Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS208078.roa
File:                     AS208078.roa (raw, json)
Hash identifier:          SdNfkn7ET7JPh44N7G4tETpkyrV1wMBTNfgKORHfaP8=
Subject key identifier:   93:99:DC:19:29:FE:AB:9B:3B:96:6E:94:62:9F:73:01:FE:91:EC:7A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1C34C5262FEC5EAA4661094A7926DBCC7888AD43
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS208078.roa
Signing time:             Thu 06 Jul 2023 11:17:11 +0000
ROA not before:           Thu 06 Jul 2023 11:12:11 +0000
ROA not after:            Thu 04 Jul 2024 11:17:11 +0000
asID:                     208078
IP address blocks:        2a06:1287:3800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:34:c5:26:2f:ec:5e:aa:46:61:09:4a:79:26:db:cc:78:88:ad:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:11 2023 GMT
            Not After : Jul  4 11:17:11 2024 GMT
        Subject: CN=9399DC1929FEAB9B3B966E94629F7301FE91EC7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:6b:98:70:87:f8:c5:73:24:e8:b7:4e:bb:
                    ee:81:da:b7:12:70:59:2b:26:9c:d0:d0:3c:33:d8:
                    5b:55:97:20:a8:bf:d7:46:cd:32:f1:49:60:51:99:
                    d3:2c:21:a7:63:0f:09:b5:27:1e:35:31:8c:66:4a:
                    50:93:a9:80:19:2e:3f:a8:6a:8e:da:23:39:e7:fe:
                    1f:18:87:91:c4:63:3b:07:81:de:17:1a:20:bc:5a:
                    99:f0:6a:27:18:84:49:9e:6d:14:6a:05:48:5f:d6:
                    e8:08:6a:61:0c:85:cc:ec:6e:a2:82:dc:25:16:62:
                    7a:e3:ba:44:60:d8:b6:69:c2:0d:c0:89:3e:be:61:
                    8c:0a:59:f5:fa:90:09:58:da:af:72:51:9d:0f:eb:
                    c5:07:86:c0:27:96:37:ea:9b:e0:cd:de:68:42:76:
                    da:f1:46:e1:1f:a3:40:4c:ca:81:3f:4e:c7:db:8f:
                    02:95:ca:67:a7:a7:8a:d8:b8:d3:fb:cb:35:bb:46:
                    ce:af:c5:9b:5a:d4:dd:4e:21:4a:38:2e:50:27:9e:
                    a2:b2:40:97:e3:f0:36:41:aa:11:e4:5f:19:1a:f8:
                    24:3f:84:52:15:6e:93:69:a0:1a:98:2e:ea:1d:0b:
                    5c:1a:b7:89:58:a9:ef:28:74:45:3e:f1:c1:8e:20:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:DC:19:29:FE:AB:9B:3B:96:6E:94:62:9F:73:01:FE:91:EC:7A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS208078.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:2c:44:c3:b8:4d:9f:4d:07:50:a7:87:98:d0:11:02:b3:
         93:79:76:0b:0d:00:45:e6:89:73:3b:6a:69:bf:0a:cd:50:8c:
         99:85:4b:90:74:2b:c0:43:1a:1c:4c:59:52:36:b4:98:3f:c9:
         b8:f0:78:ec:ad:53:79:e3:34:a8:30:00:b7:47:bd:a5:a1:93:
         ea:95:12:b6:3b:25:69:b0:c3:ba:c4:d5:3c:3a:b7:de:14:da:
         5c:c7:4b:22:19:d7:9f:dd:9f:99:b8:d8:20:c1:bd:c2:c1:d5:
         41:63:5a:6c:00:3b:2f:7d:95:ee:57:52:ed:75:0c:93:1c:7c:
         f1:b7:ce:d0:91:d9:c4:e9:55:bb:32:89:52:c0:fc:2c:2c:37:
         7b:b9:a3:90:1a:f7:72:f8:e6:1c:42:83:35:f6:b7:28:72:02:
         a3:fe:b1:80:b6:e8:4c:6d:22:69:6d:95:08:2a:7d:9a:51:33:
         c9:71:dd:9a:de:7b:e3:83:18:a4:f1:03:4d:f4:f6:91:58:f0:
         81:cd:13:6a:62:a3:fb:aa:70:9b:a8:a4:dd:ec:5e:04:d3:84:
         94:05:d7:a6:d8:00:d7:ce:2a:11:df:27:a7:0e:7f:a0:12:46:
         bc:b8:b4:14:23:f0:eb:b0:af:2f:1d:72:e8:59:c9:2b:2d:cb:
         da:af:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----