Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS211604.roa
File:                     AS211604.roa (raw, json)
Hash identifier:          /GikVgxdH7pDwuMDwwMMYv90VQjifRFX1bDOFqg3/bo=
Subject key identifier:   61:A4:FB:4E:57:B2:51:0F:B3:8C:52:27:70:7D:8E:95:CB:BA:17:E2
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       2D0EA99568460307F28DFBCC0E2A4F3693088669
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS211604.roa
Signing time:             Mon 24 Jul 2023 12:45:52 +0000
ROA not before:           Mon 24 Jul 2023 12:40:52 +0000
ROA not after:            Mon 22 Jul 2024 12:45:52 +0000
asID:                     211604
IP address blocks:        2a05:dfc7:9200::/39 maxlen: 48
                          2a06:1287:7200::/39 maxlen: 48
                          2a06:1287:b3c0::/43 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0e:a9:95:68:46:03:07:f2:8d:fb:cc:0e:2a:4f:36:93:08:86:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 24 12:40:52 2023 GMT
            Not After : Jul 22 12:45:52 2024 GMT
        Subject: CN=61A4FB4E57B2510FB38C5227707D8E95CBBA17E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:16:23:b1:0d:14:8a:34:14:cd:99:2f:db:
                    2c:38:a2:1c:52:be:4e:cc:c1:a3:ae:96:f0:f6:23:
                    a3:95:a1:26:53:31:58:be:7e:3a:2f:b3:ab:d6:c6:
                    57:6a:84:03:66:ea:e7:5a:ca:6f:b7:e2:0e:be:61:
                    c3:84:6b:fa:87:d1:96:a1:a8:65:57:29:03:bf:33:
                    f6:d9:ba:55:79:3b:8d:23:7f:51:d4:60:22:b5:e8:
                    43:f2:ba:94:21:49:32:ad:40:37:dc:f0:25:82:d1:
                    18:9c:64:ad:d3:f4:5f:e4:d7:d7:2c:1a:39:5d:c1:
                    86:48:52:ba:1e:0f:d6:13:bf:9c:e4:30:6f:3a:e9:
                    0c:4d:4b:cb:73:74:73:68:6a:e3:05:b6:1e:63:83:
                    ca:6b:fc:c8:32:5c:54:01:a5:6e:7d:0b:c4:cf:d0:
                    54:9a:87:25:e3:aa:90:15:b0:58:da:97:7b:95:c8:
                    94:49:0b:09:8e:0d:08:e4:b4:0c:97:fc:12:bd:eb:
                    17:6c:5f:d6:ef:af:b3:48:df:af:af:6f:69:c0:9d:
                    16:e0:5f:65:12:2c:3d:91:bd:c1:48:22:51:72:06:
                    fc:58:9a:6b:7f:6f:b6:40:16:fb:e6:aa:48:02:fc:
                    d2:d8:8c:83:17:26:e2:59:31:1c:97:f1:26:b4:11:
                    84:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A4:FB:4E:57:B2:51:0F:B3:8C:52:27:70:7D:8E:95:CB:BA:17:E2
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS211604.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:9200::/39
                  2a06:1287:7200::/39
                  2a06:1287:b3c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         20:bc:3b:8a:1d:18:62:73:f7:d8:51:35:95:dc:99:a0:94:3d:
         3c:0e:88:be:d5:ca:54:8c:01:7d:15:4d:16:67:05:c1:cd:49:
         5b:b1:fe:ec:97:d7:7c:9e:b4:40:44:3b:e6:da:19:c6:cb:14:
         d3:90:c7:05:49:79:7f:f8:49:45:1b:66:0d:eb:79:26:ff:d5:
         f3:cb:6c:96:bc:8f:f8:ef:88:56:32:7d:4d:ec:e6:dc:12:53:
         b7:59:14:b7:0b:12:7d:f2:e0:48:76:75:43:d4:08:2c:3e:1a:
         c0:d3:b1:be:0f:a1:9e:c0:d1:c9:34:af:69:13:d2:d3:dc:fe:
         e7:4a:53:27:75:f0:f8:c3:71:fd:e0:10:d8:9c:bd:52:13:51:
         c8:08:46:66:43:85:13:a0:ea:51:ea:cb:2b:cc:4b:b9:db:32:
         db:c2:e9:2d:e1:20:44:eb:e3:bf:65:90:08:cc:02:a1:49:0a:
         bb:94:e2:ed:6f:75:10:82:87:66:e6:f5:81:77:54:b3:78:bf:
         16:3d:c8:9d:62:5f:52:c9:0d:5a:83:79:eb:49:80:ab:dd:b4:
         5c:68:09:f9:da:bb:3f:f8:5c:47:3d:b0:3f:87:29:bd:db:56:
         f7:41:39:f2:e1:5f:95:4f:47:11:7f:dd:5f:95:39:aa:9a:71:
         fb:55:2d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----