Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS209025.roa
File:                     AS209025.roa (raw, json)
Hash identifier:          tpAu+0qTx4dxzy/n1e9qowVXnhWat5kyl0MAmAFUHN8=
Subject key identifier:   D7:9A:6D:54:A4:83:84:CF:59:75:69:A2:DE:30:C5:0C:4D:05:49:4F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       28907C43EC53A45F223CBC5D53751FC89BCB4618
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS209025.roa
Signing time:             Mon 09 Oct 2023 13:17:18 +0000
ROA not before:           Mon 09 Oct 2023 13:12:18 +0000
ROA not after:            Mon 07 Oct 2024 13:17:18 +0000
asID:                     209025
IP address blocks:        2a05:dfc7:6c00::/38 maxlen: 48
                          2a05:dfc7:c000::/38 maxlen: 48
                          2a05:dfc7:da00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:90:7c:43:ec:53:a4:5f:22:3c:bc:5d:53:75:1f:c8:9b:cb:46:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct  9 13:12:18 2023 GMT
            Not After : Oct  7 13:17:18 2024 GMT
        Subject: CN=D79A6D54A48384CF597569A2DE30C50C4D05494F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:66:ec:7a:a2:01:4e:c1:33:d1:9d:b3:31:ad:
                    32:5c:24:ab:b8:99:10:26:22:7b:3a:b0:67:a4:28:
                    65:13:6e:a4:ec:6d:1f:e3:eb:2c:f8:bb:50:68:b6:
                    20:8c:c7:6f:47:05:d7:27:02:5e:7a:27:06:cf:ac:
                    09:22:ed:d2:d0:74:46:05:0b:3d:d9:51:c8:ea:d6:
                    c9:dc:65:84:e2:ef:ff:8a:9f:9c:9d:a4:00:30:af:
                    9e:63:e0:bc:f9:71:94:6a:32:30:a4:2b:34:f0:89:
                    bc:4c:d6:1a:4a:1e:d9:dd:ed:3a:81:f4:03:58:d8:
                    8e:59:45:dd:ca:1c:36:fb:97:e9:c5:7a:6f:6e:94:
                    69:3c:ab:e9:9c:dd:5e:dd:f6:04:a3:02:71:a0:a1:
                    b3:5c:72:b4:08:ca:db:19:9b:f8:fe:cd:b4:6c:65:
                    9c:25:c8:3b:0f:44:84:d0:a4:cd:ec:7a:1e:f5:9b:
                    f0:03:67:fa:5c:f7:a0:58:8d:b9:8d:20:33:90:ef:
                    e4:15:78:96:87:16:af:b1:81:0b:5c:a2:b2:cf:d6:
                    e6:37:0f:aa:0e:de:f2:40:f5:ad:78:12:12:d3:73:
                    3e:eb:eb:a6:19:3e:d6:44:bf:b1:c4:ce:62:cb:1b:
                    22:79:ec:e3:58:22:7b:25:15:a7:be:82:c3:20:2f:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9A:6D:54:A4:83:84:CF:59:75:69:A2:DE:30:C5:0C:4D:05:49:4F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS209025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6c00::/38
                  2a05:dfc7:c000::/38
                  2a05:dfc7:da00::/39

    Signature Algorithm: sha256WithRSAEncryption
         bc:10:c4:60:de:6b:22:8f:26:aa:e7:5e:77:3d:62:f1:56:db:
         78:85:64:8f:d3:f6:30:cb:b3:ea:24:81:5f:d6:25:71:53:41:
         f8:16:d1:d0:d0:10:d9:da:f2:7c:09:1b:ef:ca:83:2d:b5:97:
         8e:d7:ef:9b:3e:12:db:b1:f2:39:fc:19:c0:5e:37:6e:95:f4:
         fd:6c:d6:c6:d9:2a:c3:14:bd:80:93:66:f2:78:cd:3b:59:6d:
         24:bf:47:47:a7:0e:32:76:b2:ac:dc:b5:a0:4b:06:ce:0b:82:
         f7:bf:2a:dd:66:74:79:23:f9:d4:38:8e:b7:2a:05:01:dd:30:
         3e:ae:ae:b2:21:dc:91:1b:1f:7b:6e:7a:64:06:5e:56:88:e8:
         91:a4:9e:64:67:2d:4f:e5:79:3e:13:3f:1d:f0:19:8e:a4:94:
         24:af:36:bb:7f:d2:08:45:73:26:53:9a:11:d4:66:b9:f1:14:
         0d:1b:1c:ff:39:cb:69:f3:27:8d:07:a7:3e:3f:51:ba:e8:ff:
         75:e3:fa:14:bd:9e:9f:e5:e9:05:fe:67:aa:79:3d:6b:11:48:
         28:08:0b:ab:79:6c:d7:81:e9:f1:06:39:7e:86:ce:0f:18:c1:
         56:da:0e:79:34:3d:fa:dd:a8:36:69:51:25:c9:47:8e:36:97:
         a7:13:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----