Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS212252.roa
File:                     AS212252.roa (raw, json)
Hash identifier:          aS/a9B11znF3yr59ipj7jv7vuRpsBnDop7GSKRabyWY=
Subject key identifier:   FA:DF:9A:42:72:84:D4:53:05:D7:AA:34:3B:11:1D:C8:74:F4:8B:CE
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       31BEEDC57DAD0591D09D49863CEB5E684DEA54A0
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS212252.roa
Signing time:             Sat 07 Oct 2023 12:39:51 +0000
ROA not before:           Sat 07 Oct 2023 12:34:51 +0000
ROA not after:            Sat 05 Oct 2024 12:39:51 +0000
asID:                     212252
IP address blocks:        2a05:dfc7:2200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:be:ed:c5:7d:ad:05:91:d0:9d:49:86:3c:eb:5e:68:4d:ea:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct  7 12:34:51 2023 GMT
            Not After : Oct  5 12:39:51 2024 GMT
        Subject: CN=FADF9A427284D45305D7AA343B111DC874F48BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:ec:5c:9b:bc:8d:37:dd:95:11:56:fe:f3:
                    ae:11:20:b8:10:ef:ef:7a:e4:3d:5d:a6:29:f0:dd:
                    a9:f4:5b:7b:5e:7a:14:14:46:9a:67:dd:0b:f9:7d:
                    3c:a1:96:d0:ec:48:ea:ae:31:2e:75:cf:0e:e0:cc:
                    4e:d2:de:cc:db:62:03:58:56:37:2e:41:61:42:15:
                    69:e1:6d:f2:43:6f:01:23:3c:85:02:33:a0:7c:9d:
                    3a:71:d8:8e:3e:87:2b:33:f7:a6:06:ff:13:cd:f8:
                    0c:fc:97:5f:dd:7e:ec:b5:e0:93:d0:16:d8:c7:72:
                    2a:5e:6a:98:34:21:94:3e:bf:bf:12:61:bb:27:78:
                    3a:1b:dd:1f:14:54:ff:c4:a3:f5:03:3c:46:b5:73:
                    24:84:4a:49:ca:73:24:70:6f:18:15:3e:28:ec:9f:
                    bf:cc:2d:ae:51:c2:96:a3:d3:a5:1e:4e:ea:db:c8:
                    1b:0c:64:19:e5:e4:6a:f6:98:05:87:6a:e4:bf:1e:
                    ee:04:6e:28:69:ee:95:71:64:f1:b7:f0:32:5b:d5:
                    d7:37:c2:e5:f5:eb:83:b8:a3:f8:fe:92:7e:65:ba:
                    52:8c:b0:04:0e:b9:56:8e:8e:40:59:2e:99:72:a7:
                    fd:df:b1:00:0f:22:d3:a3:be:f9:eb:ef:d3:00:58:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DF:9A:42:72:84:D4:53:05:D7:AA:34:3B:11:1D:C8:74:F4:8B:CE
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS212252.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:c7:eb:7f:84:c1:69:72:98:3c:75:74:4a:bc:b9:7d:e7:cd:
         c9:53:03:0c:df:2e:ba:f9:b7:b3:11:8c:dd:73:c6:ff:92:06:
         75:87:27:d1:47:25:b4:6b:ae:8a:9e:2e:d6:3f:d5:8c:0a:ca:
         0a:33:ce:b8:11:26:da:71:be:42:bc:38:17:cf:ea:cc:14:72:
         27:f5:d1:7f:38:6c:3e:ea:30:11:a6:c7:54:b9:a2:33:0a:e2:
         e2:c1:39:78:d7:4f:e2:d7:30:04:99:ea:0e:a7:4c:a9:3a:72:
         e2:8b:9e:84:17:c7:e6:b1:06:a1:8e:ca:12:91:53:cd:e8:c1:
         6c:5e:52:8e:91:b6:7e:ce:48:63:6d:a8:29:62:96:ff:18:9b:
         31:35:17:8e:91:2f:16:a4:32:a9:62:4f:01:17:e3:4b:7c:55:
         b6:08:6b:05:8c:ef:3a:ad:b6:64:5a:dc:13:97:d6:74:89:ea:
         86:35:e3:94:c2:ce:22:f7:fc:da:ea:90:03:b8:7d:1a:67:6c:
         f0:70:cd:b6:7a:43:d6:bf:ad:a7:bf:ee:2b:ad:0c:21:b9:f2:
         9c:a1:f8:f7:17:67:56:97:d9:df:de:78:35:8e:37:38:17:66:
         7f:ba:ba:23:ab:00:eb:7c:5c:f9:e0:a7:6f:79:41:b1:3a:43:
         ee:f4:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----