Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS47311.roa
File:                     AS47311.roa (raw, json)
Hash identifier:          0ykbTFph8yPEta6X+rV0n2nfNw7FFSNonvW9M/YaXpo=
Subject key identifier:   8B:E0:36:C8:F2:F8:FF:AA:28:0B:86:3A:4C:7E:AC:42:2D:6C:D4:EF
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       589F08624ED70B482FF389D8121A712B2C59A87A
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS47311.roa
Signing time:             Sat 07 Oct 2023 17:32:56 +0000
ROA not before:           Sat 07 Oct 2023 17:27:56 +0000
ROA not after:            Sat 05 Oct 2024 17:32:56 +0000
asID:                     47311
IP address blocks:        2a05:dfc7:d200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9f:08:62:4e:d7:0b:48:2f:f3:89:d8:12:1a:71:2b:2c:59:a8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct  7 17:27:56 2023 GMT
            Not After : Oct  5 17:32:56 2024 GMT
        Subject: CN=8BE036C8F2F8FFAA280B863A4C7EAC422D6CD4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:83:f4:71:c5:08:c8:1a:64:b0:4d:86:98:
                    b7:d5:36:5c:2e:6a:25:1e:6c:b1:4e:89:a3:da:62:
                    16:2a:47:a1:09:b7:cd:13:78:5d:87:ea:7a:a1:91:
                    81:7d:af:b1:36:9a:b6:24:1d:03:cf:af:cf:61:18:
                    78:6e:d9:f4:92:75:9c:97:77:58:05:bc:6c:ca:6d:
                    28:f5:86:e4:1d:55:60:46:d0:d1:d3:00:ec:69:d5:
                    3e:c5:03:f6:e1:74:a0:dc:ba:dd:48:02:f4:43:3a:
                    91:ee:55:50:e9:ac:6e:c9:bf:f2:cc:48:07:49:8a:
                    d0:42:cf:75:be:04:0f:91:d9:c4:57:72:56:e7:8e:
                    cc:bf:6e:c4:9e:82:18:26:89:90:43:07:b1:7f:e2:
                    2e:19:84:44:3d:9b:d1:ce:d9:a5:4a:f6:5e:e3:be:
                    1e:17:ce:ab:39:c3:7c:64:8f:4e:ec:bf:df:66:b2:
                    1b:2e:8a:ab:fb:5a:2e:96:f0:56:d9:51:7a:4b:36:
                    f3:1c:16:8d:9b:cd:a2:de:5a:8c:07:ed:36:72:94:
                    6a:85:8b:47:cb:75:20:6d:ed:42:b0:4e:26:9c:cb:
                    cb:8b:ac:29:a2:dd:cd:b4:9d:df:98:a2:96:1e:aa:
                    02:6f:64:a3:13:8e:f3:d8:6d:81:7f:0d:ae:96:99:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E0:36:C8:F2:F8:FF:AA:28:0B:86:3A:4C:7E:AC:42:2D:6C:D4:EF
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS47311.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:d200::/39

    Signature Algorithm: sha256WithRSAEncryption
         c6:fb:da:53:a6:68:7d:01:8c:67:6d:93:7f:90:ca:25:db:23:
         86:7c:a6:99:14:60:83:ae:8c:31:83:74:b3:a8:e8:3d:33:37:
         82:f1:f0:e0:c1:f6:6f:15:9c:50:b4:f6:5f:8b:42:aa:2a:ad:
         58:1b:37:35:ac:5e:48:e9:50:50:df:92:6b:80:9b:a7:00:ea:
         7d:31:14:0e:c3:37:5b:da:46:bb:1f:e4:f2:3e:d3:ab:cc:ff:
         58:39:90:be:a9:ee:2f:c9:0c:b0:6b:63:3d:c0:ab:ba:29:25:
         ac:f7:5a:61:e8:77:36:ed:e0:7f:8b:49:08:47:e4:e5:32:98:
         30:a0:e9:49:5a:b7:61:0f:55:c2:ad:17:d6:94:66:2e:d4:74:
         d4:0a:df:81:bc:3c:e8:1c:cd:06:fb:90:22:3a:5a:f2:88:45:
         67:5c:30:67:e4:65:ae:84:0f:6e:93:d2:14:2e:9c:4e:ea:c7:
         4f:ea:f3:de:5c:c0:88:25:be:db:8f:90:c1:21:71:d1:81:7d:
         f6:72:48:b9:45:37:4f:b3:ac:ab:61:ec:06:46:ae:f6:42:61:
         e6:1e:33:ec:57:ac:80:6a:5b:bb:88:e9:92:e9:b5:6f:ec:9d:
         43:b6:72:a1:79:b3:33:3c:ff:12:20:cf:09:e1:64:65:ea:aa:
         ce:65:a2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----