Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS34549.roa
File:                     AS34549.roa (raw, json)
Hash identifier:          1uUXA1K/v5RcA+A2AY0UiBAbYkYf1dRW8MNdNp1HPKc=
Subject key identifier:   02:78:3B:0F:2C:C9:F4:ED:DF:CB:62:B1:CE:A0:56:AA:65:99:8B:44
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       124BBCF4D1B64A545582985B44D8CF3014418A09
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS34549.roa
Signing time:             Thu 06 Jul 2023 11:17:19 +0000
ROA not before:           Thu 06 Jul 2023 11:12:19 +0000
ROA not after:            Thu 04 Jul 2024 11:17:19 +0000
asID:                     34549
IP address blocks:        2a06:1287:3000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4b:bc:f4:d1:b6:4a:54:55:82:98:5b:44:d8:cf:30:14:41:8a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:19 2023 GMT
            Not After : Jul  4 11:17:19 2024 GMT
        Subject: CN=02783B0F2CC9F4EDDFCB62B1CEA056AA65998B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:0e:c5:eb:ad:fc:d1:c3:5d:5d:fb:f2:7b:
                    a8:d1:93:22:b4:46:b6:1f:3a:15:79:b5:a1:34:e5:
                    8e:18:49:fb:01:ba:1a:40:72:6f:70:0f:bc:a0:3f:
                    b7:f4:0c:fa:34:7a:4e:70:0e:56:7a:08:64:cf:ef:
                    eb:e5:e9:d7:3b:01:bb:1a:6d:0e:a8:23:ac:a4:a4:
                    56:2d:a2:11:1e:30:82:b0:5f:f4:04:4d:56:bb:56:
                    cf:1b:4f:53:8c:b2:12:52:73:b0:ce:46:10:80:e5:
                    de:87:fa:b0:2e:68:04:a6:c8:aa:a0:2f:eb:7b:30:
                    98:65:2a:a4:ee:95:2f:f4:cb:5e:a6:0e:1b:7c:e9:
                    7d:43:a0:53:ee:74:71:7c:cb:c6:da:17:96:c4:c4:
                    9f:47:5c:a1:e8:ed:cc:2b:fd:ba:f8:dd:c6:ae:5b:
                    6f:d6:d2:95:69:db:67:df:e4:3e:00:59:aa:5d:c2:
                    68:9a:96:d8:0a:78:2b:3e:a9:4d:d5:31:fd:21:47:
                    73:b7:5a:12:91:6f:e8:5e:c3:d7:e0:8e:cd:62:44:
                    50:42:66:02:09:e6:9b:d8:06:ae:91:5e:c7:38:fa:
                    f6:ff:34:b9:1b:6f:34:32:e7:bb:81:c2:fe:c3:f5:
                    04:45:fc:af:8e:96:7f:9b:f9:2f:38:12:49:70:e4:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:78:3B:0F:2C:C9:F4:ED:DF:CB:62:B1:CE:A0:56:AA:65:99:8B:44
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS34549.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3000::/44

    Signature Algorithm: sha256WithRSAEncryption
         02:dd:66:68:35:a0:1c:6d:60:a0:d2:a7:7a:ff:05:3b:6e:0f:
         60:a3:ec:0a:5c:92:b0:30:a6:7a:d9:ff:f7:ee:d7:fc:04:cb:
         29:ff:5a:bb:88:68:c1:20:82:6f:5b:f9:92:17:d6:52:fa:1c:
         b7:51:4b:31:c1:fb:ce:a5:4c:a5:4c:13:a6:83:43:f5:63:aa:
         8b:8a:85:ff:05:03:02:f0:5c:f6:55:f5:73:de:39:b4:d8:30:
         7b:57:ec:77:18:4b:b6:72:10:9e:d0:b8:80:cd:aa:6a:8f:1b:
         4d:35:4e:1c:25:9b:69:61:35:25:4f:c3:c5:aa:0f:eb:2a:8b:
         d5:77:3b:6c:0e:4b:ce:3c:0c:fe:e0:fd:e0:6e:9f:87:bf:2d:
         c7:01:25:5d:37:87:cb:12:3f:a4:f8:9a:32:cd:b8:41:d5:5c:
         b9:fd:68:71:72:66:25:bc:20:06:1a:a5:fa:75:d2:b2:cf:77:
         d9:1d:3c:9d:36:c9:21:df:b2:bc:09:e9:e6:5f:eb:1d:29:bc:
         b7:f5:4b:8c:70:a8:fd:53:b9:55:94:12:0d:36:fd:8b:32:8f:
         c4:28:cf:6e:be:c4:14:6e:77:9c:02:7a:f2:c2:49:df:88:30:
         b6:df:80:ce:58:03:26:c9:1b:94:cf:5e:47:2e:08:21:4e:9e:
         cd:47:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----