Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS211962.roa
File:                     AS211962.roa (raw, json)
Hash identifier:          24CrCPvFo6uI6qEdJw7TgtADvThmMarAzFSz19mI/dw=
Subject key identifier:   EB:45:19:41:35:CB:33:16:3A:FA:D1:8B:53:C3:30:F8:5A:10:FE:B8
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0C92F4B7D183A00116616BB7211E3BCC9FA46B26
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS211962.roa
Signing time:             Mon 16 Oct 2023 08:17:42 +0000
ROA not before:           Mon 16 Oct 2023 08:12:42 +0000
ROA not after:            Mon 14 Oct 2024 08:17:42 +0000
asID:                     211962
IP address blocks:        2a06:1287:d800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:92:f4:b7:d1:83:a0:01:16:61:6b:b7:21:1e:3b:cc:9f:a4:6b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct 16 08:12:42 2023 GMT
            Not After : Oct 14 08:17:42 2024 GMT
        Subject: CN=EB45194135CB33163AFAD18B53C330F85A10FEB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:44:91:55:ee:b9:55:31:8f:19:38:27:2c:
                    a6:c8:b0:17:5f:84:2c:7e:ac:77:dc:24:c1:86:16:
                    00:40:66:d1:b6:1b:8e:c1:d9:c4:0b:22:f3:07:e6:
                    bd:10:9a:f0:5b:06:af:1c:91:dc:b7:b6:e2:fd:75:
                    02:c4:4d:31:7d:b0:f0:6f:dc:a1:28:f1:fd:70:d1:
                    d5:73:29:cc:e7:57:7f:3f:8e:69:64:d8:c8:02:f7:
                    e3:c6:b6:fd:a2:90:39:69:65:e4:f4:73:38:34:4b:
                    a7:f4:11:8d:c0:97:c8:fe:9c:fb:39:ac:0c:38:ab:
                    cf:df:de:ec:73:eb:5c:98:0c:3b:6f:61:69:34:8e:
                    06:38:eb:df:b9:53:0f:41:96:1d:6a:9a:cd:f4:02:
                    cf:de:81:ba:62:96:9c:dd:29:30:16:11:fa:96:1f:
                    90:37:03:40:2f:33:27:74:49:3f:f5:31:95:ed:e1:
                    85:62:f2:f6:17:93:47:87:0f:50:30:b4:bb:d3:90:
                    27:d7:0d:af:7e:da:f8:7d:ca:69:73:4d:41:f7:a3:
                    60:3e:e6:90:5b:fd:0c:81:80:61:a6:a4:a8:dc:65:
                    de:4c:32:7b:d4:e1:45:cc:70:25:dc:db:7c:18:8f:
                    3b:85:92:45:d0:d9:70:ef:e0:a8:a4:a8:22:25:3c:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:45:19:41:35:CB:33:16:3A:FA:D1:8B:53:C3:30:F8:5A:10:FE:B8
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS211962.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:d800::/39

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:d0:9c:a8:34:8a:cd:5a:2c:ad:b6:fe:9b:fa:15:84:d7:
         05:45:d7:53:eb:22:ec:85:23:2f:1c:e0:a3:49:30:a8:c5:7d:
         19:6b:e4:78:4a:f1:8a:8d:5c:41:47:cb:c8:43:8c:d8:9a:65:
         e0:40:00:49:c9:6a:33:0d:6d:bd:31:df:64:7a:c4:39:5b:b0:
         b7:ca:70:43:7a:85:60:05:d0:46:10:2a:33:8c:46:76:42:3e:
         e7:64:d6:a5:45:ed:5a:c6:80:b9:23:41:35:e6:cb:9c:42:91:
         d4:d8:eb:7d:05:1f:a3:07:66:e6:99:77:a4:66:fa:91:7f:32:
         51:05:81:b6:85:12:36:51:a6:11:26:dc:20:76:c2:99:09:aa:
         79:b2:30:5a:69:c7:f3:65:f8:1d:34:bd:09:63:36:60:f8:83:
         fb:4c:db:cd:1f:87:18:96:b5:a0:4a:1d:5b:5d:85:79:04:4e:
         df:50:f3:c7:a2:c5:ad:04:a7:8d:bb:b4:5c:72:47:98:5c:eb:
         f7:44:dc:7b:88:66:9e:25:1a:58:fd:31:fa:6d:d8:ba:f7:6a:
         3f:69:59:c1:6c:b7:61:88:19:98:49:5d:fd:8d:55:bd:19:38:
         6d:b9:70:0d:68:77:79:54:6e:50:a1:8b:06:5f:ac:70:c1:41:
         27:e5:f5:35
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUDJL0t9GDoAEWYWu3IR47zJ+kayYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzEwMTYwODEyNDJaFw0yNDEwMTQwODE3NDJaMDMxMTAvBgNV
BAMTKEVCNDUxOTQxMzVDQjMzMTYzQUZBRDE4QjUzQzMzMEY4NUExMEZFQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicUSRVe65VTGPGTgnLKbIsBdf
hCx+rHfcJMGGFgBAZtG2G47B2cQLIvMH5r0QmvBbBq8ckdy3tuL9dQLETTF9sPBv
3KEo8f1w0dVzKcznV38/jmlk2MgC9+PGtv2ikDlpZeT0czg0S6f0EY3Al8j+nPs5
rAw4q8/f3uxz61yYDDtvYWk0jgY469+5Uw9Blh1qms30As/egbpilpzdKTAWEfqW
H5A3A0AvMyd0ST/1MZXt4YVi8vYXk0eHD1AwtLvTkCfXDa9+2vh9ymlzTUH3o2A+
5pBb/QyBgGGmpKjcZd5MMnvU4UXMcCXc23wYjzuFkkXQ2XDv4KikqCIlPK6JAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQU60UZQTXLMxY6+tGLU8Mw+FoQ/rgwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjExOTYyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgYSh9gwDQYJKoZIhvcN
AQELBQADggEBAJbj0JyoNIrNWiyttv6b+hWE1wVF11PrIuyFIy8c4KNJMKjFfRlr
5HhK8YqNXEFHy8hDjNiaZeBAAEnJajMNbb0x32R6xDlbsLfKcEN6hWAF0EYQKjOM
RnZCPudk1qVF7VrGgLkjQTXmy5xCkdTY630FH6MHZuaZd6Rm+pF/MlEFgbaFEjZR
phEm3CB2wpkJqnmyMFppx/Nl+B00vQljNmD4g/tM280fhxiWtaBKHVtdhXkETt9Q
88eixa0Ep427tFxyR5hc6/dE3HuIZp4lGlj9Mfpt2Lr3aj9pWcFst2GIGZhJXf2N
Vb0ZOG25cA1od3lUblChiwZfrHDBQSfl9TU=
-----END CERTIFICATE-----