a:49:9e:67:ac:7e:a4:d8:42:b9:ae:09:6a:d1:
         6e:f5:bd:28:5a:dc:48:18:d1:e7:c6:9b:a6:74:5a:1e:56:5b:
         16:dd:5a:af:65:2d:1b:f5:3e:c3:17:87:6e:df:d4:5f:c7:be:
         93:07:be:09:62:10:03:1d:64:c0:b7:9e:47:81:81:6d:8f:f5:
         bf:8b:61:97:54:ad:a7:50:f7:cf:b9:29:48:10:e3:5c:0e:f6:
         a3:e0:42:d9:d0:13:07:67:db:2a:9e:65:9a:26:dd:60:bc:6b:
         ea:7e:af:f4:a9:b8:cb:7e:37:ce:55:93:2e:2e:30:89:20:69:
         76:13:2d:84:db:a8:a3:52:5b:0d:9e:fa:35:3c:bc:8c:a1:6b:
         95:f7:a1:19:cd:4a:e9:2c:c4:fb:0e:ee:42:0b:35:a7:b5:70:
         5c:9f:6a:6c:58:29:21:d5:63:83:2e:7d:9a:da:8c:1c:d8:db:
         59:df:79:3f:66:da:79:ce:1f:d9:91:9c:0f:0e:3f:69:3b:3c:
         54:b3:c5:5e:2c:e2:d4:5e:9f:9e:06:a1:10:70:31:d7:ba:d7:
         34:c4:e2:dd:58:ed:a1:7c:b1:82:cf:da:e0:06:31:ea:fb:49:
         67:1a:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----