Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS208548.roa
File:                     AS208548.roa (raw, json)
Hash identifier:          PwuluHzD9btIAx+A94zW9/J+tDSIyckU0mQafMjyZzo=
Subject key identifier:   61:BA:21:F5:F6:11:15:E6:AF:B3:F1:E4:21:14:AF:F8:0E:60:8E:A9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0FE1DB3DD4743277C725C8D7ADFF0D6A23DD352F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS208548.roa
Signing time:             Thu 06 Jul 2023 11:17:11 +0000
ROA not before:           Thu 06 Jul 2023 11:12:11 +0000
ROA not after:            Thu 04 Jul 2024 11:17:11 +0000
asID:                     208548
IP address blocks:        2a05:dfc7:3909::/48 maxlen: 48
                          2a06:1287:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e1:db:3d:d4:74:32:77:c7:25:c8:d7:ad:ff:0d:6a:23:dd:35:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:11 2023 GMT
            Not After : Jul  4 11:17:11 2024 GMT
        Subject: CN=61BA21F5F61115E6AFB3F1E42114AFF80E608EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ec:32:6f:30:1c:ae:a5:a9:c8:36:7d:c0:2b:
                    0e:96:82:75:12:63:2a:92:97:72:a4:5b:91:db:06:
                    3a:17:8b:1f:97:69:77:0b:d9:9d:8c:c5:ac:7e:64:
                    67:a9:61:af:88:40:e9:44:bf:6c:35:6f:16:2e:49:
                    1c:d9:11:2c:5a:bc:b7:56:7e:29:18:37:66:5b:ed:
                    06:92:31:67:9b:b6:05:04:9b:00:04:65:15:70:78:
                    f5:9c:6a:f5:7f:4d:ce:a7:ff:3e:2e:b6:dc:22:5c:
                    14:a3:19:02:47:ab:40:cf:f9:81:3f:73:38:b8:de:
                    e5:94:58:56:11:65:f2:8f:c6:e3:a1:2b:6c:58:63:
                    85:7e:67:7c:4e:53:64:41:0b:ef:57:16:1c:5c:d2:
                    72:fc:9c:64:9f:04:c8:e1:d6:37:3c:26:db:cd:a0:
                    44:68:87:25:ad:79:de:44:0d:04:72:5a:87:7d:c0:
                    1c:06:59:7c:b0:8d:3b:20:fc:d6:e7:d9:c3:86:68:
                    9f:1b:28:05:d2:15:37:f7:90:de:e0:80:86:c9:d3:
                    c2:ec:a2:a5:18:17:51:62:9e:e9:5a:58:88:3f:a0:
                    50:0e:5e:d0:1a:a9:ea:91:b0:fc:e2:3e:97:77:85:
                    39:17:0b:de:99:7e:c4:62:a6:ce:10:dc:f9:42:d4:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BA:21:F5:F6:11:15:E6:AF:B3:F1:E4:21:14:AF:F8:0E:60:8E:A9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS208548.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:3909::/48
                  2a06:1287:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:39:7f:cb:40:46:e7:36:d3:7a:a6:77:be:79:96:ec:6b:45:
         c7:10:f3:b6:e3:ff:da:98:2a:5e:ec:6d:d0:07:60:03:0b:0b:
         86:60:46:a5:8d:6e:d1:cf:90:42:03:b4:e5:a7:74:48:87:23:
         be:e4:b5:70:f9:b5:e4:97:03:c9:58:a0:b3:c1:e7:74:aa:26:
         62:37:cd:3a:2d:b5:cd:6a:e4:fa:75:a1:cc:d4:e3:64:c2:40:
         91:1a:02:36:f4:14:19:fe:29:15:30:a5:79:17:c3:25:aa:22:
         b0:0e:db:e3:c6:b7:47:af:66:ad:08:f7:e6:1a:1b:c3:cf:96:
         14:a8:f4:f2:b1:72:0f:8d:f8:e1:e6:f1:cd:8e:88:16:54:b6:
         a7:81:88:5e:50:75:00:7a:5a:61:ed:5b:d4:9d:94:23:e1:66:
         40:22:a3:65:f2:9d:e5:ea:97:a5:d3:86:a7:0a:4e:cc:f6:20:
         a0:a3:f2:e6:07:df:ce:28:69:03:dd:5c:05:81:68:1d:a2:7a:
         26:d4:09:72:08:9c:f6:6a:0e:a2:f7:3f:ab:b9:7e:e5:8e:df:
         4f:85:bf:46:cb:bd:b0:e2:5b:94:4b:58:00:b5:c7:18:7d:b6:
         36:8d:f1:8d:3a:91:43:52:1c:f3:33:13:17:a9:50:c5:86:d5:
         19:0f:cf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----