Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS49519.roa
File:                     AS49519.roa (raw, json)
Hash identifier:          4PDiAETUABzH7SdyN30m4qa31NCI4RH3rrgNsL5qdkE=
Subject key identifier:   64:1D:5D:05:86:AB:9E:D6:FB:6B:3B:EC:30:DE:F0:C7:65:58:E6:AF
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       43475109F6C3C86C4368952B706318F553C1A87D
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS49519.roa
Signing time:             Thu 06 Jul 2023 11:17:22 +0000
ROA not before:           Thu 06 Jul 2023 11:12:22 +0000
ROA not after:            Thu 04 Jul 2024 11:17:22 +0000
asID:                     49519
IP address blocks:        2a05:dfc7:2400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:47:51:09:f6:c3:c8:6c:43:68:95:2b:70:63:18:f5:53:c1:a8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:22 2023 GMT
            Not After : Jul  4 11:17:22 2024 GMT
        Subject: CN=641D5D0586AB9ED6FB6B3BEC30DEF0C76558E6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2c:4f:42:5d:5c:a4:91:06:9f:8a:5e:5b:46:
                    d4:7f:bd:1a:38:12:c5:7b:22:a5:03:ba:62:76:37:
                    88:5c:d2:52:69:bd:70:6b:4a:42:6b:d5:5f:66:a7:
                    c5:e2:51:0a:99:5e:6d:63:16:18:0c:c3:d6:c0:85:
                    f5:0a:4a:78:ff:32:1e:0a:4b:09:ef:e5:32:ce:af:
                    47:c7:7c:2d:1f:fa:ea:84:cc:b0:a9:62:3d:ac:f4:
                    05:46:32:e9:30:c6:01:b1:07:7b:7a:d6:eb:38:93:
                    e1:de:c9:64:87:64:9f:4b:1e:07:09:54:b8:d2:92:
                    b4:04:2f:92:3e:4f:77:75:bc:cc:1c:01:31:aa:28:
                    b0:0f:92:78:9a:1e:e6:ae:5b:09:92:80:33:65:e6:
                    98:03:11:12:b7:39:e3:e7:ae:02:90:4b:58:81:12:
                    b5:a2:94:5c:e9:d0:7a:e5:74:2d:b0:63:17:c1:d1:
                    7e:21:18:e3:7d:d6:08:48:da:f7:ae:da:ff:da:29:
                    36:74:7b:e4:a8:1a:3b:25:39:a8:3a:37:41:fe:9e:
                    5d:05:d2:8b:db:8d:ac:61:9a:59:35:70:63:83:d9:
                    7c:02:4f:ed:ef:c5:4b:1d:e0:5e:6b:04:26:1d:39:
                    aa:ac:c6:f2:75:7a:45:8a:90:cb:cc:47:a0:07:4b:
                    da:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1D:5D:05:86:AB:9E:D6:FB:6B:3B:EC:30:DE:F0:C7:65:58:E6:AF
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS49519.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:f9:04:80:cd:33:11:66:7f:37:f9:69:ba:98:49:56:7e:60:
         58:1a:3e:6b:d1:85:f2:03:e7:00:cc:30:3c:d3:6a:71:cf:09:
         f0:22:f8:aa:78:af:01:e0:1c:37:aa:68:b2:20:35:c1:bb:ce:
         27:00:f5:99:b3:25:ff:c7:1e:75:8f:27:44:99:c2:4b:e4:9c:
         b3:d8:a0:f2:3b:4e:5e:7a:6d:3e:a9:fe:09:18:68:ee:b3:55:
         69:5b:05:ff:9a:bc:e5:76:bc:cf:f8:40:72:99:10:d6:98:be:
         f9:7a:fc:13:24:92:f8:fb:73:cf:49:34:44:81:1b:ea:91:eb:
         bc:2a:cf:8b:00:ce:eb:31:e7:9b:00:2e:81:d2:e7:c2:7f:a7:
         b0:2b:71:fa:c3:5e:e7:0b:e2:59:dc:0c:89:2b:8f:7d:c3:cc:
         ca:f1:83:6b:f6:38:3c:1a:97:88:cb:84:f0:33:1b:3a:8e:5d:
         9b:d3:92:bd:6b:fe:15:06:c2:3e:36:ac:21:ab:80:55:28:0a:
         05:07:9e:2f:32:a5:23:79:4c:f9:df:0d:b2:6a:32:bd:57:cb:
         e5:51:77:1d:2a:d2:6e:f0:75:79:ae:1b:2e:21:24:0a:82:6e:
         19:07:b1:9e:4a:b2:9c:e5:ac:12:ad:27:87:bf:29:31:f2:63:
         f1:c1:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----