Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS213293.roa
File:                     AS213293.roa (raw, json)
Hash identifier:          8DR9oTbI9qSPagMRDSe/7Qdu9rz7VFgOvNHc9shAFZc=
Subject key identifier:   89:71:8B:71:AA:9E:19:EA:F0:F2:86:1C:67:F8:4D:B9:AB:28:82:53
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       2B8E1B047E3F3A3C7C26AA9BF630481655147E25
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS213293.roa
Signing time:             Fri 29 Sep 2023 07:39:04 +0000
ROA not before:           Fri 29 Sep 2023 07:34:04 +0000
ROA not after:            Fri 27 Sep 2024 07:39:04 +0000
asID:                     213293
IP address blocks:        2a05:dfc7:bde0::/44 maxlen: 48
                          2a05:dfc7:bdfc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8e:1b:04:7e:3f:3a:3c:7c:26:aa:9b:f6:30:48:16:55:14:7e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep 29 07:34:04 2023 GMT
            Not After : Sep 27 07:39:04 2024 GMT
        Subject: CN=89718B71AA9E19EAF0F2861C67F84DB9AB288253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:17:29:79:f8:2f:49:ae:bf:98:00:c2:bc:
                    b8:66:d9:32:2e:92:7e:cf:d7:33:16:db:8f:89:1f:
                    3a:b0:12:c1:82:41:35:24:c5:38:b3:e2:89:9a:50:
                    a8:be:80:7e:3e:61:f6:79:21:f1:2b:e7:51:bf:44:
                    4a:b0:f4:22:ce:e6:d4:8e:e4:10:a1:7d:7a:f8:72:
                    7e:56:ac:df:f9:e9:2b:d9:90:b4:54:a2:32:70:9c:
                    de:5a:5d:26:73:47:98:14:3e:f8:ee:49:bd:5a:c3:
                    c4:e4:68:c8:7a:fb:c5:55:f2:21:d3:88:ff:55:84:
                    69:94:db:69:76:1b:4d:b0:36:57:d6:67:2c:6f:19:
                    41:b7:cc:de:6b:97:ae:2b:b5:15:f2:51:2d:81:a1:
                    6c:21:78:89:bb:37:b2:5d:81:1e:52:5f:ef:79:73:
                    a2:b5:2e:34:cd:f3:9d:5a:48:e8:e3:56:e2:2a:20:
                    ca:6a:61:a5:53:90:7f:83:cc:d5:47:e9:b0:da:cc:
                    01:db:30:06:ed:bf:c5:55:6a:09:68:db:88:66:41:
                    30:7f:3f:ce:2d:a0:ab:52:cb:ac:3e:72:82:c7:fe:
                    6a:30:4e:02:3e:71:ce:2b:05:cd:17:83:a5:b6:89:
                    68:5f:c9:0e:5a:c8:2c:c3:8f:fb:f1:65:d2:3f:2c:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:71:8B:71:AA:9E:19:EA:F0:F2:86:1C:67:F8:4D:B9:AB:28:82:53
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS213293.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:bde0::/44
                  2a05:dfc7:bdfc::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:4e:57:ab:98:eb:5a:e9:29:e2:b0:39:05:60:03:d7:2e:c1:
         f4:24:4c:45:88:8b:8f:e4:d4:b1:86:2f:e7:8c:99:8d:21:02:
         7c:d2:67:6c:25:20:3f:68:35:39:83:26:ca:84:9e:51:a4:6d:
         11:f6:f7:69:bf:f4:4d:1e:ea:da:3d:6c:97:46:dd:f9:05:48:
         2c:7b:e4:21:2c:64:20:3a:af:15:70:2c:ba:f9:f9:f6:d9:5a:
         4f:86:10:87:82:4f:5b:5b:7d:46:31:a8:17:27:7e:4e:e4:73:
         0a:74:af:45:dd:0f:7e:eb:89:36:f3:59:ea:4b:db:c6:1a:5f:
         18:e7:9b:4a:bb:b6:8b:7c:7b:f3:fc:b2:b9:e7:81:ff:eb:b5:
         d4:05:8e:b4:1e:ff:be:2f:6f:a1:fb:97:24:17:b0:57:ca:1f:
         b6:67:85:4d:f8:a8:45:35:2a:66:bf:7b:f9:63:26:03:f0:2b:
         88:b6:d5:be:7f:c5:ef:b8:cb:47:22:1b:ce:5a:11:ea:8a:a9:
         67:ab:6d:8a:04:0d:f0:5e:05:ea:92:3f:91:e6:d0:c1:62:10:
         1e:1c:ac:25:30:9b:84:93:07:74:03:d9:23:2f:51:a3:29:b7:
         62:68:09:f1:45:19:2a:fb:4c:e5:60:c0:35:bc:10:8b:8e:1c:
         cf:fb:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----