Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS216378.roa
File:                     AS216378.roa (raw, json)
Hash identifier:          0P89Jlk6Y8mPnjWmzqVYhDyDiJWUKqvP9XO843s3j3c=
Subject key identifier:   9D:D3:EB:C3:7A:61:A5:FF:79:F8:67:F2:4C:09:02:1B:6B:CF:95:33
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       221A1D86A9EF18FEAF6B26E55418D14997CAF9B5
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS216378.roa
Signing time:             Thu 31 Aug 2023 10:47:41 +0000
ROA not before:           Thu 31 Aug 2023 10:42:41 +0000
ROA not after:            Thu 29 Aug 2024 10:47:41 +0000
asID:                     216378
IP address blocks:        2a06:1287:6600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1a:1d:86:a9:ef:18:fe:af:6b:26:e5:54:18:d1:49:97:ca:f9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Aug 31 10:42:41 2023 GMT
            Not After : Aug 29 10:47:41 2024 GMT
        Subject: CN=9DD3EBC37A61A5FF79F867F24C09021B6BCF9533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bc:4c:5d:73:1d:0b:4e:da:86:1c:d2:63:cf:
                    6e:80:0a:8a:c4:58:a2:cc:57:06:40:fe:50:e8:42:
                    20:8c:fc:7d:a0:6e:c5:b6:55:3f:a5:ec:4a:26:15:
                    d2:a8:56:69:6f:25:5a:82:81:06:ca:bd:07:d7:23:
                    8d:58:bd:38:24:7b:11:1d:3f:78:3b:38:e5:ae:96:
                    96:7f:9b:63:e4:50:05:79:17:22:fb:8d:92:57:7b:
                    aa:66:d2:04:17:88:1a:e8:e7:fc:81:56:0c:0a:1f:
                    13:f8:a1:3e:62:21:d6:d9:fd:f5:29:f7:8f:f3:19:
                    ac:02:5c:04:9d:d1:81:34:c4:96:a4:88:91:c7:c3:
                    2a:c5:45:77:4e:fd:89:61:f5:5a:25:66:3c:c4:5e:
                    a5:31:ab:90:3f:6b:21:90:6f:b0:b4:9f:4a:15:17:
                    fc:31:fc:02:c3:24:37:8c:e7:d5:3c:d9:9f:8b:62:
                    b2:61:ef:b2:0d:ac:31:28:be:e1:fb:4d:c1:5a:49:
                    3c:a5:ac:74:c9:27:c0:2c:ba:dc:7d:ba:31:da:66:
                    9e:44:5d:03:43:0c:d8:00:ec:63:ca:6f:e7:19:70:
                    11:e9:c1:9e:46:cc:33:b9:af:e8:c1:ed:18:ba:88:
                    19:f3:a3:52:7a:ec:38:67:8e:0b:c6:a0:c0:6a:24:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D3:EB:C3:7A:61:A5:FF:79:F8:67:F2:4C:09:02:1B:6B:CF:95:33
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS216378.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:6600::/39

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:9d:85:45:c8:94:32:c1:46:9a:19:95:5f:c9:50:db:5a:
         99:0d:29:ad:8f:2f:c5:00:61:df:f7:19:43:d6:f3:20:02:b3:
         c3:45:fb:4b:e2:b9:0f:3e:ac:dd:82:c5:30:a1:f9:7a:45:0d:
         30:b1:4b:00:e1:a7:5f:b4:17:e7:af:32:ce:1c:21:0c:36:19:
         0b:b6:05:da:dc:9f:b7:4f:61:59:2b:29:c0:a5:a3:db:fa:dd:
         75:ef:02:09:53:5c:4f:d7:54:55:ba:ab:5c:df:50:e1:65:88:
         22:ca:d9:95:02:69:3b:06:94:46:27:a9:00:87:4c:d0:da:2a:
         46:19:bc:7f:0c:00:d8:3e:ba:e3:f4:33:ce:d0:ca:39:c5:02:
         15:a4:a5:b4:5e:26:5b:dc:1f:c4:fe:7d:b3:e3:2c:f6:3e:88:
         dc:7d:a8:5c:57:bd:58:c1:36:ad:82:ee:56:3e:83:93:b8:24:
         fe:de:3a:87:60:8d:3e:aa:62:8e:ec:91:5a:2c:30:7e:c0:ae:
         87:5a:26:89:69:57:9a:e3:94:4a:07:58:9c:94:51:ae:0c:fd:
         96:86:69:79:5f:c8:89:d4:11:ee:e2:cb:69:18:c2:47:37:89:
         40:94:fb:6f:15:df:13:da:61:58:7e:49:5a:29:66:a2:df:07:
         35:31:86:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----