Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS36351.roa
File:                     AS36351.roa (raw, json)
Hash identifier:          n/BJu0O4UNYPNREhH0CQHaf1jZCn9iL5brXwQg38pg8=
Subject key identifier:   BB:88:19:5A:D9:F7:1F:E1:80:DB:DC:ED:68:98:36:0F:FC:12:B3:E9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0FCABCB90690E673DF9F354676152A79CF0A9E11
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS36351.roa
Signing time:             Thu 06 Jul 2023 11:17:10 +0000
ROA not before:           Thu 06 Jul 2023 11:12:10 +0000
ROA not after:            Thu 04 Jul 2024 11:17:10 +0000
asID:                     36351
IP address blocks:        2a05:dfc7:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ca:bc:b9:06:90:e6:73:df:9f:35:46:76:15:2a:79:cf:0a:9e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:10 2023 GMT
            Not After : Jul  4 11:17:10 2024 GMT
        Subject: CN=BB88195AD9F71FE180DBDCED6898360FFC12B3E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:9b:b7:c8:73:e6:35:94:e6:ab:7e:fc:1e:
                    fb:3a:29:5d:5e:36:70:54:2e:4d:8d:3a:a4:1b:e6:
                    98:de:d8:78:9c:15:ac:55:76:4c:ac:7b:b9:2e:12:
                    e0:20:d7:a4:be:2c:7c:4f:20:c9:08:3a:11:75:cc:
                    0a:be:8a:1b:0b:36:3b:a3:0b:87:dc:b3:db:eb:bb:
                    e2:c8:ca:ac:9a:4b:82:7f:3b:a4:6a:b1:b7:a4:20:
                    9b:cd:19:82:a6:80:9c:9d:24:a5:61:ed:17:1b:00:
                    28:42:85:7e:f7:f7:0e:cc:9e:94:7d:04:19:6b:41:
                    6b:a0:e6:2d:dc:cc:2e:86:82:56:34:db:62:c7:10:
                    6a:0e:fb:4e:91:66:be:9e:b8:8a:6d:7c:9a:76:7c:
                    20:c3:5f:b2:67:be:db:c4:ba:5d:f7:2b:43:c6:94:
                    2e:fc:81:eb:e6:81:0f:27:b4:07:ff:40:5b:1e:ce:
                    2d:c9:86:47:ff:ce:9f:ec:49:d3:8b:83:9f:96:6a:
                    31:c5:c5:c1:47:c0:5f:2b:bc:80:a5:70:8d:ef:91:
                    97:cf:8e:98:51:60:45:e4:18:77:b9:6f:5e:d5:64:
                    cf:91:17:a0:8c:aa:1b:2e:70:00:29:01:b5:c8:b8:
                    e3:dc:b8:0a:ec:12:8c:ac:33:7d:c7:0f:01:35:3c:
                    c9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:88:19:5A:D9:F7:1F:E1:80:DB:DC:ED:68:98:36:0F:FC:12:B3:E9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS36351.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:03:7a:05:11:6d:d8:b7:85:51:20:90:0d:76:4b:17:2d:cc:
         c1:ad:be:5c:e5:73:14:fd:9d:e8:a8:fb:3a:17:a3:33:13:f1:
         94:5f:02:8e:dd:7a:10:57:e8:6a:f7:cb:0e:52:e1:7a:e4:ba:
         dc:99:d1:44:bb:63:bf:86:20:d4:ca:74:e4:be:7e:1e:36:ad:
         e6:48:07:6f:c3:4a:5d:5e:af:55:fc:09:68:b1:7a:9d:66:b6:
         38:9e:e0:c5:6a:71:4a:c9:51:41:df:90:a8:fe:a3:c9:de:fe:
         67:4a:5b:f8:c9:3a:ca:13:05:6a:f4:3f:fe:e8:e1:74:62:66:
         e6:49:6d:9c:07:b2:10:ed:c1:ef:85:65:8e:3e:31:5b:0f:6e:
         20:7d:fd:0f:9a:2f:28:e7:c3:9e:ad:ec:fa:b9:7b:9a:e2:fc:
         ae:35:43:f0:44:aa:c3:ef:bf:34:96:65:04:6f:a0:5d:2c:08:
         d0:93:6c:32:cb:38:9a:4e:0f:2e:69:f8:0d:0a:d9:42:fb:af:
         48:5a:02:47:ff:ce:1f:46:12:0a:d6:4b:66:89:c5:4c:a7:02:
         12:a2:0e:ac:05:aa:39:3f:b4:c5:bc:89:71:60:5c:a9:5e:6a:
         f9:6d:ed:6e:6c:da:cf:4f:e3:f3:90:87:54:d9:a7:22:b6:b4:
         e7:dc:52:d8
-----BEGIN CERTIFICATE-----
MIIExjCCA66gAwIBAgIUD8q8uQaQ5nPfnzVGdhUqec8KnhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA3MDYxMTEyMTBaFw0yNDA3MDQxMTE3MTBaMDMxMTAvBgNV
BAMTKEJCODgxOTVBRDlGNzFGRTE4MERCRENFRDY4OTgzNjBGRkMxMkIzRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAJu3yHPmNZTmq378Hvs6KV1e
NnBULk2NOqQb5pje2HicFaxVdkyse7kuEuAg16S+LHxPIMkIOhF1zAq+ihsLNjuj
C4fcs9vru+LIyqyaS4J/O6RqsbekIJvNGYKmgJydJKVh7RcbAChChX739w7MnpR9
BBlrQWug5i3czC6GglY022LHEGoO+06RZr6euIptfJp2fCDDX7JnvtvEul33K0PG
lC78gevmgQ8ntAf/QFsezi3Jhkf/zp/sSdOLg5+WajHFxcFHwF8rvIClcI3vkZfP
jphRYEXkGHe5b17VZM+RF6CMqhsucAApAbXIuOPcuArsEoysM33HDwE1PMnLAgMB
AAGjggHQMIIBzDAdBgNVHQ4EFgQUu4gZWtn3H+GA29ztaJg2D/wSs+kwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
RwYIKwYBBQUHAQsEOzA5MDcGCCsGAQUFBzALhityc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTMzYzNTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqBd/HADAwDQYJKoZIhvcN
AQELBQADggEBADsDegURbdi3hVEgkA12SxctzMGtvlzlcxT9neio+zoXozMT8ZRf
Ao7dehBX6Gr3yw5S4XrkutyZ0US7Y7+GINTKdOS+fh42reZIB2/DSl1er1X8CWix
ep1mtjie4MVqcUrJUUHfkKj+o8ne/mdKW/jJOsoTBWr0P/7o4XRiZuZJbZwHshDt
we+FZY4+MVsPbiB9/Q+aLyjnw56t7Pq5e5ri/K41Q/BEqsPvvzSWZQRvoF0sCNCT
bDLLOJpODy5p+A0K2UL7r0haAkf/zh9GEgrWS2aJxUynAhKiDqwFqjk/tMW8iXFg
XKleavlt7W5s2s9P4/OQh1TZpyK2tOfcUtg=
-----END CERTIFICATE-----