Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS212828.roa
File:                     AS212828.roa (raw, json)
Hash identifier:          +3HqV2LyEb86fbz6CcXjY1cUoTO/qCNs25Ac4lOFVfY=
Subject key identifier:   48:4D:64:6D:07:A2:7A:BC:16:7F:D2:2F:90:7F:E0:A5:ED:F6:FA:47
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       51739911FB1A386D339D601CBCDB783C04C0A3B8
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS212828.roa
Signing time:             Tue 25 Jul 2023 06:48:13 +0000
ROA not before:           Tue 25 Jul 2023 06:43:13 +0000
ROA not after:            Tue 23 Jul 2024 06:48:13 +0000
asID:                     212828
IP address blocks:        2a05:dfc7:5800::/39 maxlen: 39
                          2a05:dfc7:a400::/38 maxlen: 48
                          2a05:dfc7:a800::/37 maxlen: 48
                          2a05:dfc7:f000::/36 maxlen: 48
                          2a06:1287:b600::/39 maxlen: 48
                          2a06:1287:ba00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:73:99:11:fb:1a:38:6d:33:9d:60:1c:bc:db:78:3c:04:c0:a3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 25 06:43:13 2023 GMT
            Not After : Jul 23 06:48:13 2024 GMT
        Subject: CN=484D646D07A27ABC167FD22F907FE0A5EDF6FA47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:d5:f5:4e:70:4d:6d:bb:13:0f:ee:0d:88:
                    a5:b5:cb:ac:4b:10:e5:c3:fa:55:f0:08:5f:4c:c4:
                    e4:17:f7:69:ce:45:ef:56:81:ea:95:eb:ed:19:37:
                    cf:83:3b:d6:f7:fa:17:12:03:f4:27:02:b5:a3:d8:
                    6d:25:d2:90:6e:5b:04:67:da:92:c6:a3:70:4c:d9:
                    62:e7:15:c4:1c:51:0a:96:ce:e5:fb:86:ab:3f:bb:
                    27:00:cb:3e:1e:ac:a6:4f:97:2c:b2:7a:53:91:eb:
                    a6:d9:5c:8e:05:63:2e:97:e4:1d:07:27:c9:98:a9:
                    5e:40:93:08:b8:85:69:6e:12:51:8e:11:33:8d:14:
                    be:b8:a7:02:78:5b:4c:9e:3b:c4:ac:43:93:26:35:
                    ee:db:da:61:59:71:b5:61:ff:78:bf:9e:46:ec:19:
                    5f:80:fe:db:73:8b:5c:1b:13:14:c2:1c:07:9b:68:
                    05:fa:0b:6f:06:92:78:23:4f:0b:c9:1e:77:0f:5a:
                    b6:59:3f:49:88:ca:db:93:54:8f:61:ce:c3:8e:82:
                    0a:e7:9e:15:73:ab:42:34:fe:d6:11:4a:0b:3e:ca:
                    5d:70:08:63:6d:f8:37:30:9c:06:46:45:c2:17:38:
                    2f:3a:f4:81:a9:b9:a6:11:81:2d:ee:b3:17:93:51:
                    44:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:64:6D:07:A2:7A:BC:16:7F:D2:2F:90:7F:E0:A5:ED:F6:FA:47
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS212828.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5800::/39
                  2a05:dfc7:a400::-2a05:dfc7:afff:ffff:ffff:ffff:ffff:ffff
                  2a05:dfc7:f000::/36
                  2a06:1287:b600::/39
                  2a06:1287:ba00::/39

    Signature Algorithm: sha256WithRSAEncryption
         4c:96:6c:76:be:65:79:1e:85:aa:0e:33:08:95:38:2e:2b:5c:
         44:ce:48:35:c9:51:9e:e9:ce:40:ff:e6:36:ee:7c:65:34:43:
         64:54:fb:3d:e7:d8:24:db:9e:73:f8:54:56:a2:b5:b1:90:e5:
         c3:79:a0:4d:0a:d2:09:47:0f:98:ea:c9:de:4d:2e:61:97:f1:
         df:17:5e:e5:dc:0b:86:fe:d7:c9:c1:c1:a0:50:62:79:5b:10:
         73:5d:41:67:14:f4:10:14:f5:96:92:42:25:48:ae:9b:4b:ed:
         bc:80:68:2e:56:b0:aa:80:07:3c:01:b4:2f:8b:bc:8d:99:1b:
         66:3f:3e:0e:7e:c3:85:ab:22:44:dc:b6:9f:54:97:60:23:26:
         25:e3:69:05:41:bf:50:64:f5:2d:b2:61:49:2e:b8:e5:fc:59:
         f8:48:dd:af:44:fa:53:ec:94:1e:1a:af:a3:19:02:08:25:ba:
         7e:48:83:97:df:f3:12:dd:64:f6:ab:75:7f:32:7f:6f:1f:b4:
         5b:31:32:07:a5:ac:54:c7:87:85:ad:ec:f6:5d:db:17:f1:ff:
         68:a7:c2:77:58:6a:0d:4e:2e:53:3c:99:43:d6:fc:42:e3:48:
         fc:7d:ee:e9:4b:7a:f4:01:b5:fa:6e:25:74:ed:b8:96:2e:c6:
         aa:37:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----