Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS216375.roa
File:                     AS216375.roa (raw, json)
Hash identifier:          IY40xkr5Yy1XuV1gLzBElPD0I+Zx5OOSy+pUxMKEn0s=
Subject key identifier:   AD:C6:FA:FE:5F:5D:9B:73:32:F4:A9:12:AC:B0:08:5E:39:E0:CC:9A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       5F9264947956FC5EA0AD88A26CE5E19B273FEE61
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS216375.roa
Signing time:             Thu 05 Oct 2023 09:50:10 +0000
ROA not before:           Thu 05 Oct 2023 09:45:10 +0000
ROA not after:            Thu 03 Oct 2024 09:50:10 +0000
asID:                     216375
IP address blocks:        2a05:dfc7:5c00::/38 maxlen: 48
                          2a05:dfc7:bdfa::/48 maxlen: 48
                          2a05:dfc7:e800::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:92:64:94:79:56:fc:5e:a0:ad:88:a2:6c:e5:e1:9b:27:3f:ee:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct  5 09:45:10 2023 GMT
            Not After : Oct  3 09:50:10 2024 GMT
        Subject: CN=ADC6FAFE5F5D9B7332F4A912ACB0085E39E0CC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:ae:6d:73:43:2f:02:93:c4:db:40:9f:e1:
                    33:70:2d:b6:f8:e2:e6:81:b0:b4:89:85:46:ab:d8:
                    9b:23:22:88:ce:a8:dd:16:21:6e:c3:f8:bd:e9:a3:
                    02:b4:f7:c1:04:38:5c:43:9b:c2:bb:0d:48:81:28:
                    a2:58:aa:4c:7a:59:12:74:ea:09:38:93:2f:83:fe:
                    ac:36:e9:a7:d5:f5:23:ed:27:39:bb:d4:b4:50:42:
                    f8:8c:d0:66:70:20:af:fb:20:91:41:ce:28:c0:a7:
                    77:0d:5a:4b:f6:94:c9:9a:48:a0:83:9f:db:d7:00:
                    fa:dc:71:0c:0f:f9:bb:33:ed:a7:a4:5b:ba:aa:d8:
                    48:18:d8:66:86:9a:be:ef:a3:6e:ea:4f:91:37:d0:
                    29:6c:b3:65:77:87:b1:01:21:cb:6d:92:1e:ea:c5:
                    31:6e:6c:7d:19:3d:3f:6e:58:50:d2:a4:13:e7:72:
                    cb:89:74:a8:ae:be:35:85:cf:4a:8b:10:9b:15:26:
                    60:26:61:af:23:b3:23:2f:f3:e9:6d:bf:dc:ce:88:
                    fe:21:bb:dd:94:41:6b:5d:c7:de:55:17:79:7e:ac:
                    e7:c1:e1:e0:78:b8:34:9d:14:31:6b:f4:5e:90:a0:
                    34:a5:10:2f:ea:65:68:d2:e9:ea:78:77:f7:24:b6:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:FA:FE:5F:5D:9B:73:32:F4:A9:12:AC:B0:08:5E:39:E0:CC:9A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS216375.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5c00::/38
                  2a05:dfc7:bdfa::/48
                  2a05:dfc7:e800::/38

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:e9:34:3c:35:82:50:c4:57:af:7c:1d:e6:63:38:7f:bb:
         a2:64:fb:24:8a:ca:02:26:97:7a:87:46:0f:68:d9:44:7c:01:
         db:1f:5c:e8:f2:0d:23:db:13:98:a2:b3:78:84:25:74:32:e1:
         eb:9d:77:2c:68:b0:d9:46:fb:a5:6d:73:72:96:14:c4:6f:47:
         c7:e6:12:c6:e8:dd:2a:86:cb:5d:0d:d3:2a:30:cb:92:84:4e:
         75:38:1c:f3:f3:e0:e6:25:19:29:8a:05:0f:c0:82:f1:7b:5e:
         60:ad:f3:7b:64:72:d0:f0:76:e7:9e:2b:f4:01:5f:2f:ea:59:
         01:f6:1b:1b:d9:a3:58:51:54:a6:92:4b:fc:f1:75:4b:9c:0a:
         98:a8:4f:67:0a:d3:d5:42:fd:07:fd:85:c5:b9:c4:44:d8:3e:
         ce:39:75:27:1c:9e:cb:92:2e:60:53:e8:b7:be:d0:bf:cb:6a:
         84:9d:13:a7:ca:01:8c:10:d4:08:85:b7:93:ba:14:a3:8f:18:
         97:ab:56:03:a7:f9:43:72:4c:6c:43:ba:bc:25:09:76:c9:27:
         7e:07:ce:9e:24:13:8c:37:5a:f5:4b:c6:a6:19:4d:40:21:3a:
         5e:76:a8:de:cb:9b:86:0b:66:ed:f1:37:5b:4f:af:e8:97:4c:
         37:0c:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----