Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS212173.roa
File:                     AS212173.roa (raw, json)
Hash identifier:          XytDTdii4fX9+YY4rD87/DlpWZkZfmKQ4K0vnQD+GNU=
Subject key identifier:   1B:20:77:CA:9B:30:32:01:0A:DF:BD:A1:3F:29:AE:A3:E3:9A:F8:5E
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5E970C8E329E274A416BC10E7222E53ABB7A56C5
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS212173.roa
Signing time:             Thu 06 Jul 2023 11:17:31 +0000
ROA not before:           Thu 06 Jul 2023 11:12:31 +0000
ROA not after:            Thu 04 Jul 2024 11:17:31 +0000
asID:                     212173
IP address blocks:        2a05:dfc7:6200::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:97:0c:8e:32:9e:27:4a:41:6b:c1:0e:72:22:e5:3a:bb:7a:56:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:31 2023 GMT
            Not After : Jul  4 11:17:31 2024 GMT
        Subject: CN=1B2077CA9B3032010ADFBDA13F29AEA3E39AF85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:8a:04:3b:6f:b4:58:07:cf:7f:95:02:79:
                    7a:6f:54:0b:94:d5:4f:fd:00:08:c4:af:4a:b8:20:
                    06:f9:48:9a:c2:f1:71:09:8a:db:39:50:de:01:90:
                    e5:5b:01:33:20:a7:8e:b9:b2:59:0c:97:46:d0:72:
                    84:12:36:be:f8:bc:38:02:d8:47:03:d2:19:52:0d:
                    25:ea:de:b5:dd:fa:ce:5f:19:0e:1a:54:c5:1f:ab:
                    33:a4:07:47:23:e1:d3:a5:f4:e2:43:57:75:02:d0:
                    79:f3:34:07:20:e3:89:5b:a1:2c:52:4e:ce:16:8b:
                    09:06:6c:5f:fd:bc:f6:4c:93:fa:64:11:35:76:d5:
                    b1:2d:f3:d8:fe:36:69:47:61:06:e2:1c:9e:c5:17:
                    c7:ff:7a:f4:c5:52:93:d6:e7:30:89:30:04:4a:81:
                    db:f6:21:a1:eb:17:63:e4:d9:98:2d:24:97:cf:8c:
                    1c:b0:7d:98:d2:33:3a:08:fc:50:da:e3:40:aa:ea:
                    88:05:01:10:5f:8d:1c:90:ad:c1:f7:23:52:06:56:
                    be:55:e5:a8:70:79:84:8a:d6:f1:be:5c:97:de:1c:
                    18:97:61:9b:6d:8a:6b:fd:2a:21:83:2e:70:94:e6:
                    49:de:30:e3:b9:63:d0:e4:9d:15:a7:fb:e9:b8:b5:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:20:77:CA:9B:30:32:01:0A:DF:BD:A1:3F:29:AE:A3:E3:9A:F8:5E
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS212173.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6200::/39

    Signature Algorithm: sha256WithRSAEncryption
         7f:f2:b1:e4:49:3d:0e:44:ae:78:19:fb:ae:e2:b0:3e:32:63:
         3b:28:fa:0a:83:01:7e:d9:9c:77:38:46:96:b1:7e:6e:44:16:
         13:6e:3f:2d:0f:de:bc:05:11:de:af:65:a9:86:87:ab:19:84:
         82:a3:41:da:31:01:79:41:03:b4:9b:9d:05:06:a9:8c:18:39:
         96:3f:9c:0a:06:c9:01:94:9c:ee:97:04:61:96:77:71:4a:e4:
         34:40:1c:22:12:26:fc:d1:33:a3:12:8c:10:e0:ed:2c:52:ce:
         1f:41:4c:b2:bc:9d:53:7c:65:30:00:de:24:5a:e8:ee:b0:5c:
         f5:9a:7d:ac:c9:f8:64:f1:78:dd:8e:71:7e:08:19:df:5d:58:
         ee:db:51:87:97:f5:50:f7:73:f1:3c:7d:82:64:d4:b5:29:3e:
         0b:0c:51:aa:a6:57:42:aa:4e:c8:9e:2d:58:cd:16:5e:e6:19:
         56:3e:df:28:5e:af:f6:3d:ff:c2:46:97:1b:ed:3f:28:b4:94:
         ae:b1:60:58:99:e5:60:58:6f:73:00:b9:81:88:77:bc:1d:cb:
         04:8d:61:10:1d:28:a3:4c:25:41:ed:ae:dc:69:2e:1a:4c:d0:
         65:99:81:a8:2b:a1:d6:f6:93:fe:07:38:13:ac:34:d3:94:f0:
         c7:43:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----