Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS208753.roa
File:                     AS208753.roa (raw, json)
Hash identifier:          tKxV0ktSzkS0sRIsLnCiYf61yImR/oqQkaDYK7WWDnI=
Subject key identifier:   1E:54:0C:D9:B3:63:BD:59:98:FA:A6:FA:5D:45:75:BF:75:16:95:9D
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       62215AA6D45817870FAC0C817593C49EDAA8BA8A
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS208753.roa
Signing time:             Thu 06 Jul 2023 11:17:24 +0000
ROA not before:           Thu 06 Jul 2023 11:12:24 +0000
ROA not after:            Thu 04 Jul 2024 11:17:24 +0000
asID:                     208753
IP address blocks:        2a05:dfc7:44::/46 maxlen: 48
                          2a06:1287:330d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:21:5a:a6:d4:58:17:87:0f:ac:0c:81:75:93:c4:9e:da:a8:ba:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:24 2023 GMT
            Not After : Jul  4 11:17:24 2024 GMT
        Subject: CN=1E540CD9B363BD5998FAA6FA5D4575BF7516959D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:58:4e:89:a4:19:b5:a4:a2:bb:0a:78:e4:
                    19:14:b4:67:6b:ac:75:29:23:b4:9d:ee:17:cc:69:
                    e8:36:3c:fb:58:02:22:96:30:06:07:e1:03:6c:95:
                    fb:d1:44:d8:57:b5:34:12:5b:90:97:ae:17:d2:12:
                    f1:c2:8d:74:64:c8:df:0a:f3:3b:99:84:fa:77:a8:
                    34:73:f6:be:b6:e0:0a:66:e7:53:02:a7:6b:2b:22:
                    ca:d8:07:77:4e:ef:fb:91:b1:33:9e:3c:b5:f3:08:
                    3a:83:c9:26:08:60:0d:53:1c:36:c4:22:e9:ac:8b:
                    b1:c2:6b:ee:be:48:e4:50:15:e6:c1:d1:39:fd:2f:
                    42:a0:40:12:89:bb:60:af:43:9b:62:f6:7d:87:7b:
                    ae:ae:a9:d2:bb:6d:e1:75:08:b4:00:21:95:5a:ad:
                    d4:2d:e4:7b:62:a3:39:5f:91:be:07:91:54:82:64:
                    ae:aa:16:4b:d7:22:08:92:b3:7e:31:87:65:12:d7:
                    b7:05:ed:49:87:e1:d9:d6:01:aa:99:60:4f:d9:a2:
                    9a:ee:f7:a8:9f:91:c0:66:28:b0:aa:3a:09:82:58:
                    95:41:7a:96:e8:02:ec:0b:bc:36:96:b4:95:0e:f7:
                    99:99:2d:1a:dc:4e:e9:a5:5f:1b:1d:0d:72:6a:2f:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:54:0C:D9:B3:63:BD:59:98:FA:A6:FA:5D:45:75:BF:75:16:95:9D
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS208753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:44::/46
                  2a06:1287:330d::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:e7:be:e0:17:e6:92:9f:1c:56:13:13:a1:41:70:b9:03:6a:
         77:be:f9:53:4f:27:b8:f0:98:e0:c6:2f:38:a0:c2:6d:72:c0:
         98:24:91:2a:b8:55:0b:13:ba:41:0c:aa:bc:93:31:c8:df:0a:
         51:fb:1c:80:ed:54:9c:d5:b7:d6:f7:44:f1:dd:7e:c5:d8:9a:
         2c:e8:73:bb:8c:4f:0b:27:1d:f7:07:87:e6:75:cc:09:a2:64:
         65:37:ae:7b:ed:d4:81:3b:8f:94:c4:ef:f5:0d:3f:ad:03:90:
         d7:ae:5c:53:bf:fc:ae:3d:47:14:fc:e7:49:93:85:2e:5e:3a:
         be:a6:ca:b2:59:7c:dd:49:3b:e5:06:43:64:e6:eb:61:1b:22:
         20:93:9a:3a:de:f1:49:ab:4a:bb:a5:07:76:7c:e8:c7:34:a6:
         36:93:fd:e1:9c:f9:83:1b:aa:9c:e0:91:88:dd:9c:42:1c:7f:
         95:ab:98:4b:a7:31:8f:cc:de:14:5c:6d:2c:1f:51:3d:40:32:
         7c:47:88:48:5b:b4:0c:e8:55:5a:1a:d5:1d:ad:4a:c6:10:df:
         3a:d7:fd:46:38:a9:7b:dd:56:26:19:4a:b7:66:cf:6d:32:9d:
         9c:a6:4b:ac:08:96:84:76:f4:1d:80:9b:70:fe:cf:f3:1a:3d:
         c6:1f:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----