Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS210476.roa
File:                     AS210476.roa (raw, json)
Hash identifier:          ck7JaLdhvdPM6J/tPXTYr9qdzgQdu8ARQGHieABXZ2Q=
Subject key identifier:   39:17:EE:6D:28:67:1D:CA:1C:87:D0:88:87:9D:7E:C2:F1:FA:B0:CB
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5D3B0076C28F684E8C49521DD6F04C7D523A75D7
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS210476.roa
Signing time:             Fri 14 Jul 2023 12:08:47 +0000
ROA not before:           Fri 14 Jul 2023 12:03:47 +0000
ROA not after:            Fri 12 Jul 2024 12:08:47 +0000
asID:                     210476
IP address blocks:        2a06:1287:c800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3b:00:76:c2:8f:68:4e:8c:49:52:1d:d6:f0:4c:7d:52:3a:75:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 14 12:03:47 2023 GMT
            Not After : Jul 12 12:08:47 2024 GMT
        Subject: CN=3917EE6D28671DCA1C87D088879D7EC2F1FAB0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:80:0c:d7:c7:38:22:66:2e:5b:d1:4f:c8:50:
                    9f:f0:9e:a3:cf:bd:de:6d:46:b2:7e:d6:90:ab:d1:
                    a8:e6:66:78:60:89:8d:49:5a:12:bf:22:8b:50:f0:
                    36:96:4c:4b:29:68:b2:45:73:0a:a0:02:7b:93:55:
                    81:de:9c:98:68:24:3a:91:32:19:ae:90:18:c1:dd:
                    80:d2:03:07:97:eb:9d:90:df:18:c0:02:fd:16:bd:
                    97:40:2b:21:96:08:b4:eb:00:b1:d0:1f:a0:95:fe:
                    d2:8f:45:49:47:1e:eb:5a:43:53:77:4a:28:05:8c:
                    fb:f1:dd:a6:86:de:9d:15:a7:60:74:70:ff:6a:a6:
                    8a:5f:86:ef:7d:7c:82:82:87:35:d8:49:b3:55:05:
                    8f:18:94:97:3e:b9:8a:88:83:d2:56:c3:c8:ba:0b:
                    c3:c5:b9:8a:c3:1d:80:48:da:f6:77:82:23:c9:f2:
                    97:1c:e7:fa:a2:ec:1e:34:09:5c:ab:bf:75:3f:31:
                    f0:90:77:0a:dc:3e:42:55:67:9f:67:aa:dc:6e:cf:
                    6b:dd:b1:b6:8c:f4:54:28:2d:40:cd:25:89:00:9a:
                    62:ee:f6:ed:58:d4:f1:b4:b0:41:90:8f:93:35:8e:
                    54:5d:dc:69:1a:b8:f8:fc:6a:03:4b:c9:5b:0a:99:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:17:EE:6D:28:67:1D:CA:1C:87:D0:88:87:9D:7E:C2:F1:FA:B0:CB
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS210476.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:c800::/39

    Signature Algorithm: sha256WithRSAEncryption
         35:fd:2d:3f:d4:ad:f4:55:cb:2d:97:aa:c6:d4:61:e1:0a:16:
         3b:55:4a:7b:67:d5:20:6d:2c:a1:ed:f1:67:a6:1e:de:bd:03:
         61:0b:1a:a0:99:0d:3c:ee:6a:38:b3:fd:4a:76:4d:11:45:07:
         3d:b7:42:7c:54:17:00:87:bf:f4:88:c3:9d:53:12:2f:39:c6:
         17:0d:fc:b8:9a:60:60:34:fc:83:88:d3:18:45:83:c9:81:61:
         aa:c8:c5:40:cf:00:55:bd:5a:1e:17:fe:e7:17:6c:6c:b9:64:
         73:a9:e2:75:4a:92:76:94:2d:51:b8:ca:c2:76:10:0f:ff:7a:
         3b:c2:f2:a6:89:3a:53:4f:7c:31:22:18:ba:e5:69:7b:a2:da:
         f5:18:b9:8d:56:eb:db:d9:ad:28:81:d1:d4:0e:e6:10:9d:1d:
         9a:ab:f8:ff:d8:10:e7:26:80:c5:87:a7:cb:e8:42:55:35:7c:
         5a:16:f7:79:5e:da:89:83:4c:0e:9b:8a:ae:1e:aa:3f:29:37:
         5d:9d:6e:3d:74:b1:c8:47:8f:7b:c5:b8:63:22:25:53:f7:1b:
         a9:1d:19:e9:a7:1b:90:d6:45:3f:c2:12:39:1b:aa:8f:62:69:
         ac:96:e9:5c:a5:a1:c4:af:77:ba:1c:b5:b4:e8:0f:f1:67:d0:
         a7:63:6f:fc
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUXTsAdsKPaE6MSVId1vBMfVI6ddcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MTQxMjAzNDdaFw0yNDA3MTIxMjA4NDdaMDMxMTAvBgNV
BAMTKDM5MTdFRTZEMjg2NzFEQ0ExQzg3RDA4ODg3OUQ3RUMyRjFGQUIwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVgAzXxzgiZi5b0U/IUJ/wnqPP
vd5tRrJ+1pCr0ajmZnhgiY1JWhK/IotQ8DaWTEspaLJFcwqgAnuTVYHenJhoJDqR
MhmukBjB3YDSAweX652Q3xjAAv0WvZdAKyGWCLTrALHQH6CV/tKPRUlHHutaQ1N3
SigFjPvx3aaG3p0Vp2B0cP9qpopfhu99fIKChzXYSbNVBY8YlJc+uYqIg9JWw8i6
C8PFuYrDHYBI2vZ3giPJ8pcc5/qi7B40CVyrv3U/MfCQdwrcPkJVZ59nqtxuz2vd
sbaM9FQoLUDNJYkAmmLu9u1Y1PG0sEGQj5M1jlRd3GkauPj8agNLyVsKmb5LAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUORfubShnHcoch9CIh51+wvH6sMswHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjEwNDc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgYSh8gwDQYJKoZIhvcN
AQELBQADggEBADX9LT/UrfRVyy2XqsbUYeEKFjtVSntn1SBtLKHt8WemHt69A2EL
GqCZDTzuajiz/Up2TRFFBz23QnxUFwCHv/SIw51TEi85xhcN/LiaYGA0/IOI0xhF
g8mBYarIxUDPAFW9Wh4X/ucXbGy5ZHOp4nVKknaULVG4ysJ2EA//ejvC8qaJOlNP
fDEiGLrlaXui2vUYuY1W69vZrSiB0dQO5hCdHZqr+P/YEOcmgMWHp8voQlU1fFoW
93le2omDTA6biq4eqj8pN12dbj10schHj3vFuGMiJVP3G6kdGemnG5DWRT/CEjkb
qo9iaayW6VylocSvd7octbToD/Fn0Kdjb/w=
-----END CERTIFICATE-----