Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS208076.roa
File:                     AS208076.roa (raw, json)
Hash identifier:          v6l7VOe0Swsy7l69IOLg9s9KzxJf/wj78a+6N9brJd4=
Subject key identifier:   36:67:97:99:51:54:68:ED:F5:F4:85:FE:3D:95:3D:D8:22:CC:5A:21
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3564D14CE67E7FFC359908DA0008E3C01E96E24C
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS208076.roa
Signing time:             Thu 06 Jul 2023 11:17:21 +0000
ROA not before:           Thu 06 Jul 2023 11:12:21 +0000
ROA not after:            Thu 04 Jul 2024 11:17:21 +0000
asID:                     208076
IP address blocks:        2a05:dfc7:7700::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:64:d1:4c:e6:7e:7f:fc:35:99:08:da:00:08:e3:c0:1e:96:e2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:21 2023 GMT
            Not After : Jul  4 11:17:21 2024 GMT
        Subject: CN=36679799515468EDF5F485FE3D953DD822CC5A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:84:08:bf:fd:75:02:f3:b8:24:c5:1a:bf:
                    98:90:7c:c2:c4:b5:01:b0:ea:86:ed:fc:4e:6d:18:
                    ee:b1:6b:3d:61:8c:77:d7:11:44:e9:ea:cb:07:e7:
                    51:bc:3f:19:0b:cb:50:73:d3:14:6b:69:25:09:04:
                    be:9c:25:43:3e:cb:55:5b:0d:0e:5c:8c:8c:5b:90:
                    f1:1c:e7:8b:24:04:ce:0e:42:3b:0c:25:69:07:7b:
                    a9:9e:10:a7:a0:7a:f6:af:1d:21:76:c0:0e:d8:55:
                    0d:54:b6:a4:e4:ce:d3:86:b5:e1:ed:8e:06:58:1a:
                    01:11:43:69:62:f8:e8:eb:e9:87:49:da:fb:0c:da:
                    d1:9f:94:67:5c:65:2e:23:54:bd:eb:c7:ec:81:64:
                    bf:05:a6:54:4b:f7:7e:13:e2:52:aa:65:d3:22:22:
                    0b:b1:f0:d9:3c:7f:c5:27:56:b6:d7:60:f2:eb:9b:
                    54:d2:5e:fb:48:3f:14:38:73:55:44:d4:5f:43:af:
                    52:4d:67:a3:c9:d8:95:f4:5f:26:6f:47:2a:02:25:
                    40:d7:4a:e4:9a:e7:fd:50:eb:16:6b:50:a5:66:1d:
                    ca:ac:cf:f2:f6:a2:3c:25:41:9b:dd:03:f5:df:dd:
                    33:b0:0f:eb:35:d4:db:dd:70:7b:88:0a:2a:12:d8:
                    6b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:67:97:99:51:54:68:ED:F5:F4:85:FE:3D:95:3D:D8:22:CC:5A:21
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS208076.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:bf:ec:e1:be:32:c0:21:8c:ad:33:49:a7:d6:f3:bc:41:5c:
         74:32:17:f1:9c:28:61:bd:78:0b:cd:16:0b:c4:17:57:86:34:
         d1:61:c5:a9:72:51:80:1a:bd:7c:63:ab:83:93:9a:aa:da:bd:
         3b:c8:ff:c8:e4:94:74:cb:3c:70:56:36:5a:32:76:ce:8c:8b:
         6d:55:6d:d6:96:4e:33:ce:8d:b5:8e:49:17:a1:38:a0:84:05:
         42:d1:1e:df:45:86:4f:44:91:b4:12:b8:32:ab:44:38:a2:bd:
         9e:15:3f:2b:33:b3:93:b4:4f:85:0f:36:3e:6f:37:b4:d1:f7:
         5d:ee:7c:43:af:7f:6d:61:ca:f4:2d:a1:60:f2:c8:46:81:7f:
         5e:61:fa:e0:09:fc:89:b8:be:2b:cd:d8:db:12:b5:4e:45:1d:
         ba:62:56:a9:77:59:c4:f5:86:74:87:cc:1e:11:82:c2:01:ba:
         9d:97:36:69:0c:e0:16:9e:8f:86:a8:92:27:a3:78:bd:62:61:
         0c:42:7f:cd:73:64:c2:7d:24:63:02:e6:2d:04:60:9f:e1:61:
         17:d6:2e:01:18:8e:16:76:cb:1c:41:d6:6d:37:f2:89:ed:e7:
         ef:fd:46:25:90:2d:94:0e:6a:15:ef:f5:a2:3b:72:01:c9:f3:
         0e:42:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----