Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS213327.roa
File:                     AS213327.roa (raw, json)
Hash identifier:          s8flJdtGyrZuU40JuSKowsgDsldQBlY3nkPxKKbEGsA=
Subject key identifier:   55:B9:AC:99:0C:42:0F:10:61:D7:18:D3:78:33:C4:EF:CF:63:DA:32
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       23CC41D5F75FCEB223EF3398D33062AACCFFCCA7
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS213327.roa
Signing time:             Thu 06 Jul 2023 11:17:30 +0000
ROA not before:           Thu 06 Jul 2023 11:12:30 +0000
ROA not after:            Thu 04 Jul 2024 11:17:30 +0000
asID:                     213327
IP address blocks:        2a05:dfc7:4600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cc:41:d5:f7:5f:ce:b2:23:ef:33:98:d3:30:62:aa:cc:ff:cc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:30 2023 GMT
            Not After : Jul  4 11:17:30 2024 GMT
        Subject: CN=55B9AC990C420F1061D718D37833C4EFCF63DA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:f4:a3:83:a8:0c:eb:b5:ca:e3:f7:99:03:
                    6e:15:d0:6d:c0:79:a4:0a:72:ec:6e:3e:b5:59:5f:
                    a8:54:cc:85:5a:cf:fd:f2:37:33:ef:68:f2:74:11:
                    93:ad:42:ec:3a:ab:5c:70:8a:2b:0b:e6:c7:4d:6b:
                    8e:c5:f9:fb:85:70:68:f2:f0:7f:ad:cf:e8:5d:98:
                    63:4c:26:0c:db:cc:64:18:08:1e:65:4b:3c:ef:0a:
                    0e:a5:44:b9:73:25:1b:d7:e1:21:c1:17:28:f1:d9:
                    b2:ba:14:ec:92:09:61:a9:58:73:47:35:d3:44:03:
                    8e:a9:b9:fb:41:82:37:0b:b8:56:88:3e:c8:7f:a4:
                    b6:9a:09:d2:35:91:f7:00:61:c4:d3:41:fb:11:31:
                    e2:4a:b4:90:33:d6:18:50:71:8b:db:3d:02:e9:d4:
                    3c:dd:2a:83:5b:12:c7:f2:e0:f9:1f:40:d5:c9:86:
                    db:a2:05:a5:23:13:21:f0:45:6a:f8:bc:5d:52:e3:
                    1a:1d:61:82:ec:e5:8c:eb:84:57:d5:6d:37:82:5d:
                    8e:74:4a:29:e0:b8:94:ca:af:83:85:2a:a2:ae:92:
                    6c:13:74:9a:ba:01:4e:4b:13:4f:4b:9f:7a:0b:cb:
                    e5:e5:3b:38:9a:2a:a8:9c:ab:a1:cf:f1:94:e3:77:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B9:AC:99:0C:42:0F:10:61:D7:18:D3:78:33:C4:EF:CF:63:DA:32
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS213327.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:4600::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:fd:ab:28:8d:20:c2:6d:cb:9c:fb:a6:7b:f2:3f:ef:08:db:
         98:15:36:8a:c7:c9:51:8c:16:5f:04:5e:05:f1:d4:42:a3:66:
         7d:92:a0:71:c3:93:5b:0f:69:1e:a7:b5:7a:20:32:eb:a6:d9:
         0f:28:ac:1a:31:0f:3f:6c:3f:ec:14:a9:57:bd:8c:68:91:e1:
         3e:c3:7b:36:58:c2:d0:5b:4d:d1:00:ca:0f:29:7e:31:1b:22:
         af:d0:f9:c4:e8:f5:ef:07:aa:a4:a1:34:fb:26:e2:17:23:45:
         64:4e:7f:58:18:84:a9:73:ee:22:a8:43:5b:47:b7:b5:e7:7d:
         7e:bc:82:b6:43:ef:09:f3:1b:67:3f:8f:60:c4:e4:be:5b:0e:
         7a:3a:44:5f:f1:c1:81:01:a6:c0:03:95:0c:af:25:bc:49:36:
         c2:a0:27:2c:8c:12:a3:61:45:37:ee:3e:46:91:de:a8:c6:fe:
         12:69:62:f2:2c:b7:09:00:8e:9f:a9:05:29:27:24:50:d4:e6:
         c4:8a:e6:08:35:17:65:02:ad:a7:41:16:01:de:83:27:19:7a:
         78:5e:be:ba:39:81:17:5c:ef:ad:78:23:70:f9:42:08:e7:5f:
         bc:0f:1d:eb:52:c3:d5:7f:7a:b9:86:8f:65:2b:43:44:c3:71:
         db:31:e9:5b
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUI8xB1fdfzrIj7zOY0zBiqsz/zKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MDYxMTEyMzBaFw0yNDA3MDQxMTE3MzBaMDMxMTAvBgNV
BAMTKDU1QjlBQzk5MEM0MjBGMTA2MUQ3MThEMzc4MzNDNEVGQ0Y2M0RBMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sPSjg6gM67XK4/eZA24V0G3A
eaQKcuxuPrVZX6hUzIVaz/3yNzPvaPJ0EZOtQuw6q1xwiisL5sdNa47F+fuFcGjy
8H+tz+hdmGNMJgzbzGQYCB5lSzzvCg6lRLlzJRvX4SHBFyjx2bK6FOySCWGpWHNH
NdNEA46puftBgjcLuFaIPsh/pLaaCdI1kfcAYcTTQfsRMeJKtJAz1hhQcYvbPQLp
1DzdKoNbEsfy4PkfQNXJhtuiBaUjEyHwRWr4vF1S4xodYYLs5YzrhFfVbTeCXY50
SinguJTKr4OFKqKukmwTdJq6AU5LE09Ln3oLy+XlOziaKqicq6HP8ZTjdxcdAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUVbmsmQxCDxBh1xjTeDPE789j2jIwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMjEzMzI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgXfx0YwDQYJKoZIhvcN
AQELBQADggEBAL39qyiNIMJty5z7pnvyP+8I25gVNorHyVGMFl8EXgXx1EKjZn2S
oHHDk1sPaR6ntXogMuum2Q8orBoxDz9sP+wUqVe9jGiR4T7DezZYwtBbTdEAyg8p
fjEbIq/Q+cTo9e8HqqShNPsm4hcjRWROf1gYhKlz7iKoQ1tHt7XnfX68grZD7wnz
G2c/j2DE5L5bDno6RF/xwYEBpsADlQyvJbxJNsKgJyyMEqNhRTfuPkaR3qjG/hJp
YvIstwkAjp+pBSknJFDU5sSK5gg1F2UCradBFgHegycZenhevro5gRdc7614I3D5
QgjnX7wPHetSw9V/ermGj2UrQ0TDcdsx6Vs=
-----END CERTIFICATE-----