Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS216369.roa
File:                     AS216369.roa (raw, json)
Hash identifier:          DnNJDRoBr79vwIGUdK0fp5LFJXsNl2UVxuTo7ZKLhg0=
Subject key identifier:   72:A6:29:5C:C8:73:42:73:75:93:A6:FE:8A:31:0B:C9:FE:48:C2:7B
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       4BF5CEA2D4BA361F2DF7D3EB5CF0A3926927DCE0
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS216369.roa
Signing time:             Tue 05 Sep 2023 15:48:50 +0000
ROA not before:           Tue 05 Sep 2023 15:43:50 +0000
ROA not after:            Tue 03 Sep 2024 15:48:50 +0000
asID:                     216369
IP address blocks:        2a05:dfc7:6600::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f5:ce:a2:d4:ba:36:1f:2d:f7:d3:eb:5c:f0:a3:92:69:27:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep  5 15:43:50 2023 GMT
            Not After : Sep  3 15:48:50 2024 GMT
        Subject: CN=72A6295CC87342737593A6FE8A310BC9FE48C27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ec:cc:f0:eb:48:33:86:ae:de:96:00:3b:88:
                    ca:62:dd:90:a1:c2:4f:0d:5f:7c:e2:8a:1b:a6:3d:
                    3d:fc:92:46:0f:87:40:28:79:0d:db:6c:2a:75:7e:
                    6d:d6:43:46:ec:5d:b0:71:0a:9b:34:36:a7:61:16:
                    80:91:a0:e3:d7:1e:3e:89:f7:7a:e8:d6:d4:92:0e:
                    4e:03:68:0c:08:7c:dc:e4:59:b6:d9:de:66:a2:48:
                    f7:a9:a3:e1:1f:87:d5:0b:d1:24:d6:c3:55:3f:08:
                    73:90:f9:f6:ac:08:51:fd:f1:2e:e0:f2:67:2b:f7:
                    9d:d4:29:ad:9b:8f:a8:9a:b1:55:07:da:d4:9a:ad:
                    13:dd:2a:85:83:9a:ce:46:dc:27:8e:97:46:3e:1c:
                    2e:b5:f1:d4:bf:13:86:ab:9c:b9:32:c4:5e:cd:ed:
                    25:f6:97:55:c6:95:02:17:b3:5a:d6:42:d1:f8:6e:
                    5b:14:af:29:5f:87:6d:4a:0b:eb:29:43:c0:aa:63:
                    da:1b:44:65:44:cd:48:c4:0f:8f:c4:72:27:20:9f:
                    25:c1:aa:c6:0b:d8:9b:ea:ab:fd:9f:e3:ad:07:c7:
                    b5:ac:41:c7:9a:67:90:57:09:c4:bd:79:3d:69:7d:
                    3f:4e:0d:a2:03:6c:5b:01:ed:f2:98:da:b9:9b:93:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A6:29:5C:C8:73:42:73:75:93:A6:FE:8A:31:0B:C9:FE:48:C2:7B
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS216369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:68:67:dc:98:3b:50:46:15:a8:d6:f2:49:dc:39:dd:80:7d:
         b3:bb:3b:36:0e:ae:78:4e:d4:6f:22:d4:02:4e:66:b1:b3:2d:
         43:87:c4:ac:2d:61:9d:05:26:9b:3b:2d:91:88:17:7e:97:1a:
         35:3f:6d:b6:25:46:4a:58:ba:09:46:6a:c3:55:0c:76:a1:d7:
         d6:93:8f:8b:89:f6:58:e4:3e:c6:4b:4c:56:ab:b9:34:c5:bb:
         0a:31:08:97:53:df:2d:3d:85:3c:ad:11:72:1e:a1:44:95:b7:
         3b:e1:81:e2:8d:f2:d5:d7:17:e4:9e:b3:70:3b:b1:b5:05:8a:
         65:68:6f:e4:8b:71:a4:bd:cb:78:fa:7d:37:45:21:20:b2:2a:
         49:f6:48:1c:d8:78:7a:1f:d6:ae:6e:af:77:ad:34:39:1d:59:
         27:9f:ee:59:ed:5a:b7:e6:e2:70:8b:38:b7:bf:49:fd:3a:35:
         53:fd:4a:e5:73:43:6b:9e:bf:e8:e5:db:38:c9:37:57:c2:4b:
         6a:cf:cb:d7:66:5e:41:32:ec:7a:a5:19:96:55:6a:8c:2c:31:
         1b:8c:e4:4f:04:fe:6a:4e:3b:66:2e:2b:54:34:22:80:f4:7d:
         f0:94:b2:2f:94:c3:a4:1f:21:ad:bb:a9:c3:4c:0f:86:0e:91:
         24:5b:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----