Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS49981.roa
File:                     AS49981.roa (raw, json)
Hash identifier:          u0pECv65itD6EpNFCNDbe5/OFWxullx2aS+roDhr0Ug=
Subject key identifier:   B0:C7:6F:77:CD:73:38:27:9F:16:4C:5B:D2:1E:7E:B2:19:8D:91:15
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6A9A8C9F4522F87824A8065E1D644DC73A491991
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS49981.roa
Signing time:             Sat 07 Oct 2023 13:45:49 +0000
ROA not before:           Sat 07 Oct 2023 13:40:49 +0000
ROA not after:            Sat 05 Oct 2024 13:45:49 +0000
asID:                     49981
IP address blocks:        2a05:dfc7:2200::/48 maxlen: 48
                          2a05:dfc7:2253::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9a:8c:9f:45:22:f8:78:24:a8:06:5e:1d:64:4d:c7:3a:49:19:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Oct  7 13:40:49 2023 GMT
            Not After : Oct  5 13:45:49 2024 GMT
        Subject: CN=B0C76F77CD7338279F164C5BD21E7EB2198D9115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:d2:bc:d7:43:c8:77:55:ec:17:a6:40:5c:
                    fa:de:03:d7:3e:be:f4:02:a6:6e:d0:52:cf:36:d2:
                    58:92:5a:c4:77:c4:50:fc:87:90:5c:a5:a5:86:1a:
                    23:33:3d:4d:94:3d:74:ac:52:7b:7c:4e:ea:51:9a:
                    57:37:f1:d7:60:a1:29:32:9f:ab:f8:00:89:51:54:
                    2e:a9:11:39:47:11:ad:27:89:49:8d:4a:08:77:2f:
                    22:7c:c7:48:34:30:b2:b9:87:de:7f:9d:65:78:67:
                    bf:20:5a:04:f2:2f:65:8d:25:f6:b3:3e:85:39:16:
                    47:01:71:84:21:73:aa:a9:88:7e:34:35:03:e9:5e:
                    2c:4c:12:d3:14:8a:1c:db:af:b5:a8:da:05:8f:03:
                    b5:c1:f9:95:38:c7:a3:b2:d2:b9:f1:25:44:05:d2:
                    2a:d3:fb:c2:ef:cf:f8:49:c8:e5:34:27:94:82:87:
                    e5:e8:eb:57:b1:65:99:43:88:07:35:27:5b:0f:8d:
                    a2:17:97:29:64:33:ce:b6:e2:0a:45:ed:ee:be:d4:
                    b5:7d:2d:1a:9c:21:38:b5:03:70:25:f5:b9:cd:7a:
                    7b:3a:f7:ca:fd:f6:15:ad:89:a1:17:5d:e3:21:a1:
                    85:d3:e8:6a:89:72:d2:8e:65:08:96:bc:27:fc:53:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C7:6F:77:CD:73:38:27:9F:16:4C:5B:D2:1E:7E:B2:19:8D:91:15
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS49981.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:2200::/48
                  2a05:dfc7:2253::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:c4:72:d9:2d:76:4f:65:88:05:49:ef:ad:d6:b8:9f:40:b9:
         3b:e8:b7:7c:78:37:68:10:68:56:89:11:bd:09:93:be:23:87:
         d0:f2:8a:86:13:c2:ae:dd:b5:d0:12:82:7a:6e:65:d6:1f:97:
         bb:a2:86:54:fb:bf:65:65:79:66:83:c1:7d:5f:6f:af:cb:2e:
         f7:0e:21:f7:d9:0d:10:fc:f3:bb:1f:a3:75:53:16:9e:72:54:
         92:70:7c:21:b5:c8:be:93:46:6e:1a:78:ea:94:d4:dc:df:2a:
         43:d6:84:ee:c7:d4:cf:3c:46:7f:36:10:a4:5c:fa:93:11:72:
         d0:02:3e:5c:57:7b:68:24:f5:08:78:20:f4:40:0c:e7:1d:57:
         e1:91:a7:b3:8d:08:2e:5f:66:0f:1a:73:8a:d0:b2:6b:59:a3:
         6e:d1:b5:07:6f:2e:d6:14:01:52:12:ff:09:66:0f:12:2f:6b:
         a7:09:76:51:af:25:f6:7c:06:4f:af:2d:b7:50:16:87:4e:85:
         00:dc:ed:0e:11:1c:74:16:72:52:82:64:15:cf:35:8d:3c:0a:
         d0:0c:1c:3d:01:eb:7c:6f:33:e6:a8:ea:6a:d0:9c:e3:8b:79:
         4e:b7:30:43:bf:19:09:bd:0e:fe:bb:77:cc:f6:c9:e2:8b:02:
         80:3b:ea:f2
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIUapqMn0Ui+HgkqAZeHWRNxzpJGZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzEwMDcxMzQwNDlaFw0yNDEwMDUxMzQ1NDlaMDMxMTAvBgNV
BAMTKEIwQzc2Rjc3Q0Q3MzM4Mjc5RjE2NEM1QkQyMUU3RUIyMTk4RDkxMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+NK810PId1XsF6ZAXPreA9c+
vvQCpm7QUs820liSWsR3xFD8h5BcpaWGGiMzPU2UPXSsUnt8TupRmlc38ddgoSky
n6v4AIlRVC6pETlHEa0niUmNSgh3LyJ8x0g0MLK5h95/nWV4Z78gWgTyL2WNJfaz
PoU5FkcBcYQhc6qpiH40NQPpXixMEtMUihzbr7Wo2gWPA7XB+ZU4x6Oy0rnxJUQF
0irT+8Lvz/hJyOU0J5SCh+Xo61exZZlDiAc1J1sPjaIXlylkM8624gpF7e6+1LV9
LRqcITi1A3Al9bnNens698r99hWtiaEXXeMhoYXT6GqJctKOZQiWvCf8U6RfAgMB
AAGjggHZMIIB1TAdBgNVHQ4EFgQUsMdvd81zOCefFkxb0h5+shmNkRUwHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
RwYIKwYBBQUHAQsEOzA5MDcGCCsGAQUFBzALhityc3luYzovL3Jwa2kuY28vcmVw
by9BUzIwNTQzMi8wL0FTNDk5ODEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgACMBIDBwAqBd/HIgADBwAqBd/HIlMw
DQYJKoZIhvcNAQELBQADggEBAE/Ectktdk9liAVJ763WuJ9AuTvot3x4N2gQaFaJ
Eb0Jk74jh9DyioYTwq7dtdASgnpuZdYfl7uihlT7v2VleWaDwX1fb6/LLvcOIffZ
DRD887sfo3VTFp5yVJJwfCG1yL6TRm4aeOqU1NzfKkPWhO7H1M88Rn82EKRc+pMR
ctACPlxXe2gk9Qh4IPRADOcdV+GRp7ONCC5fZg8ac4rQsmtZo27RtQdvLtYUAVIS
/wlmDxIva6cJdlGvJfZ8Bk+vLbdQFodOhQDc7Q4RHHQWclKCZBXPNY08CtAMHD0B
63xvM+ao6mrQnOOLeU63MEO/GQm9Dv67d8z2yeKLAoA76vI=
-----END CERTIFICATE-----