Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS207150.roa
File:                     AS207150.roa (raw, json)
Hash identifier:          M8gSuI0X79I5X0StxaVuNNfWRdiI85vtoD1/E4U5dXc=
Subject key identifier:   3C:69:67:49:66:F9:36:A5:57:78:EE:40:04:2F:B3:85:46:7D:21:56
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6252BB6FD7369F6742161EF11724D12488AEAF0B
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS207150.roa
Signing time:             Thu 06 Jul 2023 11:17:25 +0000
ROA not before:           Thu 06 Jul 2023 11:12:25 +0000
ROA not after:            Thu 04 Jul 2024 11:17:25 +0000
asID:                     207150
IP address blocks:        2a06:1287:2900::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:52:bb:6f:d7:36:9f:67:42:16:1e:f1:17:24:d1:24:88:ae:af:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:25 2023 GMT
            Not After : Jul  4 11:17:25 2024 GMT
        Subject: CN=3C69674966F936A55778EE40042FB385467D2156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:bf:a9:4e:5c:28:2d:1b:08:0a:0b:74:47:
                    54:04:44:36:32:51:fa:da:1d:64:23:e3:ef:a6:b0:
                    23:86:d3:eb:60:4a:82:fa:96:d5:e9:35:68:b7:b0:
                    f7:93:f8:94:fe:41:95:8c:1b:da:61:c6:95:e9:91:
                    b3:93:a7:77:26:0c:7c:19:41:7e:13:4d:c2:0b:3a:
                    bc:a7:30:a2:29:df:da:09:85:d9:20:79:1a:91:88:
                    e1:2c:2a:cf:5f:ab:4b:fe:eb:79:cb:da:62:68:57:
                    2d:d4:22:ea:80:ff:19:90:63:19:00:91:3a:bb:9b:
                    c8:b0:e5:b6:f5:a1:18:5b:fc:f5:61:2d:ae:ed:ca:
                    9f:14:bb:6c:4e:3e:29:4d:60:1c:e6:3f:95:90:ec:
                    e5:1a:06:18:d4:a5:f9:90:de:25:19:7e:54:f6:da:
                    18:86:41:01:0e:83:65:21:ec:8c:d5:e1:8a:8e:f2:
                    3e:8b:cf:30:9b:31:36:90:20:95:bf:72:8c:86:b8:
                    d8:ca:fb:74:c1:a3:59:8c:4c:9d:99:e5:e1:56:99:
                    00:8b:d3:d7:08:42:a8:70:8a:a0:9e:d6:a1:b0:46:
                    87:d3:c6:d0:66:cf:3e:c2:b7:eb:09:2e:af:a5:80:
                    e0:32:30:b7:37:b4:eb:6f:2e:98:5f:34:d8:0b:fd:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:69:67:49:66:F9:36:A5:57:78:EE:40:04:2F:B3:85:46:7D:21:56
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS207150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:2900::/44

    Signature Algorithm: sha256WithRSAEncryption
         c3:98:de:8f:d7:1a:9b:7a:00:b3:c5:2e:ed:35:b9:15:c4:41:
         d9:11:5c:14:bb:da:62:ca:1b:db:00:94:20:a4:21:36:67:19:
         82:5a:cb:c2:6b:73:1e:bf:30:23:44:1f:e7:d8:f9:0a:38:ab:
         d6:39:09:49:a4:78:2e:cf:87:06:80:3e:cb:22:e1:28:71:18:
         6c:9f:d9:3c:31:22:77:35:04:02:14:e8:e7:a2:2e:ff:10:86:
         f4:68:9f:1c:95:50:c2:11:c8:d8:eb:95:b3:ef:f5:d8:ba:1f:
         63:c4:d2:26:ea:e2:43:86:16:9b:18:06:d4:c5:14:88:10:a7:
         d3:77:01:d5:8a:00:19:fc:46:41:33:64:c3:85:c1:d9:c5:71:
         cf:83:7d:9b:d0:81:fe:ee:41:8f:ac:67:c7:43:df:6c:ad:74:
         b8:9e:4c:fe:0c:f0:b1:21:a4:d9:be:84:65:c2:ba:26:1f:b6:
         fd:11:52:1c:ef:d6:eb:9c:8b:52:a3:8d:08:cd:a5:b7:81:3b:
         f2:da:4c:26:e3:22:54:df:e1:63:20:65:41:7e:d9:97:24:bb:
         d4:3e:7f:46:35:8b:cd:49:07:2a:05:c7:46:09:4f:c7:35:34:
         89:72:d9:64:6b:fc:ad:62:f7:80:90:c6:a1:f6:9e:ec:fa:e7:
         ec:fb:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----