Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS212294.roa
File:                     AS212294.roa (raw, json)
Hash identifier:          vguRhs/s8wTvjJwr+rTel/OrSekSQl6bW7fl/0ZpVnc=
Subject key identifier:   67:04:16:3A:E5:9C:31:9E:1E:5F:12:8A:68:F1:EB:A8:2F:47:07:9C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       30F60BB812E4E2C62FF74532413DBC8B6EF05BED
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS212294.roa
Signing time:             Thu 06 Jul 2023 11:17:33 +0000
ROA not before:           Thu 06 Jul 2023 11:12:33 +0000
ROA not after:            Thu 04 Jul 2024 11:17:33 +0000
asID:                     212294
IP address blocks:        2a05:dfc7:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f6:0b:b8:12:e4:e2:c6:2f:f7:45:32:41:3d:bc:8b:6e:f0:5b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:33 2023 GMT
            Not After : Jul  4 11:17:33 2024 GMT
        Subject: CN=6704163AE59C319E1E5F128A68F1EBA82F47079C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:01:9b:40:bf:14:53:59:67:1b:82:8f:83:
                    ab:d9:49:1a:8c:46:47:8e:28:74:99:4e:e9:b8:22:
                    75:34:97:e1:db:4e:08:13:24:74:a4:cb:b9:0b:be:
                    7d:5c:d3:20:04:b3:41:49:72:86:12:e9:ff:af:da:
                    1e:d9:b3:0f:2d:95:8d:48:52:c4:f5:63:32:dd:8a:
                    5b:0f:38:20:53:73:ee:49:9b:ff:51:8c:cc:ed:04:
                    74:bd:e9:b7:11:35:0e:9a:91:e5:e3:a5:69:90:e0:
                    b4:a6:84:b2:3e:07:57:1e:5f:f5:4d:1b:12:3a:e7:
                    af:4c:aa:31:17:52:f2:c3:49:2c:8b:ef:5e:d3:00:
                    d4:17:a3:e5:f3:4a:34:1e:4f:ca:89:10:b8:29:b3:
                    3a:a1:cf:88:09:c5:5f:f3:3e:39:ec:b2:55:a7:8d:
                    95:f5:0e:42:54:27:98:82:2c:66:02:e7:eb:86:ad:
                    02:91:9f:eb:7f:d2:ef:08:7e:cd:b7:d4:38:88:ce:
                    e0:18:e2:b9:08:4b:32:9e:d4:c5:59:f0:08:04:87:
                    5a:48:f9:5a:18:79:b5:fe:1a:84:cc:59:06:9e:8c:
                    3d:e0:7a:2e:57:eb:5b:8a:56:1a:99:8e:19:a7:07:
                    ba:9e:f4:60:4a:9b:e5:35:bf:fa:2e:96:7e:e2:f7:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:04:16:3A:E5:9C:31:9E:1E:5F:12:8A:68:F1:EB:A8:2F:47:07:9C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS212294.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:f3:3e:b0:0e:05:d1:3b:89:60:d4:33:64:12:00:58:eb:
         5d:4e:07:c3:c6:65:07:10:cc:d8:81:3c:56:65:11:20:e6:64:
         3d:6e:1c:0e:77:f9:55:b7:81:35:6f:de:2c:b8:fd:61:fd:73:
         fa:c0:01:bb:41:51:6e:a6:77:23:9c:bd:df:b8:84:9e:b3:12:
         fb:f4:aa:89:65:6c:31:ae:1c:57:d4:0a:3c:50:d8:02:1b:75:
         f3:6f:fb:4d:0d:a8:fb:33:ad:09:24:ba:78:f7:17:00:67:9e:
         be:a6:87:e9:37:96:37:e0:29:26:95:35:86:de:4e:b5:c2:29:
         18:ef:cb:84:81:b7:7d:79:20:57:d2:a4:5c:d2:58:77:79:9a:
         e8:28:74:1b:13:d0:09:44:63:a2:26:33:ad:73:6b:2f:81:66:
         10:e7:d0:4e:dc:f9:8d:00:a3:ac:e8:a1:3e:b0:27:15:93:ea:
         c4:0c:a5:d1:80:c2:32:24:9b:60:6f:75:1c:bb:76:be:cc:89:
         95:34:eb:c2:f0:55:d3:84:a0:30:c7:3d:9a:d5:37:62:9e:ac:
         b8:16:8c:d4:e9:ef:b7:ff:88:bc:b0:9e:e9:01:d0:a1:45:04:
         bb:4d:28:1e:b1:1a:7d:95:ee:aa:e0:55:9e:2c:1a:f8:e7:77:
         f4:5d:c1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----