Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS211380.roa
File:                     AS211380.roa (raw, json)
Hash identifier:          TY/O8FH/eDUJU/n7nN0r9Y0k+fjytblM6hozLuG4eGI=
Subject key identifier:   A7:3A:59:D1:05:80:8B:FE:61:DE:38:D5:42:0B:58:85:A2:35:08:C6
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0263BB1F0479AA00BE92953BE05340E339EA4B43
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS211380.roa
Signing time:             Thu 06 Jul 2023 11:17:13 +0000
ROA not before:           Thu 06 Jul 2023 11:12:13 +0000
ROA not after:            Thu 04 Jul 2024 11:17:13 +0000
asID:                     211380
IP address blocks:        2a06:1287:8400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:63:bb:1f:04:79:aa:00:be:92:95:3b:e0:53:40:e3:39:ea:4b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:13 2023 GMT
            Not After : Jul  4 11:17:13 2024 GMT
        Subject: CN=A73A59D105808BFE61DE38D5420B5885A23508C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:a8:dc:99:1a:8a:47:f2:7e:a3:14:7a:29:
                    7a:ed:76:44:43:c7:e6:ce:c5:5b:2c:7a:63:1e:08:
                    88:e8:5b:14:f3:34:7d:b3:80:b8:e1:63:80:45:57:
                    c3:03:47:d4:75:3d:54:26:0b:75:1a:56:3a:12:76:
                    16:eb:9a:73:e9:6d:20:4e:7b:e2:82:e3:ff:c6:31:
                    92:c6:de:d4:6f:0f:ec:73:29:2a:1a:02:4a:c6:77:
                    05:4f:80:c5:b1:18:ac:63:5f:e8:b2:ab:1b:91:be:
                    7f:94:a0:fe:45:e8:24:90:47:40:59:fd:7f:d6:b1:
                    a4:19:dc:f7:c1:6d:24:01:fd:90:ff:e0:39:9c:81:
                    54:6f:2f:b8:a8:ba:43:5a:a6:fa:be:46:03:a0:48:
                    4d:30:56:0d:fd:93:99:b0:f1:9e:a2:48:de:83:28:
                    aa:8f:ee:42:b6:ea:a1:63:cf:06:48:44:22:79:04:
                    04:ee:45:8f:21:18:30:ed:e6:9d:eb:ac:82:86:fe:
                    4b:1d:f7:ab:3f:b1:56:e6:66:15:4f:be:e3:d2:a8:
                    cc:ec:4a:a6:c1:46:f6:f9:d1:ad:29:d5:b4:1e:e0:
                    e3:37:b8:90:65:6c:d8:31:54:60:e3:c7:0d:23:b4:
                    35:64:cb:de:e0:bc:53:e4:c5:56:c3:f6:6c:4a:7d:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3A:59:D1:05:80:8B:FE:61:DE:38:D5:42:0B:58:85:A2:35:08:C6
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS211380.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8400::/39

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:d1:b4:9e:a8:df:1d:22:31:95:3e:aa:cd:2e:26:35:74:
         f8:e0:a5:40:d3:0a:0d:d1:25:ce:62:b5:d1:8b:44:5f:9a:b5:
         6c:61:10:d5:ef:84:e0:ad:cf:00:9c:2a:d4:73:88:89:36:7f:
         aa:55:d3:33:23:b2:ef:b4:43:27:42:97:63:6d:04:ab:0f:08:
         6c:78:45:93:31:13:a9:c7:05:ed:1c:99:af:0e:c9:a2:01:99:
         5e:7c:83:a3:35:9b:01:c5:3f:d7:02:cc:ed:11:ad:b7:98:5f:
         67:90:ca:91:fb:b9:b6:45:c0:85:15:f2:7b:c9:ce:ef:df:68:
         59:7e:b3:5d:ee:65:f0:f6:17:31:2f:66:96:6a:89:2b:1d:77:
         38:02:e5:98:2d:f3:3f:79:bc:57:bf:4b:c7:8e:45:66:af:89:
         57:af:8d:de:62:4b:85:bb:f7:6d:74:a9:0c:c0:fc:25:6e:f3:
         a3:2e:c4:8d:ed:83:5f:47:01:bf:fa:b8:2c:57:9a:aa:7d:7c:
         12:75:ed:9e:f3:81:b0:a6:d1:ce:87:d9:84:81:89:b8:47:a2:
         b0:45:1e:f1:4c:35:2f:33:84:cc:b1:ef:d9:26:0e:b1:21:92:
         18:72:b7:48:c2:bb:7c:26:e9:36:38:6f:32:6f:93:2d:50:81:
         97:4c:80:93
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUAmO7HwR5qgC+kpU74FNA4znqS0MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MDYxMTEyMTNaFw0yNDA3MDQxMTE3MTNaMDMxMTAvBgNV
BAMTKEE3M0E1OUQxMDU4MDhCRkU2MURFMzhENTQyMEI1ODg1QTIzNTA4QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG26jcmRqKR/J+oxR6KXrtdkRD
x+bOxVssemMeCIjoWxTzNH2zgLjhY4BFV8MDR9R1PVQmC3UaVjoSdhbrmnPpbSBO
e+KC4//GMZLG3tRvD+xzKSoaAkrGdwVPgMWxGKxjX+iyqxuRvn+UoP5F6CSQR0BZ
/X/WsaQZ3PfBbSQB/ZD/4DmcgVRvL7ioukNapvq+RgOgSE0wVg39k5mw8Z6iSN6D
KKqP7kK26qFjzwZIRCJ5BATuRY8hGDDt5p3rrIKG/ksd96s/sVbmZhVPvuPSqMzs
SqbBRvb50a0p1bQe4OM3uJBlbNgxVGDjxw0jtDVky97gvFPkxVbD9mxKfb3fAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUpzpZ0QWAi/5h3jjVQgtYhaI1CMYwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjExMzgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgYSh4QwDQYJKoZIhvcN
AQELBQADggEBADTd0bSeqN8dIjGVPqrNLiY1dPjgpUDTCg3RJc5itdGLRF+atWxh
ENXvhOCtzwCcKtRziIk2f6pV0zMjsu+0QydCl2NtBKsPCGx4RZMxE6nHBe0cma8O
yaIBmV58g6M1mwHFP9cCzO0RrbeYX2eQypH7ubZFwIUV8nvJzu/faFl+s13uZfD2
FzEvZpZqiSsddzgC5Zgt8z95vFe/S8eORWaviVevjd5iS4W79210qQzA/CVu86Mu
xI3tg19HAb/6uCxXmqp9fBJ17Z7zgbCm0c6H2YSBibhHorBFHvFMNS8zhMyx79km
DrEhkhhyt0jCu3wm6TY4bzJvky1QgZdMgJM=
-----END CERTIFICATE-----