Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS212516.roa
File:                     AS212516.roa (raw, json)
Hash identifier:          rqKl+4ctQNZstXcY8qiE+x5JFo8RL83NQucqAzlDx5Y=
Subject key identifier:   BD:A6:6C:66:DE:CC:F2:4E:4E:44:28:B4:0B:70:97:54:9D:67:C2:A7
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3D2E483B3F5BCBCB1690FCBC2F462F853DE5456D
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS212516.roa
Signing time:             Fri 01 Sep 2023 06:37:41 +0000
ROA not before:           Fri 01 Sep 2023 06:32:41 +0000
ROA not after:            Fri 30 Aug 2024 06:37:41 +0000
asID:                     212516
IP address blocks:        2a06:1287:5850::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2e:48:3b:3f:5b:cb:cb:16:90:fc:bc:2f:46:2f:85:3d:e5:45:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep  1 06:32:41 2023 GMT
            Not After : Aug 30 06:37:41 2024 GMT
        Subject: CN=BDA66C66DECCF24E4E4428B40B7097549D67C2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:b8:94:2f:b0:ac:e1:cf:c1:59:a6:97:15:
                    6a:05:f4:8b:cb:1f:4e:ac:52:ad:7b:f4:75:03:e7:
                    f4:f6:43:36:ef:d7:d4:89:4f:0c:04:9e:c7:bd:2d:
                    8c:ef:04:2e:2e:f6:e7:32:a1:30:cd:f1:33:0e:65:
                    4a:e1:3d:b4:62:52:e5:3a:73:58:cf:38:6f:da:d6:
                    8c:6b:05:c9:9f:af:f6:a4:32:d4:40:23:09:9f:1d:
                    3a:67:26:18:84:25:bd:15:50:6b:93:a4:17:7a:b9:
                    2a:c7:25:a2:bb:a3:7e:3f:c9:c5:4f:fb:c6:03:6e:
                    f1:76:67:e8:95:d6:71:58:e4:e1:99:14:c6:02:e3:
                    36:db:4a:a1:6e:50:7f:5d:47:c1:41:9d:14:2a:24:
                    c6:3a:ac:8c:6e:21:1c:9c:c6:c7:59:09:d6:09:6c:
                    3a:17:36:f3:7b:4d:9d:9c:fa:b7:63:40:90:c7:79:
                    28:99:4a:79:ea:95:d2:7b:1c:d3:10:18:94:e0:1f:
                    ff:da:7e:6d:fb:24:47:24:b4:74:91:f9:8c:be:5c:
                    76:1b:68:1a:f6:ed:16:9d:dc:c5:83:91:c9:a8:0d:
                    ce:82:d8:d2:93:20:b5:b9:27:c3:a7:90:b3:e4:b2:
                    ed:37:52:7a:73:1c:57:60:c7:30:1f:31:63:d2:b0:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A6:6C:66:DE:CC:F2:4E:4E:44:28:B4:0B:70:97:54:9D:67:C2:A7
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS212516.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5850::/44

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:ee:0b:44:41:f5:73:5f:db:c5:62:7e:9b:9f:e2:78:e6:
         12:4a:36:65:42:40:7e:f8:b4:ff:49:14:99:a7:a1:d6:cb:88:
         90:6a:1b:3b:a2:1f:57:78:6f:74:6d:23:1c:ab:89:b5:85:d9:
         9f:fc:fe:9e:f1:e3:cf:9e:2f:f0:90:e6:b8:d5:85:5e:19:2f:
         39:4c:b2:26:de:5f:a7:d6:ec:4c:df:48:65:fe:db:63:33:92:
         45:75:fa:9b:16:c4:ee:ba:e4:46:01:ed:50:63:29:13:e2:9f:
         c4:49:b2:6f:8d:e4:64:33:e8:bf:38:6b:a4:c8:94:ce:7f:85:
         b8:33:2f:fb:fb:ab:82:5c:f9:86:ef:0a:07:39:a0:c6:60:75:
         d0:39:d1:ba:ee:bd:eb:84:5a:f8:41:9d:1d:76:0e:bc:71:7f:
         9e:cc:c3:00:41:fe:af:f5:86:4d:32:77:a5:28:a2:ee:0a:e5:
         f0:20:75:ec:e9:86:1e:5f:e6:20:f9:ba:f4:df:ca:f9:6d:7f:
         42:e1:f2:47:a5:b0:1a:67:8a:e4:5c:c8:54:f9:a6:f2:73:df:
         6c:24:8e:ab:52:0d:58:78:49:15:e2:db:36:ce:15:5b:76:1b:
         39:6d:ae:27:6d:cb:44:c8:31:bd:b9:9d:41:08:66:2d:b6:67:
         da:75:d1:38
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUPS5IOz9by8sWkPy8L0YvhT3lRW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA5MDEwNjMyNDFaFw0yNDA4MzAwNjM3NDFaMDMxMTAvBgNV
BAMTKEJEQTY2QzY2REVDQ0YyNEU0RTQ0MjhCNDBCNzA5NzU0OUQ2N0MyQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGriUL7Cs4c/BWaaXFWoF9IvL
H06sUq179HUD5/T2Qzbv19SJTwwEnse9LYzvBC4u9ucyoTDN8TMOZUrhPbRiUuU6
c1jPOG/a1oxrBcmfr/akMtRAIwmfHTpnJhiEJb0VUGuTpBd6uSrHJaK7o34/ycVP
+8YDbvF2Z+iV1nFY5OGZFMYC4zbbSqFuUH9dR8FBnRQqJMY6rIxuIRycxsdZCdYJ
bDoXNvN7TZ2c+rdjQJDHeSiZSnnqldJ7HNMQGJTgH//afm37JEcktHSR+Yy+XHYb
aBr27Rad3MWDkcmoDc6C2NKTILW5J8OnkLPksu03UnpzHFdgxzAfMWPSsIvhAgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUvaZsZt7M8k5ORCi0C3CXVJ1nwqcwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjEyNTE2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgYSh1hQMA0GCSqGSIb3
DQEBCwUAA4IBAQCLcO4LREH1c1/bxWJ+m5/ieOYSSjZlQkB++LT/SRSZp6HWy4iQ
ahs7oh9XeG90bSMcq4m1hdmf/P6e8ePPni/wkOa41YVeGS85TLIm3l+n1uxM30hl
/ttjM5JFdfqbFsTuuuRGAe1QYykT4p/ESbJvjeRkM+i/OGukyJTOf4W4My/7+6uC
XPmG7woHOaDGYHXQOdG67r3rhFr4QZ0ddg68cX+ezMMAQf6v9YZNMnelKKLuCuXw
IHXs6YYeX+Yg+br038r5bX9C4fJHpbAaZ4rkXMhU+abyc99sJI6rUg1YeEkV4ts2
zhVbdhs5ba4nbctEyDG9uZ1BCGYttmfaddE4
-----END CERTIFICATE-----