Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS212685.roa
File:                     AS212685.roa (raw, json)
Hash identifier:          2qhScEdl23zceDPTycSrWW8oh8aR25VX7xL5IH44/Ls=
Subject key identifier:   07:64:31:50:5F:15:F1:DB:6F:06:63:20:5D:03:5F:8F:3A:18:76:15
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4674C1371352DD3BE150D65D0426904E44E5F7B3
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS212685.roa
Signing time:             Mon 31 Jul 2023 12:53:45 +0000
ROA not before:           Mon 31 Jul 2023 12:48:45 +0000
ROA not after:            Mon 29 Jul 2024 12:53:45 +0000
asID:                     212685
IP address blocks:        2a05:dfc7:b400::/38 maxlen: 48
                          2a05:dfc7:b800::/39 maxlen: 48
                          2a05:dfc7:c200::/39 maxlen: 48
                          2a06:1287:7800::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:74:c1:37:13:52:dd:3b:e1:50:d6:5d:04:26:90:4e:44:e5:f7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 31 12:48:45 2023 GMT
            Not After : Jul 29 12:53:45 2024 GMT
        Subject: CN=076431505F15F1DB6F0663205D035F8F3A187615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:b5:ba:49:4b:54:f0:18:92:77:1b:7e:b7:
                    af:56:fc:0e:db:c6:37:70:a5:32:bb:2b:e3:d8:31:
                    07:0e:d9:42:04:a0:d9:43:75:a3:2b:40:97:33:e7:
                    f9:fd:a0:af:1f:7e:c9:bf:0e:14:fa:2b:c1:84:54:
                    04:73:74:a4:23:f3:b6:14:a0:fa:3b:72:3d:96:8c:
                    d1:e5:86:29:5d:9a:65:5f:cb:ef:39:2a:60:3e:49:
                    20:de:c1:6f:59:23:94:67:f0:53:c7:ef:c1:89:c8:
                    a7:a4:c8:ee:65:b3:95:5d:fb:b7:20:cd:e4:22:d9:
                    84:b6:b8:5d:7a:9e:66:cd:ef:d1:b8:35:6b:3d:ef:
                    8b:33:a1:31:71:c2:f3:a2:a7:13:15:e8:77:ce:ae:
                    f8:b5:03:68:93:d7:1d:fa:d6:17:14:63:9f:e2:1c:
                    89:ba:9f:67:f6:fe:08:86:92:ba:07:c0:27:e5:ce:
                    10:ae:e4:10:8d:8f:16:21:0a:2b:34:f2:bd:79:a0:
                    81:d8:6a:d2:c1:a0:e0:4f:0d:86:4b:bd:e1:fc:11:
                    93:74:c4:fb:f9:09:80:0f:1b:e8:2b:57:7a:d3:55:
                    98:c5:e1:75:ac:85:c5:2d:8e:71:65:99:2d:1f:9c:
                    d8:76:b5:c8:82:a6:45:24:f1:66:91:14:71:39:25:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:64:31:50:5F:15:F1:DB:6F:06:63:20:5D:03:5F:8F:3A:18:76:15
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS212685.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:b400::-2a05:dfc7:b9ff:ffff:ffff:ffff:ffff:ffff
                  2a05:dfc7:c200::/39
                  2a06:1287:7800::/39

    Signature Algorithm: sha256WithRSAEncryption
         bd:bf:60:f1:05:4d:15:78:3e:8d:0a:9c:a9:95:c3:3a:32:9c:
         65:d6:c5:64:83:91:ae:fa:71:89:9e:a0:ad:fe:4f:ca:32:2f:
         2f:2e:ef:3c:01:a5:db:8f:70:db:89:2c:d5:9e:22:69:6c:2b:
         0b:10:63:12:6a:55:91:6e:7b:56:dc:ba:3b:a7:0b:d9:69:8c:
         68:0a:17:32:03:e8:e4:4b:7b:71:26:e1:7a:7a:76:eb:32:b0:
         6c:d9:f1:01:92:69:4e:61:dd:99:ec:4a:bb:01:b7:64:5c:a5:
         fd:94:ee:08:4f:45:92:25:aa:46:38:d8:f1:9a:ca:2c:f7:88:
         b9:d1:79:36:b0:e1:56:28:9b:c2:62:6b:71:ba:8d:cb:2b:0a:
         34:b2:fa:cb:55:e0:33:64:70:00:5f:be:b9:25:d0:4e:ec:d9:
         ce:c8:bc:1f:bd:4e:0f:f7:45:a0:a8:c6:aa:ba:eb:69:39:70:
         d7:9e:9e:07:db:cd:44:bc:06:e9:6d:34:39:6b:24:cd:ab:d0:
         a6:c9:c7:de:05:a1:81:f9:a5:07:24:a5:9a:18:c7:f3:8d:91:
         b7:17:f7:c8:75:88:97:2d:04:c4:d4:94:65:b8:ce:c7:89:04:
         fd:4c:d8:9b:78:2b:37:af:dd:7c:f1:0f:77:c5:d9:b1:b1:06:
         09:f9:9b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----