Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS212504.roa
File:                     AS212504.roa (raw, json)
Hash identifier:          MJqSiULPSzIB2mDRP1MBzvYLI8fTFOFN5L136ltWMXI=
Subject key identifier:   A2:8A:25:18:70:B2:8C:DF:E6:60:85:4B:77:72:A5:D1:49:9E:08:56
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       350FEA27A54561CB883A5F22011FDE2FF840F09B
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS212504.roa
Signing time:             Thu 06 Jul 2023 11:17:13 +0000
ROA not before:           Thu 06 Jul 2023 11:12:13 +0000
ROA not after:            Thu 04 Jul 2024 11:17:13 +0000
asID:                     212504
IP address blocks:        2a05:dfc7:93e0::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0f:ea:27:a5:45:61:cb:88:3a:5f:22:01:1f:de:2f:f8:40:f0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:13 2023 GMT
            Not After : Jul  4 11:17:13 2024 GMT
        Subject: CN=A28A251870B28CDFE660854B7772A5D1499E0856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:1b:a8:87:9e:d3:d2:3c:2d:bc:f6:83:10:
                    9f:24:74:16:90:49:c3:5f:43:c1:58:8b:fc:c7:ca:
                    5d:eb:e6:fa:90:62:03:1c:44:9d:4d:67:bb:f4:5f:
                    63:7a:c1:8a:8c:10:02:78:fe:12:23:33:96:f1:69:
                    96:aa:c2:63:85:0a:ee:e8:26:1e:2a:8d:22:18:ec:
                    50:b6:df:f0:4d:4f:5c:f3:23:ec:3a:2e:12:41:5d:
                    3f:b1:cd:b8:0d:74:b9:58:7c:2a:eb:b6:fe:e7:56:
                    41:fb:90:11:ab:a3:d2:11:29:fe:32:11:1d:9f:a7:
                    26:4d:42:58:55:5c:65:07:db:2b:4e:7d:f9:0f:55:
                    cb:6d:65:b5:79:f7:fa:3c:5e:18:f5:52:a0:dc:e5:
                    85:55:c2:11:a6:52:d1:7d:75:e2:c6:ef:4f:32:34:
                    68:07:68:72:a8:47:5a:11:6b:ba:0b:be:95:a0:14:
                    c6:ff:0a:56:70:4b:79:39:1f:96:3b:41:b7:91:c5:
                    bf:8e:3f:b7:db:ff:30:86:b2:2e:7b:ad:fc:5e:4d:
                    3d:fa:37:af:b4:df:16:a3:ce:8c:14:34:e8:0f:90:
                    df:9c:b7:a7:1f:28:28:c5:06:de:e1:26:b6:a2:32:
                    99:03:2d:a4:85:7a:45:5e:a0:94:c1:a0:c1:0e:90:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8A:25:18:70:B2:8C:DF:E6:60:85:4B:77:72:A5:D1:49:9E:08:56
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS212504.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:93e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:2a:10:3d:70:d4:1b:f2:7c:b9:53:ef:bb:87:3a:46:45:
         aa:f2:18:12:32:55:93:8d:8a:bd:f5:aa:55:3f:06:a9:61:2a:
         fc:ce:24:f6:25:ce:b1:b5:83:10:ea:bc:ef:02:19:c7:33:26:
         6e:51:e9:7c:14:13:f7:60:e8:15:0c:50:0a:14:c4:2e:a4:ab:
         fe:68:ec:be:38:65:b1:e7:fc:14:17:f3:8e:f4:72:a2:af:d5:
         5e:1d:3d:9e:9a:d8:1e:05:fe:89:32:49:83:b0:55:6f:d2:a8:
         91:c6:be:02:5a:b3:56:b8:4e:7c:06:41:36:32:0b:da:a9:4c:
         91:aa:12:7f:76:b5:ca:95:c9:bb:3d:2f:36:3f:14:ee:2d:0f:
         03:7d:80:91:68:9e:ad:a3:29:7a:86:b7:59:aa:6f:66:8d:96:
         95:ca:3b:0a:eb:b2:af:f9:bc:dd:0d:85:49:3b:ca:0d:44:bf:
         88:be:da:f7:66:2f:59:47:19:23:a8:90:30:99:eb:24:ef:f5:
         09:3f:12:7f:37:8c:0f:54:48:4a:3b:a5:ed:9a:ee:73:a3:7a:
         37:c2:ef:c0:95:51:cf:2b:17:f7:61:83:02:7b:1b:40:67:70:
         20:75:08:17:99:89:2d:42:74:9a:19:2a:19:c3:75:d7:eb:60:
         c8:fd:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----