Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS216367.roa
File:                     AS216367.roa (raw, json)
Hash identifier:          2DaSijxJ4ECYlFw+/VsBmy9ed+tUR2EnMsixBeO18Hw=
Subject key identifier:   E3:37:01:7A:26:48:37:46:75:11:D4:A8:9B:7C:BD:AA:E5:8F:72:07
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       440858D2A7DFF4DF0FD96BB3AE2F04A8B17A7AEB
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS216367.roa
Signing time:             Mon 16 Oct 2023 08:17:17 +0000
ROA not before:           Mon 16 Oct 2023 08:12:17 +0000
ROA not after:            Mon 14 Oct 2024 08:17:17 +0000
asID:                     216367
IP address blocks:        2a05:dfc7:d400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:08:58:d2:a7:df:f4:df:0f:d9:6b:b3:ae:2f:04:a8:b1:7a:7a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct 16 08:12:17 2023 GMT
            Not After : Oct 14 08:17:17 2024 GMT
        Subject: CN=E337017A264837467511D4A89B7CBDAAE58F7207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:bd:fc:58:b5:99:62:58:fe:8f:4b:8a:9f:
                    48:f0:2b:c4:85:3f:5d:a0:59:7d:89:f6:e2:ce:ff:
                    79:8e:66:d8:04:07:1d:f7:0d:25:f7:4c:8d:a6:7e:
                    58:eb:ea:2d:8c:20:c1:9c:68:02:20:ba:0a:85:65:
                    94:d2:2b:0d:59:66:08:f8:bc:3e:97:7d:43:f2:c2:
                    3a:70:8f:d8:29:6d:c9:47:01:60:ce:2b:64:69:98:
                    f1:66:54:58:1b:26:59:41:59:df:5c:6c:96:a7:d5:
                    26:9e:7e:d4:1d:80:63:41:a8:11:ca:d9:2d:16:28:
                    28:0e:3e:a2:b6:9e:c1:8a:5f:0e:5f:93:21:e5:8e:
                    0d:45:88:a2:c5:74:01:ff:2c:fe:d2:11:50:c0:b1:
                    b5:28:8f:f0:c8:d7:75:9f:1d:db:ff:7d:88:c7:13:
                    c2:87:df:e5:66:f0:7b:b0:41:8a:88:38:e0:b0:1f:
                    cf:b7:91:9c:da:ad:53:76:6f:27:d7:fd:fe:70:b3:
                    55:20:a2:82:9b:ea:22:4f:98:b1:0a:2b:40:5e:50:
                    ef:b9:02:75:d7:e8:82:ca:15:f3:ff:cf:7f:ea:6a:
                    59:4f:02:56:a5:90:b0:35:13:32:a3:ed:f4:94:02:
                    cf:3d:07:75:92:f9:e0:86:a3:b1:3c:cc:5e:39:1a:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:37:01:7A:26:48:37:46:75:11:D4:A8:9B:7C:BD:AA:E5:8F:72:07
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS216367.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:d400::/39

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:43:47:c9:0a:85:e6:1a:60:bf:7f:e4:50:60:ec:65:45:
         89:af:b4:85:55:da:08:b3:1d:59:b4:9c:be:0d:7f:ac:f6:ec:
         52:44:b8:11:a4:3f:f7:b5:d7:7d:60:aa:aa:a8:77:cd:3a:e4:
         c5:16:94:fc:b7:9a:3d:aa:69:d0:f2:f9:a9:0d:aa:ff:d4:8c:
         8f:05:47:72:10:cd:6c:eb:65:a0:25:67:84:c0:55:7a:a7:99:
         26:e6:b4:4e:26:00:c7:05:07:08:d9:dd:46:eb:6d:f4:78:c1:
         03:b0:3b:05:76:58:8a:75:ba:65:d4:6c:15:05:a9:99:83:a0:
         9b:87:57:e2:8c:fc:fb:4f:7b:9c:a5:a6:fe:b9:f3:8f:a3:4a:
         67:10:19:9e:e9:d1:d0:65:39:ea:82:6f:d3:df:2d:59:f9:03:
         6d:7d:6d:62:f3:30:10:e9:c2:8b:63:79:05:26:97:d1:f9:40:
         19:3b:6b:d1:dc:c7:e8:42:cf:55:09:c8:de:32:af:df:d4:f5:
         9e:79:06:b1:8b:e1:6a:d0:2d:d9:72:66:ec:57:86:5f:4c:8f:
         48:47:fe:ec:04:ef:0f:dd:a8:61:e3:c1:a1:f2:70:f1:33:6f:
         3e:bf:a7:3c:e3:93:79:2e:a4:58:c1:c5:76:c5:8d:a6:04:02:
         2c:d8:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----