Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS205980.roa
File:                     AS205980.roa (raw, json)
Hash identifier:          +d50lHsjw/zWKYcPwjrmgtjm4Go/4NgrT8NitFKfuBc=
Subject key identifier:   A8:E6:5D:1C:F7:1F:D4:40:00:72:54:5C:37:FB:EC:FA:57:13:91:4A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       32687A8DEF48E26995F5389C657E21F593F04805
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS205980.roa
Signing time:             Thu 06 Jul 2023 11:17:17 +0000
ROA not before:           Thu 06 Jul 2023 11:12:17 +0000
ROA not after:            Thu 04 Jul 2024 11:17:17 +0000
asID:                     205980
IP address blocks:        2a06:9f45:2800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:68:7a:8d:ef:48:e2:69:95:f5:38:9c:65:7e:21:f5:93:f0:48:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:17 2023 GMT
            Not After : Jul  4 11:17:17 2024 GMT
        Subject: CN=A8E65D1CF71FD4400072545C37FBECFA5713914A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:7f:63:e3:29:b1:7d:3f:5c:fd:b5:c8:db:
                    95:a4:57:af:ff:7d:01:11:b1:9e:92:91:33:a6:d8:
                    1f:45:a1:1f:22:db:63:e5:f5:26:15:d4:d4:05:d4:
                    72:c4:48:b1:1f:65:f4:78:c6:24:2e:78:3c:b4:ec:
                    f1:26:eb:e0:53:36:f4:1e:52:1f:08:07:74:d9:a5:
                    63:1e:a1:cd:f2:5e:2e:7d:aa:bb:08:ee:5d:70:b6:
                    cc:cc:1a:c6:70:53:db:a9:84:62:0b:71:29:cb:0c:
                    31:56:0c:05:47:52:22:5e:78:dd:de:cf:97:b8:f6:
                    ed:a4:9f:0a:24:97:e1:5b:88:ae:d6:06:88:0b:0e:
                    3a:eb:e5:c2:94:32:0d:07:3c:e9:86:a7:0a:a3:ef:
                    15:d6:6c:8f:48:7a:fe:df:af:04:39:b1:7b:67:69:
                    6b:5e:21:34:2f:5f:28:35:f3:d7:83:4d:00:57:8c:
                    e3:4e:be:79:c8:dd:c0:4f:94:a5:70:98:25:ea:35:
                    cf:86:f4:74:53:72:29:4a:50:6e:34:1d:8e:33:ba:
                    41:d8:fc:c3:f3:c1:93:b1:0a:33:8c:2b:30:26:59:
                    e5:60:eb:4c:d6:65:99:88:b4:08:b6:94:8e:71:4f:
                    be:13:a9:4f:31:1b:9d:a4:ee:d6:71:bc:5b:29:ea:
                    84:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E6:5D:1C:F7:1F:D4:40:00:72:54:5C:37:FB:EC:FA:57:13:91:4A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS205980.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f45:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         a4:14:da:cc:f3:96:67:df:bc:75:5b:a8:a0:8d:bf:4c:27:6c:
         e5:db:ec:05:82:15:78:5c:99:a1:ac:a6:d9:01:4c:87:13:d9:
         c5:04:4c:6d:3f:d5:59:b4:b4:71:21:81:5a:fa:d8:7a:8e:2c:
         c4:b0:d6:b4:a0:51:7c:49:a8:2f:65:42:3d:6a:56:66:cd:f7:
         41:6a:46:61:75:fc:84:71:9e:69:cb:5f:94:4d:43:70:ae:05:
         93:df:f7:22:15:1d:58:42:ef:e9:6d:a5:09:d2:70:bf:b4:39:
         80:e0:e5:57:50:65:d3:06:06:31:c4:81:3c:44:71:22:11:6c:
         2a:89:65:f1:b2:29:04:42:d6:b1:7c:43:38:bd:9b:23:01:1f:
         ce:83:2a:05:b3:e0:01:51:cc:a7:43:66:c3:28:86:6e:06:38:
         62:ae:17:05:02:13:a1:a8:54:74:88:31:e9:d7:5e:20:3f:18:
         31:10:a8:7a:25:85:cd:87:38:2e:a4:21:f4:e9:f9:f5:94:30:
         e7:e1:a1:ed:78:a1:68:18:04:7a:90:08:c2:14:48:bf:3b:4b:
         50:a0:9a:5b:53:05:4a:4b:7d:72:e7:50:6a:d0:f1:62:b9:2d:
         65:6e:8c:bd:08:bb:18:21:24:25:20:69:7c:1b:7e:11:33:b1:
         25:a3:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----