Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS207466.roa
File:                     AS207466.roa (raw, json)
Hash identifier:          RVp/yBWaw1IRrDPJBYMXu1HkM0UJ2xDe+bp1BBIrq08=
Subject key identifier:   CB:FB:7F:F8:5E:25:F2:70:0F:10:0A:CE:5F:E8:DB:1D:22:77:5A:51
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       302DD91C70B621C9155881D744BB5996E3E5DE3F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS207466.roa
Signing time:             Wed 12 Jul 2023 08:37:32 +0000
ROA not before:           Wed 12 Jul 2023 08:32:32 +0000
ROA not after:            Wed 10 Jul 2024 08:37:32 +0000
asID:                     207466
IP address blocks:        2a05:dfc7:cc00::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2d:d9:1c:70:b6:21:c9:15:58:81:d7:44:bb:59:96:e3:e5:de:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 12 08:32:32 2023 GMT
            Not After : Jul 10 08:37:32 2024 GMT
        Subject: CN=CBFB7FF85E25F2700F100ACE5FE8DB1D22775A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:c5:bb:1b:f0:81:ba:9a:4c:0c:b6:6f:3b:
                    aa:39:9e:35:f2:d2:68:59:73:a6:56:09:6b:9f:af:
                    c1:98:2f:d8:d3:8f:c7:f3:5e:d6:f5:03:d8:64:24:
                    e7:4e:d8:f9:46:08:d8:4f:e6:43:5f:de:7b:e4:83:
                    29:da:ea:69:a3:5f:f1:89:27:b3:fd:0f:58:c3:50:
                    13:c5:2c:84:76:cc:da:f5:ab:54:39:f7:f9:2f:d5:
                    5b:33:fb:eb:a5:c8:0a:f3:b2:94:1b:ff:28:01:4c:
                    c8:07:ce:e5:ac:62:41:d3:da:3d:36:1b:b8:52:c2:
                    b2:f5:2e:8e:f6:c4:0f:8f:30:d9:f5:08:38:fe:11:
                    42:3f:0a:e5:28:6d:67:d5:e6:2f:a3:a4:68:9e:bd:
                    20:50:f9:eb:fa:a7:f7:e6:26:ad:7a:54:ba:f4:16:
                    ca:13:dd:60:5e:10:53:3e:f7:e1:f1:8f:f2:e4:96:
                    9c:05:07:2c:3d:97:f1:e4:30:ab:da:21:f5:9c:95:
                    f3:3d:61:33:e9:6c:93:e2:40:1f:11:3e:46:2c:ec:
                    bd:17:8b:56:e0:bb:2e:dd:7c:ba:c0:03:e0:3d:c6:
                    96:6e:7b:1b:b6:00:e2:5c:50:b3:22:05:ae:dc:2c:
                    0e:77:36:cc:40:bf:5b:53:59:a7:9c:80:75:f6:1b:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FB:7F:F8:5E:25:F2:70:0F:10:0A:CE:5F:E8:DB:1D:22:77:5A:51
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS207466.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:cc00::/39

    Signature Algorithm: sha256WithRSAEncryption
         75:d6:9a:a6:6c:85:67:7e:a8:e4:34:d4:2a:10:00:30:24:a5:
         32:33:1c:60:ae:29:56:e0:50:67:b4:74:c7:58:7b:f6:25:01:
         27:5b:de:34:6a:dd:14:d3:2a:7a:ae:74:74:22:c9:8b:1b:81:
         aa:ba:dd:35:42:a5:2c:bd:2e:30:2e:0f:d3:f5:b0:d1:d7:24:
         55:40:7f:42:82:20:f7:c9:7a:34:7f:d2:d9:a0:0c:f0:d9:c4:
         6e:d7:36:45:c0:6c:c2:b9:5f:e0:f3:85:ed:05:85:03:21:00:
         c2:32:44:21:6e:6f:c9:7e:26:1b:a4:27:58:7b:b6:0b:fd:b3:
         14:75:3a:d2:20:e5:a9:d9:91:e6:bb:90:38:c8:c9:d0:73:3c:
         38:14:c4:bc:24:49:3f:c6:67:e3:a5:9e:a8:ed:14:a4:2f:72:
         a6:15:d2:ed:88:15:a4:e0:fb:f6:86:33:42:92:f8:5a:95:02:
         e2:aa:e4:9e:53:4a:48:7c:1f:2f:e2:9c:01:d3:a3:ca:09:d7:
         a3:48:ab:03:0b:59:0d:77:a5:13:d1:cd:ce:e8:97:28:6b:01:
         31:7d:6d:c6:71:d4:80:d5:e9:50:bc:24:85:6e:28:39:7b:e7:
         96:7a:9f:82:17:b1:54:a1:99:cf:1e:c8:08:0e:e4:0d:3c:15:
         08:b3:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----