Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS208328.roa
File:                     AS208328.roa (raw, json)
Hash identifier:          IHPABwyH2krKDu55ZOxP1fLLg0hZIIwWAhy2EQjQ3So=
Subject key identifier:   6F:70:74:83:D1:71:C6:4A:C3:86:45:65:22:AA:AC:86:A9:8E:70:77
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       2833CEC635923292EE5FBEA079DA962AAA8C2524
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS208328.roa
Signing time:             Wed 04 Oct 2023 16:13:56 +0000
ROA not before:           Wed 04 Oct 2023 16:08:56 +0000
ROA not after:            Wed 02 Oct 2024 16:13:56 +0000
asID:                     208328
IP address blocks:        2a06:1287:5800::/39 maxlen: 39
                          2a06:1287:5800::/48 maxlen: 48
                          2a06:1287:580a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:33:ce:c6:35:92:32:92:ee:5f:be:a0:79:da:96:2a:aa:8c:25:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct  4 16:08:56 2023 GMT
            Not After : Oct  2 16:13:56 2024 GMT
        Subject: CN=6F707483D171C64AC386456522AAAC86A98E7077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:43:aa:e4:a6:a4:e5:70:e3:1c:be:5f:94:
                    51:25:0a:38:81:9f:ea:c1:7d:4f:ab:7b:7b:db:b8:
                    8d:15:b6:c0:8c:92:87:12:eb:d8:02:c3:fe:5c:1c:
                    3a:86:1b:14:3d:f8:94:a2:aa:8d:16:01:d8:e8:bc:
                    a9:2c:6b:b6:e9:06:4a:95:8d:d0:56:d1:80:0e:78:
                    16:47:0c:72:0f:7b:4e:e2:ef:ec:3a:fb:5b:26:81:
                    65:9b:b7:3c:c8:a6:9d:72:31:7c:7e:d5:8f:d6:53:
                    88:a7:2b:3a:bc:dd:c0:85:f7:b7:47:87:52:a1:fc:
                    90:c8:0d:61:f5:05:fb:ce:d2:28:2b:93:a9:59:58:
                    a1:a7:5c:1c:bc:b0:3d:b2:31:d9:60:d3:93:d9:df:
                    c7:d5:fb:b5:2b:7b:c6:ff:17:9e:70:97:a5:87:23:
                    83:eb:0b:5b:a6:ff:32:7b:45:f9:60:ee:28:d9:cf:
                    93:9a:d8:d9:00:32:14:a0:fb:25:85:49:b8:de:9b:
                    52:a3:b3:c2:b4:bc:ab:12:97:32:d0:01:b4:77:ff:
                    5d:10:48:97:af:cd:86:77:db:fd:e3:86:32:4d:a0:
                    e5:a2:da:7c:4a:c2:b9:f1:5c:b4:45:90:87:4e:aa:
                    f6:b0:e0:7d:81:6c:cc:d7:d6:b5:c3:57:e8:47:dd:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:70:74:83:D1:71:C6:4A:C3:86:45:65:22:AA:AC:86:A9:8E:70:77
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS208328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5800::/39

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:1e:54:37:e4:17:39:d4:e2:5d:b1:30:98:5b:24:98:cf:
         20:0e:b4:c4:ff:d7:9d:48:ab:b5:86:b3:da:e1:dc:33:15:af:
         de:be:f0:75:51:87:bd:a9:db:4a:55:f1:a4:9a:70:d8:24:95:
         4c:a0:0d:de:b4:ba:89:af:7a:0f:33:45:4f:e0:a8:3f:b5:e9:
         49:8d:ee:cf:8e:5d:88:e3:37:22:5d:27:f5:3c:c9:fb:c6:6e:
         c4:c0:63:67:d8:72:ca:10:74:cc:26:40:5f:03:3f:1c:da:92:
         c2:6c:32:26:c1:35:ba:7c:3a:c0:c7:b2:d6:ee:08:80:c0:3e:
         8f:b7:dc:6b:8d:7d:06:2a:1a:fe:92:f2:aa:a9:62:2d:50:4f:
         1e:1a:1f:1c:92:6c:23:eb:8c:46:4e:2e:d3:a9:72:c7:ab:14:
         d5:b7:80:9d:21:03:39:9d:82:3f:eb:a1:5c:ab:d2:6a:85:80:
         36:95:95:52:fd:f9:7f:b2:69:ee:ea:d5:4c:d3:f1:c7:03:65:
         62:59:08:9e:81:db:02:b3:b7:42:a8:7c:95:94:cc:14:0d:cb:
         d8:d7:ea:1c:87:9a:87:bd:c6:6a:dc:1d:01:8e:38:1c:80:11:
         00:2d:e2:bc:0c:0a:0a:95:bf:f4:78:60:62:4d:46:7c:8e:37:
         72:a1:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----