Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS216411.roa
File:                     AS216411.roa (raw, json)
Hash identifier:          O/qi3mSIoX+G5aRHm07/vY0+3nNXza7sVd0EFG02JQU=
Subject key identifier:   B6:EC:C6:39:0D:F1:01:F6:02:66:53:E8:05:A8:C4:0B:43:65:1A:9C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       2D58437FB923C29C15B4FE89CD515DF722BAD141
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS216411.roa
Signing time:             Tue 31 Oct 2023 17:16:00 +0000
ROA not before:           Tue 31 Oct 2023 17:11:00 +0000
ROA not after:            Tue 29 Oct 2024 17:16:00 +0000
asID:                     216411
IP address blocks:        2a05:dfc7:1a00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:58:43:7f:b9:23:c2:9c:15:b4:fe:89:cd:51:5d:f7:22:ba:d1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct 31 17:11:00 2023 GMT
            Not After : Oct 29 17:16:00 2024 GMT
        Subject: CN=B6ECC6390DF101F6026653E805A8C40B43651A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:61:d0:60:ee:6f:66:b9:0b:68:a0:30:2b:
                    75:3c:fe:a3:6f:b8:e1:8c:62:ae:e1:fc:c0:80:f1:
                    3b:50:d1:d3:6e:1b:6e:f9:a4:82:15:b9:b6:54:cd:
                    14:a8:bf:15:d0:a3:96:b6:d2:a0:ed:8d:e4:25:00:
                    35:06:ed:45:32:06:8c:b9:aa:1d:1c:b1:a3:88:95:
                    3a:4e:7b:f9:a7:1b:ff:56:f1:34:d6:c2:a8:92:e6:
                    7e:aa:d0:3a:7f:f9:af:81:26:a5:6f:df:2d:fb:f9:
                    b7:85:2d:0e:eb:95:e4:e3:98:87:01:e0:50:69:5a:
                    d0:96:50:d8:99:72:ab:62:49:e3:70:86:6e:2a:1c:
                    6d:a3:a1:e9:3a:a2:42:cb:a9:1b:bb:69:14:71:8a:
                    cc:de:c0:53:7e:1d:d4:a2:f0:dc:91:29:e3:34:26:
                    e6:64:34:56:87:20:75:d8:a8:ec:a8:25:60:0b:3f:
                    c4:b1:7b:32:d6:36:13:80:46:05:cf:98:65:b8:45:
                    91:4f:1c:e3:e1:ab:4a:66:06:67:67:d2:b5:71:d7:
                    99:e0:21:36:4e:8c:99:09:60:6d:56:56:20:e0:d2:
                    74:ef:37:4a:91:66:cb:15:f9:48:e6:c9:31:28:f8:
                    be:15:f0:e9:0a:ab:05:17:60:db:77:cb:8e:c5:9e:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:C6:39:0D:F1:01:F6:02:66:53:E8:05:A8:C4:0B:43:65:1A:9C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS216411.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:1a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         54:03:b4:de:1f:61:32:e6:5c:45:48:2e:81:66:bf:77:d4:e6:
         ba:04:37:cd:70:be:ff:bb:4c:2e:9c:44:06:5a:b1:31:d1:7b:
         ad:22:43:09:65:8b:47:8c:cd:e3:93:07:40:46:de:8d:2b:92:
         9d:16:1b:33:ac:4a:6e:98:5f:a7:8c:06:ec:eb:8d:3b:00:13:
         e0:6e:2d:c9:b2:1f:d0:17:5e:3b:ae:49:39:7a:36:a5:01:da:
         2e:58:84:66:8e:a0:32:ed:1f:71:26:bb:ba:c3:08:d7:00:81:
         08:97:fb:6a:5f:6f:f5:7f:e5:2d:56:86:71:f2:d2:95:e3:cc:
         ed:d4:75:e2:75:f9:ec:d7:40:f4:85:30:e9:b3:e2:eb:b3:13:
         46:b2:8a:8c:63:f3:e6:63:91:a2:af:bb:fe:8e:f1:6d:e1:55:
         d9:12:11:a1:58:1d:99:d2:10:01:31:c8:6d:13:35:ac:59:e6:
         d0:5d:d4:85:65:8c:06:38:99:ee:b5:82:67:da:7c:fc:38:d1:
         08:06:a2:66:9d:32:48:5b:26:22:9d:a9:e6:4a:3b:92:3e:6d:
         6d:2e:ae:6d:52:58:4f:f2:d5:5b:87:39:b2:e2:bb:94:85:6a:
         b0:10:2a:38:2d:21:19:97:4f:3d:ef:82:c1:3e:57:a7:19:e8:
         b5:95:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----