Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          tUbBt8AYjUZswNUXAOg2QBslxWjuz64JXf80TygKCHo=
Subject key identifier:   AE:9E:B9:A3:74:22:2F:55:0D:8F:9C:45:BC:1F:EA:6C:F6:97:EA:C9
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       604C9E0C6CA824093FA67B970033E37DBE01F99F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS61317.roa
Signing time:             Thu 06 Jul 2023 11:17:14 +0000
ROA not before:           Thu 06 Jul 2023 11:12:14 +0000
ROA not after:            Thu 04 Jul 2024 11:17:14 +0000
asID:                     61317
IP address blocks:        2a06:1287:8600::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4c:9e:0c:6c:a8:24:09:3f:a6:7b:97:00:33:e3:7d:be:01:f9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:14 2023 GMT
            Not After : Jul  4 11:17:14 2024 GMT
        Subject: CN=AE9EB9A374222F550D8F9C45BC1FEA6CF697EAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:2f:be:40:af:6e:9d:d5:07:b2:2b:fd:c2:
                    f1:31:f0:d5:eb:b0:d0:0f:c3:9e:79:3f:8b:f2:9f:
                    53:a1:59:57:4d:ea:e2:a3:6a:f9:2d:51:cd:f6:b9:
                    75:f0:f0:ae:ca:19:1e:93:ba:c7:2f:96:e7:e0:3f:
                    7d:ec:11:e6:b1:33:16:84:e4:51:b9:9e:f3:e5:b5:
                    0b:b0:dd:f3:2a:5c:f8:57:c7:cc:6e:38:64:3f:34:
                    64:4f:48:57:d7:d2:aa:c3:a3:96:0d:b1:44:77:ba:
                    fc:7f:f8:fb:e0:42:9d:40:60:fc:cf:86:e2:a2:d3:
                    89:2a:67:a7:3e:d7:97:e9:c7:29:4b:6b:64:b6:8b:
                    5a:16:34:85:0e:d8:cb:00:de:51:e0:bb:aa:64:d9:
                    0c:d7:d6:25:73:0e:03:c0:7c:71:2e:70:2c:06:b8:
                    cf:1f:25:e1:23:9d:f9:72:45:12:31:35:f5:78:56:
                    58:66:7d:bd:c4:64:cd:ac:43:60:f1:9f:4c:d9:01:
                    dc:e9:a3:0a:ea:47:eb:c5:55:31:6a:48:99:30:cf:
                    b4:4a:c5:73:6f:68:41:cc:fa:fb:fe:72:d3:d7:7d:
                    65:5a:1d:f4:8e:ae:3c:0c:dd:8d:cc:f5:9d:99:52:
                    f1:30:d4:37:f2:a6:2a:ee:af:3f:58:da:88:89:c4:
                    5c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9E:B9:A3:74:22:2F:55:0D:8F:9C:45:BC:1F:EA:6C:F6:97:EA:C9
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:8600::/39

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:e6:b0:81:08:cd:06:50:c8:19:0e:a1:be:7b:66:9a:c0:
         bf:1c:a2:eb:bc:9a:57:d0:64:5d:0e:32:a8:73:62:fa:ff:6d:
         90:ac:21:a5:93:53:81:f2:f0:67:8b:00:09:5c:46:3c:f2:7b:
         98:75:b8:bd:02:38:a6:7b:25:6d:17:4b:a2:51:87:a5:f6:63:
         ca:30:e1:a4:49:09:e7:6b:8f:a1:ac:d6:03:16:41:a3:0e:c5:
         b9:97:e9:e3:2d:20:c8:d6:5c:28:a5:96:8d:15:52:03:39:9a:
         05:67:73:d6:49:ce:8f:5b:54:a4:34:c1:c4:05:d6:90:23:53:
         d2:60:d5:8e:68:2f:c2:71:5a:0a:49:7a:c2:03:f2:20:1d:2e:
         1d:8b:72:45:bc:bb:e0:41:c4:74:8a:d4:35:6b:e8:bb:20:02:
         2e:07:69:69:79:8e:6f:37:2f:04:a9:f3:32:3f:c2:24:a9:40:
         f7:44:fc:86:54:a6:84:21:ee:53:55:36:36:94:67:45:88:4d:
         4a:5d:08:6b:c8:3a:a8:9f:d0:da:61:86:16:e8:3b:96:79:70:
         0a:42:3c:20:04:2b:49:ba:f2:d5:ef:0e:e3:0a:8c:61:2d:5a:
         9e:45:4a:5f:4e:02:58:8f:93:04:b2:32:05:87:72:f7:22:83:
         a0:b4:76:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----