Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS206499.roa
File:                     AS206499.roa (raw, json)
Hash identifier:          ieNkPXun1i9vy4xNe/rwFgUCGyfULngl5PYGEWtWiDE=
Subject key identifier:   26:47:96:86:4E:B5:E1:8F:84:0D:36:0A:4F:46:6D:6B:4A:2C:F2:4C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       38D6125E87EC0DF2EBA668882E38CFBA865F275F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS206499.roa
Signing time:             Thu 06 Jul 2023 11:17:15 +0000
ROA not before:           Thu 06 Jul 2023 11:12:15 +0000
ROA not after:            Thu 04 Jul 2024 11:17:15 +0000
asID:                     206499
IP address blocks:        2a06:1287:3300::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d6:12:5e:87:ec:0d:f2:eb:a6:68:88:2e:38:cf:ba:86:5f:27:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:15 2023 GMT
            Not After : Jul  4 11:17:15 2024 GMT
        Subject: CN=264796864EB5E18F840D360A4F466D6B4A2CF24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:47:06:99:a6:f2:4b:e6:54:a5:37:61:24:41:
                    c6:fe:a7:43:0b:11:26:65:2a:96:51:c7:07:6a:15:
                    fd:91:91:3f:f2:5e:d7:c6:bf:35:40:66:40:96:bd:
                    82:05:6b:cb:68:5f:92:22:55:f6:8a:cc:63:6a:cb:
                    fe:70:51:b0:7f:65:d8:4d:30:03:2a:16:ae:b5:48:
                    18:de:3a:f8:37:6c:0a:53:82:86:b4:60:a5:a3:3b:
                    9e:5f:e3:27:7a:20:d4:20:2f:31:56:8a:75:76:a5:
                    98:10:d8:6e:2d:ae:55:20:09:4c:c5:5b:b8:fa:41:
                    f8:ba:5b:a8:43:52:07:bb:ff:10:eb:91:8f:e7:2a:
                    df:e1:5a:18:6f:69:b8:c6:b5:fa:9e:90:f3:7d:fd:
                    5f:d6:74:59:cc:ca:9c:3c:34:b4:00:f7:8d:84:5b:
                    8a:3f:a9:fc:e3:19:8e:d4:23:63:1d:32:3e:27:cf:
                    55:a4:b7:0d:7f:53:a8:e0:e4:b6:b7:14:a5:42:6b:
                    44:dc:f3:88:db:ed:29:cc:d5:bb:9f:44:99:e8:bb:
                    00:4a:ec:40:33:7b:85:b0:fb:2f:14:3f:8c:6b:df:
                    8e:57:c7:0e:7d:1a:e6:d5:10:06:0a:c0:08:70:b5:
                    12:83:e9:18:05:19:f8:ed:12:51:e8:09:1c:e3:1e:
                    f6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:47:96:86:4E:B5:E1:8F:84:0D:36:0A:4F:46:6D:6B:4A:2C:F2:4C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS206499.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3300::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:1d:63:ed:7d:93:ad:ff:83:1d:a2:47:dd:d4:26:1a:c9:f4:
         6c:8a:bc:69:a0:86:1f:34:d2:5a:3f:19:04:f0:b2:3e:fa:7f:
         45:8b:11:15:4c:96:4e:99:80:a8:ac:98:8d:94:7c:96:8b:18:
         c5:ab:a3:e7:7d:86:55:29:e6:f4:5c:8e:e5:c7:56:b6:1e:c7:
         ac:8d:5c:d9:e9:8d:0f:60:f6:b1:27:ec:95:78:3a:ff:73:3b:
         be:0a:c3:f9:20:eb:ce:73:49:70:bc:a5:3f:01:b2:19:1d:fd:
         19:a0:00:b9:74:89:ad:9c:23:e5:64:9b:61:1f:3d:9b:1e:55:
         b7:82:a3:aa:a2:71:9f:b9:97:04:f7:03:aa:7c:7c:00:6a:5f:
         c9:a3:53:6a:17:b8:e4:e4:41:84:09:7b:d7:44:59:5f:65:2b:
         3c:3c:4b:8f:36:33:9a:28:55:8f:e4:de:cd:90:10:be:ec:f7:
         66:91:a3:56:99:df:d8:7f:4a:8b:ec:f1:6c:b3:f2:78:ce:26:
         ca:ed:28:f1:f6:64:ff:85:fc:bf:e3:57:11:7d:c3:19:72:99:
         5a:2e:6c:6c:53:4a:12:5c:96:c9:e2:fc:fd:75:41:ab:33:39:
         be:ac:4c:3e:f1:4a:65:d3:90:87:3d:f2:78:5f:a9:9c:61:24:
         9d:4b:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----