Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS212170.roa
File:                     AS212170.roa (raw, json)
Hash identifier:          Oe401GUwqX09UBA+Gmy43qNFv3oXojjYxtwyyeLmOZ8=
Subject key identifier:   62:DE:4E:2C:5D:D4:2C:09:33:CE:DA:4F:09:74:5E:51:AD:08:5E:C8
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0E489A546F5A3807EFD4E0CDAADD5E42BC94810F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS212170.roa
Signing time:             Thu 31 Aug 2023 09:54:14 +0000
ROA not before:           Thu 31 Aug 2023 09:49:14 +0000
ROA not after:            Thu 29 Aug 2024 09:54:14 +0000
asID:                     212170
IP address blocks:        2a05:dfc7:de00::/39 maxlen: 48
                          2a06:1287:da00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:48:9a:54:6f:5a:38:07:ef:d4:e0:cd:aa:dd:5e:42:bc:94:81:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug 31 09:49:14 2023 GMT
            Not After : Aug 29 09:54:14 2024 GMT
        Subject: CN=62DE4E2C5DD42C0933CEDA4F09745E51AD085EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3a:5d:2d:82:4c:8b:18:3b:39:2e:ea:6f:34:
                    f2:ca:55:8b:0c:ce:8b:57:2d:16:a4:39:2e:59:d7:
                    ef:1e:c9:c5:8a:d8:17:2d:df:87:25:59:e7:1b:6a:
                    be:7e:45:00:f3:67:15:e3:d5:bb:c8:b9:4c:9d:c5:
                    fc:44:43:77:4c:c8:8b:1a:30:11:6d:3e:85:12:b8:
                    33:1d:ea:75:c4:07:3e:31:72:50:29:71:85:e3:03:
                    26:66:1e:4b:03:c3:85:a8:f5:8d:70:a0:ff:e7:dc:
                    6b:88:76:0a:e7:b8:56:e7:96:d7:6f:cc:f6:2b:b1:
                    56:44:f3:fd:ba:a0:fc:78:3b:df:ad:1c:de:25:af:
                    65:e4:53:5e:56:ba:6b:9e:12:9b:63:86:0b:13:d8:
                    94:5a:fa:20:12:b9:6c:7a:bd:41:96:57:09:32:94:
                    71:15:9e:2d:05:ae:1b:12:cf:c8:d4:29:e0:75:9f:
                    84:96:8b:b4:ba:ca:92:17:39:fc:10:11:2e:cb:31:
                    fa:6b:ce:60:b8:99:5e:e1:dc:80:f2:da:b8:7b:17:
                    24:33:ce:87:be:83:02:c6:fb:93:c7:57:d1:c2:4c:
                    33:f2:3f:95:a6:8d:96:39:e4:40:fc:75:57:a1:4e:
                    cb:15:96:a4:29:33:f1:8f:e0:9e:2c:0d:c8:97:58:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DE:4E:2C:5D:D4:2C:09:33:CE:DA:4F:09:74:5E:51:AD:08:5E:C8
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS212170.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:de00::/39
                  2a06:1287:da00::/39

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:a6:f4:b8:5e:d5:cf:09:21:80:31:d5:da:df:96:76:10:
         d4:04:53:d7:98:67:57:42:9e:d2:96:ee:39:52:85:d0:77:c4:
         f4:ff:b9:17:26:54:2f:93:a9:2b:0b:e8:c2:cc:b6:9f:d0:42:
         64:21:d6:e3:b2:07:a8:f8:82:39:c2:5a:44:21:5b:38:99:1a:
         7f:69:47:5e:06:7e:d7:06:80:2b:31:41:ff:76:16:a9:10:3e:
         d7:18:3b:5d:97:23:47:97:33:d0:ec:cf:f8:25:65:50:fd:d0:
         b9:3f:59:3b:cd:26:a8:d2:3f:d3:a6:62:97:5f:3a:46:cc:0d:
         64:a5:75:79:fe:32:17:75:ae:26:b0:23:ae:76:f4:20:9c:ab:
         e1:c5:28:48:66:29:de:3a:16:14:d8:31:a7:14:96:db:35:5a:
         fb:f1:6c:0b:55:38:b1:0e:01:8d:58:ed:9c:68:16:76:a7:f9:
         76:56:68:e8:b0:d7:19:a8:ac:b4:eb:23:82:00:c6:12:7b:e7:
         05:74:ca:c0:44:6b:89:95:d7:d7:e8:d0:4a:e7:45:89:78:a6:
         eb:40:6b:75:ab:4d:d4:3f:ba:14:32:5b:b9:1a:6b:1e:ff:1d:
         5e:1c:ab:5c:3d:1b:db:d4:bd:6d:1c:f4:95:75:84:11:ee:26:
         af:42:08:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----