Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS62217.roa
File:                     AS62217.roa (raw, json)
Hash identifier:          lTTFuZXo1bJsLA8fApnOJVsbVaVuSXmLHZVqR64+avM=
Subject key identifier:   3D:A2:4D:06:F2:CA:44:E6:36:43:56:6F:B4:0E:AD:06:EE:B9:05:07
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       48C28B1FA94504E3A81DE9288E35BBC55BD29070
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS62217.roa
Signing time:             Thu 06 Jul 2023 11:17:20 +0000
ROA not before:           Thu 06 Jul 2023 11:12:20 +0000
ROA not after:            Thu 04 Jul 2024 11:17:20 +0000
asID:                     62217
IP address blocks:        2a06:1287:2600::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c2:8b:1f:a9:45:04:e3:a8:1d:e9:28:8e:35:bb:c5:5b:d2:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:20 2023 GMT
            Not After : Jul  4 11:17:20 2024 GMT
        Subject: CN=3DA24D06F2CA44E63643566FB40EAD06EEB90507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:0c:c1:c3:66:f5:7e:e4:96:ca:4a:99:fe:
                    11:91:a6:c3:a0:6b:76:6d:e5:36:64:e7:58:19:9f:
                    ba:10:fe:95:62:a0:57:b0:11:83:6a:89:b4:41:cd:
                    25:82:62:5a:e8:f7:0a:b0:72:8c:31:8b:cf:00:f7:
                    a9:32:18:f6:15:1b:23:7f:88:57:78:31:17:59:22:
                    90:60:71:eb:66:ca:2c:14:75:81:40:e0:db:c7:22:
                    47:90:70:ae:96:78:33:06:f3:5c:67:1d:13:6c:09:
                    e2:4d:78:7f:0b:20:c7:24:3a:42:80:04:d3:0d:24:
                    0f:56:38:20:d7:ac:11:cf:70:69:ba:f8:14:10:77:
                    f0:6f:26:59:94:20:73:a1:30:c2:59:56:a4:61:bd:
                    77:ac:6a:51:18:d7:83:96:09:f5:76:93:f9:d8:90:
                    0c:69:7e:2a:85:0d:4e:61:ee:8c:f6:e0:8f:b3:4f:
                    51:4c:6e:44:92:db:58:b3:3b:05:f8:7f:02:43:e0:
                    e0:93:9b:bf:ba:e2:92:9d:7d:2b:f1:ef:11:ee:7a:
                    76:a5:90:27:7a:b8:73:12:71:5a:59:e1:37:b6:61:
                    a1:67:8a:3e:76:75:77:7a:a0:a3:3c:80:e0:99:44:
                    99:64:5c:f2:1d:96:f8:6e:4b:ab:58:a7:66:ba:0b:
                    5f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:4D:06:F2:CA:44:E6:36:43:56:6F:B4:0E:AD:06:EE:B9:05:07
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS62217.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:2600::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:e6:82:40:8f:35:be:b3:43:b9:37:67:3b:7a:5d:fb:c1:19:
         71:1e:fa:96:83:9a:aa:7c:bb:42:77:81:82:eb:9e:4c:5d:12:
         e6:50:1c:25:e2:3d:15:9e:1e:c3:b5:9d:fc:ab:3c:3e:16:a0:
         b2:5f:70:6c:8c:dd:d0:b8:ee:28:39:40:55:cb:7b:7a:5e:f4:
         52:b6:61:39:40:bc:f5:13:4a:6c:0f:5a:38:e9:e0:12:1f:e8:
         75:d5:da:38:51:83:79:af:39:ba:0a:c5:7e:24:f9:a8:02:72:
         55:73:0c:ca:83:cd:c2:71:af:da:55:2c:40:ec:a0:a4:f1:59:
         6f:95:11:ca:e8:f5:7b:4c:df:27:4e:1f:ae:c7:6e:14:21:7c:
         7c:6e:00:80:00:97:46:52:49:f5:b1:8a:b3:40:bc:3a:4e:45:
         f7:42:03:8b:3f:f3:68:41:c2:7c:3e:26:99:ba:e1:76:c0:34:
         10:ca:9c:1e:ac:37:3f:71:03:9a:65:aa:d5:1f:82:55:08:78:
         4e:54:5c:e2:be:7e:b8:0e:a0:55:d0:95:08:de:ea:53:59:b2:
         fc:d7:4e:61:c7:b3:33:7b:a7:84:72:00:ac:d4:0d:d6:25:0c:
         64:cd:9a:3c:70:6b:ee:ac:af:6e:2a:69:ab:b1:87:48:96:4b:
         92:70:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----