Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS211151.roa
File:                     AS211151.roa (raw, json)
Hash identifier:          69y9z+E0ZNSYoBMzIKKkNufa1KJFG4MzwlYoUKcIkaQ=
Subject key identifier:   D2:F1:C4:B9:43:55:97:8C:67:1F:A4:62:7A:20:B2:2D:02:27:6C:29
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       596F11F9509C1B3451E88054D3523BA0971F1AEE
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS211151.roa
Signing time:             Thu 06 Jul 2023 11:17:24 +0000
ROA not before:           Thu 06 Jul 2023 11:12:24 +0000
ROA not after:            Thu 04 Jul 2024 11:17:24 +0000
asID:                     211151
IP address blocks:        2a05:dfc7:ca00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6f:11:f9:50:9c:1b:34:51:e8:80:54:d3:52:3b:a0:97:1f:1a:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:24 2023 GMT
            Not After : Jul  4 11:17:24 2024 GMT
        Subject: CN=D2F1C4B94355978C671FA4627A20B22D02276C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:af:1f:79:0d:0c:41:f3:f8:93:6e:cd:1f:
                    a2:13:ec:26:e2:64:bf:93:f6:ea:8d:66:c2:86:bb:
                    6f:21:29:46:81:4b:19:c8:fc:97:cf:9a:74:44:78:
                    cd:ed:1d:e3:de:27:86:00:0b:86:1e:8e:f8:cb:3e:
                    37:ed:7b:16:76:ad:dd:a4:e7:a0:cf:ba:2f:eb:85:
                    f2:a3:c4:07:08:52:40:9e:44:14:3e:86:92:99:a8:
                    6e:61:6f:e7:7e:f5:11:fb:5a:8b:3d:c1:d0:cf:d3:
                    8b:34:b1:94:44:c6:23:50:fa:68:1b:50:0e:a1:23:
                    35:7f:76:b4:ab:8b:c7:31:ed:4f:8b:fc:ec:08:a8:
                    09:cf:34:f4:e8:84:e6:1e:f2:14:f8:68:e8:83:37:
                    4f:be:4d:60:37:99:77:ba:86:fb:7f:28:ea:75:d4:
                    d3:40:82:2d:88:bb:75:df:f6:3f:f7:6b:c2:59:df:
                    46:f5:85:f5:9b:48:7f:fd:8d:36:33:70:c5:8e:bf:
                    1c:32:06:d2:f1:d9:fb:ea:75:25:79:cd:68:32:7f:
                    7e:ce:25:ab:01:ba:f1:86:33:86:bb:13:19:df:93:
                    64:89:b0:06:ca:28:09:ec:41:e1:01:60:e8:8b:4c:
                    16:50:3f:ec:08:2d:54:fe:35:71:27:ae:4e:d5:c2:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F1:C4:B9:43:55:97:8C:67:1F:A4:62:7A:20:B2:2D:02:27:6C:29
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS211151.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:ca00::/39

    Signature Algorithm: sha256WithRSAEncryption
         9d:d1:0a:e5:00:20:7a:3d:7e:7b:ec:97:62:ad:93:b9:2e:3c:
         14:d0:5e:36:3e:27:52:74:c1:da:1a:7a:84:3b:e4:64:a3:d9:
         ed:af:4a:ae:b4:95:f5:e8:fe:a1:a5:ec:4b:ce:7e:f7:f1:2d:
         24:0e:b8:99:a0:25:e0:9c:83:84:35:27:0b:56:1a:c0:e3:3e:
         07:be:fb:ce:95:03:0e:ac:4a:da:a5:ff:a6:49:95:5c:26:63:
         a2:9b:1a:ae:87:3e:af:d4:fe:72:d1:b9:7d:29:fa:2e:f6:2a:
         8a:82:b8:f7:8b:bd:df:79:c4:53:5d:98:fb:ae:12:31:38:81:
         be:33:4f:5f:12:9f:7f:40:fe:de:8b:a2:1e:6c:62:80:8c:42:
         2a:89:1d:1c:f5:59:6b:32:62:8c:5c:c3:97:05:0b:35:9f:f7:
         01:d9:ae:df:f9:d1:5f:5c:63:da:c1:c9:2a:85:16:10:e1:94:
         f0:f7:cd:de:a7:c4:d3:cd:40:c2:de:84:b6:62:7e:9f:95:2e:
         61:90:c2:f7:27:c2:61:42:dd:2e:b6:74:c0:0d:14:42:f0:63:
         b7:1b:ba:e1:81:09:65:be:b3:a8:a7:ff:b2:84:77:45:8d:fd:
         22:9c:6d:5f:45:99:f9:44:92:08:24:5c:25:fc:0b:e2:8a:fb:
         f5:da:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----