Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS213086.roa
File:                     AS213086.roa (raw, json)
Hash identifier:          mf1MaWlDt+oD3BztmDSUMhjhw31fs4U07OqZZkojSJU=
Subject key identifier:   86:72:86:A0:AA:F2:79:6F:E5:3E:57:73:0E:05:96:34:21:CA:E5:B9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       35CC66F9BFBCC6C9CC0BAE7B8D1866AAB6DA804E
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS213086.roa
Signing time:             Mon 10 Jul 2023 13:23:16 +0000
ROA not before:           Mon 10 Jul 2023 13:18:16 +0000
ROA not after:            Mon 08 Jul 2024 13:23:16 +0000
asID:                     213086
IP address blocks:        2a05:dfc7:65f0::/44 maxlen: 48
                          2a05:dfc7:da00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:cc:66:f9:bf:bc:c6:c9:cc:0b:ae:7b:8d:18:66:aa:b6:da:80:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul 10 13:18:16 2023 GMT
            Not After : Jul  8 13:23:16 2024 GMT
        Subject: CN=867286A0AAF2796FE53E57730E05963421CAE5B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3e:d6:37:ff:5c:ff:d5:83:cc:44:32:21:ee:
                    b3:77:93:ed:8e:55:ee:79:ff:76:56:5c:60:34:36:
                    42:ef:7b:7a:93:bc:2b:cd:f7:64:dd:b2:b8:33:3e:
                    9e:c4:a0:d1:00:b2:ee:80:db:32:10:7d:0f:9b:b1:
                    3a:41:36:4b:40:2e:5c:66:7a:f0:c4:26:52:c3:c7:
                    b0:96:91:26:84:eb:60:23:ef:4f:2d:39:e5:ab:5f:
                    36:ee:47:5d:57:db:b5:28:2a:98:ca:8e:3a:18:25:
                    15:a3:92:de:d2:75:c7:c2:cd:6d:fa:72:6d:a4:7b:
                    e4:72:e4:e9:54:90:7a:55:a5:64:df:ce:86:8e:e5:
                    00:6e:ba:9a:26:a1:7d:78:98:ca:05:69:0b:fc:bb:
                    e4:ed:fe:39:bb:9a:db:6c:43:b8:02:40:98:f2:3c:
                    3f:f9:37:5d:f1:34:81:3f:7f:db:04:de:be:3b:37:
                    82:cc:65:61:29:62:0f:22:27:0a:90:9a:ac:be:59:
                    2b:42:ed:f2:cb:1d:c7:b3:68:13:4b:f8:1d:92:7e:
                    02:34:05:51:dd:1f:22:74:a7:06:f8:e1:8c:b6:0f:
                    7f:8a:02:30:5f:37:58:11:49:7e:7b:36:f2:11:e3:
                    79:92:e0:d3:30:58:9a:76:0c:41:b1:74:d7:b0:25:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:72:86:A0:AA:F2:79:6F:E5:3E:57:73:0E:05:96:34:21:CA:E5:B9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS213086.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:65f0::/44
                  2a05:dfc7:da00::/39

    Signature Algorithm: sha256WithRSAEncryption
         8a:7a:3e:11:c1:11:26:12:06:ed:4d:6e:a3:70:49:a1:e5:37:
         4c:a3:92:6d:11:d1:b4:33:da:45:be:08:b7:c3:53:cb:de:c6:
         3b:54:6b:f9:f4:7d:3e:d9:19:bb:c7:ba:2b:b5:d5:6b:f9:af:
         51:41:3b:18:7b:8d:ae:f6:1d:ee:4b:7b:33:09:34:36:83:e5:
         6f:bc:a5:5f:4e:f5:fa:8e:1f:de:35:e9:eb:c3:d2:84:1d:f4:
         43:a1:c9:a9:18:3c:4a:a1:9c:59:6c:24:e3:c8:bf:d3:21:ad:
         43:45:1f:d3:9b:12:14:40:7b:17:9b:a5:8f:81:2e:f4:d3:eb:
         32:ce:6e:4b:b4:0d:95:6b:eb:57:b7:f1:8b:39:02:6a:02:68:
         b9:d4:a6:73:48:82:13:fb:01:8d:85:51:f9:e0:21:e6:ea:f6:
         68:5e:82:96:b9:45:cb:37:df:5f:26:7e:6d:92:c0:c5:67:28:
         c2:d8:53:ac:5a:f5:9d:13:eb:6f:64:e9:e7:ee:d3:79:a2:c1:
         8e:cf:60:89:60:50:a6:74:0f:2a:19:4b:75:56:c9:03:fd:70:
         1a:c8:6d:67:0a:63:b7:05:a9:3b:3c:f4:06:c0:6a:d1:e3:fa:
         82:9e:cf:da:df:ec:1b:4b:81:80:23:53:fe:a5:38:15:0c:86:
         23:1e:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----