Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS48700.roa
File:                     AS48700.roa (raw, json)
Hash identifier:          3RAk6o6xNHO4s9Rsz17nNQiVK6Wlu6qxnAko9IaCVt8=
Subject key identifier:   1E:FA:BA:F8:C3:F6:91:87:78:31:3C:35:35:3E:40:CF:9A:FB:A5:D0
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       68C55A05CF7164C88A30DED9E600F41D81067CE9
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS48700.roa
Signing time:             Mon 16 Oct 2023 08:15:03 +0000
ROA not before:           Mon 16 Oct 2023 08:10:03 +0000
ROA not after:            Mon 14 Oct 2024 08:15:03 +0000
asID:                     48700
IP address blocks:        2a06:1287:a400::/38 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c5:5a:05:cf:71:64:c8:8a:30:de:d9:e6:00:f4:1d:81:06:7c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct 16 08:10:03 2023 GMT
            Not After : Oct 14 08:15:03 2024 GMT
        Subject: CN=1EFABAF8C3F6918778313C35353E40CF9AFBA5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:33:96:cf:9d:d6:ce:7f:15:a5:f6:56:61:
                    37:12:2f:3d:6b:5c:74:46:19:46:a2:94:a2:1f:49:
                    ab:08:75:d1:95:86:35:0e:69:4d:43:f6:d5:bf:e5:
                    ad:95:eb:86:ed:87:4e:da:02:a3:8f:0c:a0:f6:23:
                    dc:1c:bb:89:0d:d6:c5:e7:a8:b0:62:0d:e1:8a:dc:
                    80:bf:1f:1d:66:76:92:ca:10:40:1d:1a:ca:30:fd:
                    4e:e1:a3:a2:53:65:3b:bb:4a:55:cd:a6:ae:85:0b:
                    de:97:d5:f8:10:e7:fb:1f:5d:aa:96:56:cf:b1:0d:
                    5c:f5:cb:0e:96:1c:05:22:50:fb:00:fc:3d:b2:d2:
                    73:cb:6e:9e:04:2d:4f:e8:19:4e:1f:b1:ac:0f:84:
                    bb:8a:93:77:79:9a:a3:1e:51:fa:42:52:fe:6f:74:
                    e5:99:cf:78:e6:78:64:a1:9f:0f:6d:f4:cd:1b:88:
                    45:17:ce:81:57:60:05:7c:f2:6b:35:b2:2b:8c:66:
                    e3:12:c8:f8:cf:7b:6a:a8:d2:f3:12:d6:bc:02:45:
                    b1:20:d3:70:e7:8c:7d:d8:91:fe:14:14:f1:66:80:
                    b1:de:ee:7c:b9:56:b9:1a:9d:b1:2b:23:c1:f2:44:
                    42:82:cb:26:3d:a2:99:f4:e1:59:07:a4:a0:f7:5c:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FA:BA:F8:C3:F6:91:87:78:31:3C:35:35:3E:40:CF:9A:FB:A5:D0
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS48700.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:a400::/38

    Signature Algorithm: sha256WithRSAEncryption
         0d:07:09:17:69:76:86:45:54:fa:08:a3:7f:ea:f1:1e:30:e3:
         41:fa:40:05:2f:79:ae:e4:49:dd:02:13:33:33:b0:4e:49:b1:
         94:45:ea:a9:61:a8:d9:fb:ba:35:83:06:f6:b6:1b:b7:85:ce:
         b9:2c:74:b5:9e:fc:c0:5d:c7:a3:d7:4e:61:0b:08:09:a9:fc:
         2e:26:58:1e:e3:13:77:5b:ff:fc:3f:e0:f7:94:ac:36:61:de:
         a1:21:00:74:ef:fd:95:54:62:56:97:d0:2f:82:da:0a:90:ad:
         60:9d:3a:8d:62:7c:86:fc:88:62:aa:47:43:ad:f5:4e:13:03:
         3c:17:fc:46:3e:42:2a:ba:cf:dc:1d:01:6f:d1:f8:4c:f5:a0:
         85:78:47:5d:66:56:2b:24:03:81:e9:79:c1:03:45:59:5f:b0:
         8a:34:9a:ea:8d:96:ac:a3:23:14:9b:8f:16:7d:ad:47:79:ab:
         13:bb:1e:b1:49:e0:5d:06:77:93:13:c7:6d:bd:c2:49:ad:a5:
         a6:59:0b:33:98:26:a0:c9:7a:c6:27:fb:24:b2:1d:dc:9e:72:
         65:bb:1b:c2:94:2a:7f:e8:d1:0b:65:fc:c7:78:18:73:22:40:
         c8:ef:b3:db:9a:8c:d7:20:42:9d:34:7e:ad:2c:fe:27:13:67:
         b4:de:5f:6f
-----BEGIN CERTIFICATE-----
MIIExTCCA62gAwIBAgIUaMVaBc9xZMiKMN7Z5gD0HYEGfOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzEwMTYwODEwMDNaFw0yNDEwMTQwODE1MDNaMDMxMTAvBgNV
BAMTKDFFRkFCQUY4QzNGNjkxODc3ODMxM0MzNTM1M0U0MENGOUFGQkE1RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVjOWz53Wzn8VpfZWYTcSLz1r
XHRGGUailKIfSasIddGVhjUOaU1D9tW/5a2V64bth07aAqOPDKD2I9wcu4kN1sXn
qLBiDeGK3IC/Hx1mdpLKEEAdGsow/U7ho6JTZTu7SlXNpq6FC96X1fgQ5/sfXaqW
Vs+xDVz1yw6WHAUiUPsA/D2y0nPLbp4ELU/oGU4fsawPhLuKk3d5mqMeUfpCUv5v
dOWZz3jmeGShnw9t9M0biEUXzoFXYAV88ms1siuMZuMSyPjPe2qo0vMS1rwCRbEg
03DnjH3Ykf4UFPFmgLHe7ny5VrkanbErI8HyREKCyyY9opn04VkHpKD3XFunAgMB
AAGjggHPMIIByzAdBgNVHQ4EFgQUHvq6+MP2kYd4MTw1NT5Az5r7pdAwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
RwYIKwYBBQUHAQsEOzA5MDcGCCsGAQUFBzALhityc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTNDg3MDAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIqBhKHpDANBgkqhkiG9w0B
AQsFAAOCAQEADQcJF2l2hkVU+gijf+rxHjDjQfpABS95ruRJ3QITMzOwTkmxlEXq
qWGo2fu6NYMG9rYbt4XOuSx0tZ78wF3Ho9dOYQsICan8LiZYHuMTd1v//D/g95Ss
NmHeoSEAdO/9lVRiVpfQL4LaCpCtYJ06jWJ8hvyIYqpHQ631ThMDPBf8Rj5CKrrP
3B0Bb9H4TPWghXhHXWZWKyQDgel5wQNFWV+wijSa6o2WrKMjFJuPFn2tR3mrE7se
sUngXQZ3kxPHbb3CSa2lplkLM5gmoMl6xif7JLId3J5yZbsbwpQqf+jRC2X8x3gY
cyJAyO+z25qM1yBCnTR+rSz+JxNntN5fbw==
-----END CERTIFICATE-----