Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS211509.roa
File:                     AS211509.roa (raw, json)
Hash identifier:          j1r7mH2dUKNZwffwbPzWivJa2Gv9pgqlWJxJfm5zFNo=
Subject key identifier:   8E:7C:EC:F5:FB:7A:07:4C:A7:03:72:52:1F:40:EB:93:FB:68:7F:D9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5CC5C72AE59A15361EF1CEFA1F389001A9D6E559
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS211509.roa
Signing time:             Thu 06 Jul 2023 11:17:10 +0000
ROA not before:           Thu 06 Jul 2023 11:12:10 +0000
ROA not after:            Thu 04 Jul 2024 11:17:10 +0000
asID:                     211509
IP address blocks:        2a05:dfc7:8500::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c5:c7:2a:e5:9a:15:36:1e:f1:ce:fa:1f:38:90:01:a9:d6:e5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:10 2023 GMT
            Not After : Jul  4 11:17:10 2024 GMT
        Subject: CN=8E7CECF5FB7A074CA70372521F40EB93FB687FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:c8:46:48:29:db:e9:b7:01:c1:af:91:23:
                    fb:18:4b:18:9c:58:14:66:24:03:74:be:af:ba:c2:
                    0c:26:8d:6b:1d:1e:8e:5a:9c:75:26:68:b4:cc:80:
                    e8:95:cc:f1:70:73:7e:53:e3:ad:f2:cf:40:66:9d:
                    29:a0:9d:3f:5d:b7:81:19:10:72:b6:a9:43:f8:fa:
                    44:c1:bc:6c:29:9c:b1:ef:83:a3:a4:26:7e:57:21:
                    cc:f9:92:04:4f:78:e4:0c:4c:cd:45:ed:ae:41:4f:
                    50:46:73:ac:56:9d:4f:22:ba:d6:42:06:fa:36:00:
                    80:80:bb:4d:04:b9:4b:b9:c9:89:60:1b:a8:ba:67:
                    73:2f:ac:de:73:6f:5e:f6:2b:28:fa:40:0b:92:47:
                    c6:2a:5d:4a:fb:13:69:e8:51:dd:06:6a:34:1c:9d:
                    f7:bf:3a:48:3a:91:95:8c:34:05:5a:5e:cc:50:5c:
                    cc:32:41:9b:b5:07:1b:eb:85:1e:ef:6f:3b:ab:f5:
                    70:a3:66:f2:e9:b3:08:7b:b7:97:b6:3d:c6:e3:7d:
                    58:46:b6:c6:c7:3c:a1:03:4c:00:01:d4:57:97:2f:
                    b3:d8:84:3b:e3:37:29:f9:26:c2:10:c3:06:f9:4b:
                    ae:2c:8b:a9:2d:8b:a2:72:86:e9:98:b0:7b:25:4e:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7C:EC:F5:FB:7A:07:4C:A7:03:72:52:1F:40:EB:93:FB:68:7F:D9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS211509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8500::/43

    Signature Algorithm: sha256WithRSAEncryption
         b1:c9:ff:5b:ab:cc:f7:61:c8:e4:12:b8:38:04:11:2c:b6:bb:
         6c:9d:f7:f1:ea:d5:19:b0:d4:0e:72:1e:47:85:d6:3e:f1:c6:
         32:2c:1a:6c:6f:a4:5f:3f:ff:13:a2:39:f9:ec:e6:d5:4b:f0:
         84:a9:b8:91:36:10:fe:72:33:7e:3e:8d:59:4f:5e:20:cb:26:
         3d:b5:46:d6:85:a4:a2:75:fd:c8:0a:2d:6b:6e:69:26:be:2d:
         05:45:c4:40:f0:2a:c4:80:31:1f:ec:de:d4:3c:9e:2d:b3:c6:
         59:0d:30:fb:1e:49:2a:16:a6:bb:7a:7a:42:e5:6d:92:90:3d:
         b4:ff:b2:be:92:ee:71:91:c5:45:4a:20:9b:6f:98:a9:ae:fd:
         22:43:d0:77:13:58:e9:68:60:09:24:99:7e:19:72:1f:00:65:
         7a:c5:83:ab:f2:73:37:8d:3f:e8:e9:a3:9b:68:60:d0:c3:20:
         d2:29:fd:d8:6a:51:2f:2d:bf:e4:71:8d:4c:a9:d0:a2:fc:db:
         ac:72:c7:35:3c:d9:09:4d:03:35:7d:bf:54:8f:95:ab:c4:67:
         eb:76:84:f5:19:e9:ad:01:f1:c5:c0:5a:4b:21:f0:6a:c9:2d:
         e1:c9:dc:d4:b6:c6:f0:b3:3f:a8:94:4d:77:c3:ee:e0:3b:e9:
         d9:14:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----