Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS216472.roa
File:                     AS216472.roa (raw, json)
Hash identifier:          cmE3VzfMudTpog6Y1ETZMgd9Eos6JTRdU61HcNfc4v8=
Subject key identifier:   38:5A:19:74:5F:C4:11:D2:90:44:37:3C:87:85:5F:65:1F:80:8B:EC
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       1D7F590C697B9538CC736592AE6633EB160788BC
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS216472.roa
Signing time:             Mon 04 Sep 2023 20:29:24 +0000
ROA not before:           Mon 04 Sep 2023 20:24:24 +0000
ROA not after:            Mon 02 Sep 2024 20:29:24 +0000
asID:                     216472
IP address blocks:        2a05:dfc7:c600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7f:59:0c:69:7b:95:38:cc:73:65:92:ae:66:33:eb:16:07:88:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Sep  4 20:24:24 2023 GMT
            Not After : Sep  2 20:29:24 2024 GMT
        Subject: CN=385A19745FC411D29044373C87855F651F808BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:ed:bc:57:e1:80:10:a3:d8:ff:98:59:89:
                    f9:4c:e6:40:3f:4d:2b:b9:82:7b:eb:2a:cd:f7:fb:
                    7b:a2:de:81:6a:c9:6e:8d:4a:56:00:65:3b:a3:34:
                    6b:f1:09:1f:57:bf:d6:5b:61:ab:81:ea:1d:2d:10:
                    23:47:ef:3f:52:a2:44:89:e7:09:4a:24:c8:97:f0:
                    33:2b:9c:87:86:6a:d7:b1:c8:2e:96:90:ff:d6:e7:
                    cf:1f:1e:5e:51:74:84:5f:8a:a1:22:49:db:ac:a3:
                    da:49:85:84:25:cc:07:6f:13:27:1e:37:f8:6b:e8:
                    34:24:88:7b:d3:77:73:ba:2e:69:50:ea:8d:e2:e0:
                    55:07:13:8c:55:90:78:ee:6a:84:02:77:82:03:76:
                    09:c7:34:d5:d7:d0:fe:20:ea:8b:d0:bb:2b:4a:27:
                    7f:a0:b0:a9:5d:83:71:48:2b:82:a0:8b:ff:e4:df:
                    70:61:6e:0a:ff:47:7d:16:6c:6e:18:68:d6:5e:d1:
                    d2:65:b3:b1:aa:c5:c2:e9:79:29:60:5e:d5:e7:26:
                    38:ee:f1:c6:65:a2:71:ad:c1:c9:97:7d:6b:91:a2:
                    c2:fa:10:f8:4d:d5:58:9a:a0:35:f4:fa:f1:2f:ff:
                    3d:ee:b4:4d:a3:99:67:e1:fe:dd:33:fb:be:b8:33:
                    9c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5A:19:74:5F:C4:11:D2:90:44:37:3C:87:85:5F:65:1F:80:8B:EC
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS216472.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:c600::/39

    Signature Algorithm: sha256WithRSAEncryption
         66:86:30:05:fa:9f:ff:af:1a:65:d5:88:d3:cd:e8:93:b3:69:
         4d:a1:4e:47:e1:d0:df:fa:cb:80:d6:30:7a:cc:e4:e0:8e:26:
         b7:8c:67:3d:e2:01:87:33:66:7f:e1:6c:ef:81:77:7a:59:0f:
         ea:a0:e9:78:00:42:ec:00:dd:a8:5e:c3:a4:92:5b:a0:49:b1:
         e7:23:63:46:56:45:8c:94:82:b5:76:dd:bf:81:2b:47:c8:8b:
         e1:2a:9b:f2:bf:b5:c3:b9:86:80:02:20:df:f4:44:d4:30:aa:
         74:2f:f1:ee:0e:b9:80:5e:17:20:3c:fa:67:6f:68:c5:15:e6:
         4b:50:87:65:a4:3e:cb:b1:41:a7:59:d5:6b:09:a5:ec:aa:e0:
         ae:c0:db:dc:91:d9:59:f1:4b:de:da:dc:fa:e1:f8:ab:4a:53:
         25:1f:aa:ba:49:99:66:1b:60:e0:ee:35:67:e9:0f:65:4a:24:
         d5:f6:f9:cc:01:60:bd:10:79:06:d9:87:dc:b0:80:77:45:ed:
         7b:4d:12:f7:76:b3:5c:95:fd:04:a5:ad:f3:9e:26:61:80:91:
         8d:68:e7:90:78:51:36:97:a0:cd:f5:80:3c:17:5e:3e:af:be:
         6b:02:ad:e0:31:04:76:3c:74:e9:71:7b:c9:04:a4:a0:92:cd:
         ef:fb:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----