Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS208223.roa
File:                     AS208223.roa (raw, json)
Hash identifier:          p6yzAVYdLtHgz6qLelry45c8xO4JpZ2JcTDZWv7DuvU=
Subject key identifier:   80:7C:07:8E:D6:02:BA:3F:DE:92:8B:B6:AD:14:CF:FF:73:46:E9:93
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       018869BCCF103AD580D841BB319DCB55B099BB9F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS208223.roa
Signing time:             Thu 06 Jul 2023 11:17:32 +0000
ROA not before:           Thu 06 Jul 2023 11:12:32 +0000
ROA not after:            Thu 04 Jul 2024 11:17:32 +0000
asID:                     208223
IP address blocks:        2a06:1287:3900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:69:bc:cf:10:3a:d5:80:d8:41:bb:31:9d:cb:55:b0:99:bb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:32 2023 GMT
            Not After : Jul  4 11:17:32 2024 GMT
        Subject: CN=807C078ED602BA3FDE928BB6AD14CFFF7346E993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:98:a1:24:09:dd:27:14:d0:cb:e4:b6:6a:
                    c0:30:29:97:45:24:69:9d:a9:b7:72:ed:d9:40:fc:
                    12:2b:fa:e9:bd:38:17:2c:e5:68:e7:f1:ef:ed:f7:
                    52:2a:60:c0:ad:55:85:c2:b2:94:94:29:b0:71:ba:
                    92:ce:9d:b0:f6:ee:61:2d:21:b4:82:e6:fd:2b:9f:
                    50:38:cc:b2:50:bf:19:9a:e5:27:b7:72:c5:7e:f9:
                    05:94:2a:e0:e8:bb:b2:ca:6c:6c:86:93:db:6f:15:
                    49:3a:10:d3:fc:ab:72:eb:41:f8:a5:ab:46:95:14:
                    9d:6b:d2:93:06:b7:b7:1f:33:dd:a5:ec:e1:55:e5:
                    73:89:da:2f:bf:49:12:38:fd:79:5c:69:ef:fd:e4:
                    e6:7f:e6:d4:6a:7b:b3:da:a0:9e:1a:34:27:82:af:
                    61:0d:d6:18:2a:5a:57:2c:86:b9:d3:d3:c1:f0:ac:
                    bf:7f:52:8c:d4:ef:6a:12:24:30:a5:ab:cf:8b:87:
                    78:b9:4b:8b:5e:58:e9:4b:20:2a:1d:b2:9d:0f:3a:
                    e4:7d:4d:3e:d3:84:0e:a0:ad:dc:96:99:2a:ef:55:
                    24:fd:d4:fd:e3:41:de:f2:2b:43:cb:c7:61:70:0b:
                    53:4d:9a:83:80:c6:f3:1c:11:fb:f1:01:3d:f7:d0:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7C:07:8E:D6:02:BA:3F:DE:92:8B:B6:AD:14:CF:FF:73:46:E9:93
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS208223.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3900::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:d9:48:b5:3d:96:dd:c7:d5:1e:cc:9f:c0:de:e9:5d:05:eb:
         9e:30:be:21:7a:86:35:95:33:9d:b7:ee:34:ed:db:cd:44:32:
         10:7d:de:ba:24:a0:4a:44:b9:6f:14:ed:ad:5a:47:73:2b:98:
         3a:fa:f3:0e:63:af:97:47:62:d4:45:ad:91:a3:22:f8:63:65:
         a4:77:72:00:1a:79:8e:e8:b6:d3:b4:86:db:6f:6f:06:d1:af:
         00:81:72:a5:87:b1:52:10:22:d9:ae:dd:94:4a:5b:cb:eb:d4:
         2c:70:f6:64:46:d3:ae:71:84:eb:1c:d2:b5:6a:60:ed:32:fa:
         f9:f1:8a:b7:60:ce:b1:25:fb:c5:41:76:d7:63:a7:98:b9:08:
         a7:e5:4d:8c:bd:f3:3a:9f:d5:59:63:c6:34:66:3c:35:5e:1d:
         e9:bf:4b:ab:e8:36:4a:bd:cb:57:cb:de:09:87:09:96:0d:a8:
         d0:a4:1a:ae:9b:7f:dd:da:23:5f:29:55:01:ed:b6:c2:5a:80:
         1b:c5:17:8d:07:a5:4e:76:2f:2e:67:d0:a8:48:32:ff:a1:75:
         31:1a:4d:ee:4b:99:9c:45:1f:10:33:f0:6a:32:8b:f9:92:14:
         b4:a0:dd:25:c3:5c:19:5c:33:b9:9c:df:9a:29:f7:73:73:cd:
         da:c9:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----