Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS216328.roa
File:                     AS216328.roa (raw, json)
Hash identifier:          TtquJKOlukR0d9gHJ/15XR6tuAeaEYKbAJOaLZLJ/Z0=
Subject key identifier:   C9:6C:DA:3F:E5:10:96:57:DA:11:70:6F:1B:AE:51:E1:65:CB:7C:96
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       3F897FA31CB21F610EA0B73AD421A22332D2B39B
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS216328.roa
Signing time:             Fri 29 Sep 2023 07:38:49 +0000
ROA not before:           Fri 29 Sep 2023 07:33:49 +0000
ROA not after:            Fri 27 Sep 2024 07:38:49 +0000
asID:                     216328
IP address blocks:        2a05:dfc7:bdfc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:89:7f:a3:1c:b2:1f:61:0e:a0:b7:3a:d4:21:a2:23:32:d2:b3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep 29 07:33:49 2023 GMT
            Not After : Sep 27 07:38:49 2024 GMT
        Subject: CN=C96CDA3FE5109657DA11706F1BAE51E165CB7C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:7a:73:33:3e:e4:0d:4d:3d:73:5e:73:ac:
                    ec:84:bc:0a:a7:9b:be:ab:8b:f9:8a:ea:b6:71:ef:
                    53:0e:52:10:24:60:1d:46:98:78:72:3e:f2:0e:c2:
                    ca:9d:8b:02:89:a1:90:9a:1f:a1:fb:fd:d1:05:c7:
                    5e:24:4d:11:a9:0d:3b:e6:a4:3c:d8:4d:24:1b:0a:
                    60:7e:5a:d8:0d:c0:38:ce:7a:2a:f0:6f:e1:0f:8a:
                    88:7b:80:ac:80:45:8f:f9:91:96:83:f1:d4:18:c7:
                    52:d1:c8:f3:ab:ba:20:d2:9d:c3:3b:05:71:d2:f5:
                    53:49:c5:2c:29:50:2d:ff:23:76:8e:ee:53:01:3e:
                    ef:0d:21:4a:59:ed:4c:9f:f6:ca:b4:a2:42:31:02:
                    73:69:39:72:22:ac:93:00:1f:9d:38:4f:80:77:a4:
                    f1:50:c8:43:ce:6c:f1:17:9b:61:c8:70:eb:cd:ad:
                    9f:0c:42:59:ad:fa:af:7d:44:85:36:89:0d:a8:4c:
                    32:60:ac:b5:39:fe:44:73:d9:5f:04:4b:a8:92:03:
                    de:74:f6:9f:7d:e3:ec:ba:fc:72:eb:71:3a:2e:b4:
                    e0:d3:99:82:93:90:7f:bd:b0:9a:ce:87:c4:29:62:
                    c5:33:f8:a0:e5:24:d0:47:3d:0f:d3:40:92:3f:a5:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6C:DA:3F:E5:10:96:57:DA:11:70:6F:1B:AE:51:E1:65:CB:7C:96
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS216328.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:bdfc::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:99:cf:82:fb:da:98:4f:9b:4c:2e:33:14:22:a2:08:22:10:
         a8:64:f7:6b:46:ca:d4:db:ad:12:17:54:31:fb:43:60:51:c2:
         92:24:52:83:88:14:6f:a8:a1:36:2a:be:d8:9e:60:9c:01:37:
         a0:bb:12:af:20:63:93:ac:1c:0f:33:45:30:f1:9d:21:fa:70:
         c8:74:d3:d0:1b:74:e4:ce:8f:88:f5:98:fb:37:d6:9f:5d:bf:
         36:51:39:04:34:5c:e7:b3:39:8d:eb:59:7f:a5:83:68:ac:ee:
         8b:a5:08:43:37:fd:75:4c:c4:58:f7:f3:de:0c:2c:19:ad:28:
         f1:c0:6d:6f:df:ed:87:5c:bb:1a:85:e9:d3:10:bc:24:0c:07:
         3c:3d:26:51:90:45:0b:a2:82:68:2a:f3:67:30:d5:a2:c4:17:
         56:66:42:75:01:e0:12:ba:cd:a3:f2:c9:1d:3e:4e:86:1d:e7:
         13:ac:aa:ea:e0:2a:2a:ef:4f:36:a7:94:66:27:de:33:bc:39:
         76:8a:dc:c2:aa:88:b9:1b:5a:85:2b:15:25:c7:a5:ff:f7:78:
         43:36:79:f3:54:06:be:6a:3d:29:60:36:3b:9a:e2:82:a5:91:
         14:e2:03:d6:42:bc:e2:11:73:5b:d7:41:97:74:a0:8b:cd:a0:
         67:d3:88:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----