Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          nqJppjC1x6dSDffiuA4kgBke5GW7r8TwDwDc1rPm1hY=
Subject key identifier:   57:32:34:32:83:21:28:15:83:09:88:F4:65:EF:D2:70:EE:19:3D:4A
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       773C346F7D095E660B0BE40776FCFA0D0C5BD5DB
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS62240.roa
Signing time:             Thu 06 Jul 2023 11:17:23 +0000
ROA not before:           Thu 06 Jul 2023 11:12:23 +0000
ROA not after:            Thu 04 Jul 2024 11:17:23 +0000
asID:                     62240
IP address blocks:        2a05:dfc7:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3c:34:6f:7d:09:5e:66:0b:0b:e4:07:76:fc:fa:0d:0c:5b:d5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:23 2023 GMT
            Not After : Jul  4 11:17:23 2024 GMT
        Subject: CN=5732343283212815830988F465EFD270EE193D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:8a:ec:04:46:fb:f0:bc:6f:95:c6:26:99:
                    4a:db:c5:3c:01:e2:5f:d6:e0:41:12:07:6c:86:7e:
                    d3:52:72:81:9f:6b:b1:56:12:db:02:8f:af:c6:05:
                    ce:e7:c5:d8:72:a1:4c:53:a8:6e:63:c4:32:75:19:
                    9d:50:be:6c:11:22:d5:9a:b1:2b:d6:5c:21:b4:97:
                    c1:4a:05:e5:0f:4d:a1:fe:d6:7e:ef:58:ab:91:b2:
                    84:3b:50:78:bb:e9:53:f1:4b:fc:f2:03:75:92:9b:
                    fe:de:2a:6c:59:45:bc:8b:88:17:4b:87:96:39:57:
                    d3:82:18:c0:f8:9d:8a:6f:2f:94:56:9c:af:f9:6f:
                    74:b3:e2:2d:c0:c9:1a:f8:9f:6b:72:84:08:d2:55:
                    ad:36:2e:c1:f0:d5:56:10:1c:75:ad:67:5e:bb:b0:
                    24:19:1d:2d:0a:d1:9f:21:49:c3:20:78:2a:28:28:
                    b7:ef:41:e8:fc:15:be:fa:f0:05:86:47:36:86:f4:
                    d0:e9:ae:b7:f1:2c:23:0c:f1:15:ca:90:cb:07:bc:
                    c3:a9:73:ef:ea:8f:03:df:2f:41:62:a4:24:0f:0b:
                    76:92:26:3f:66:ec:4d:b3:e7:1c:06:a8:2c:06:96:
                    34:1d:20:92:84:cd:48:09:0a:e3:00:be:5d:7e:31:
                    bb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:32:34:32:83:21:28:15:83:09:88:F4:65:EF:D2:70:EE:19:3D:4A
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:9c:cb:1f:53:11:0c:90:bc:24:cb:46:f2:d1:13:7d:3b:
         ac:25:10:09:9e:61:5b:cc:6f:6a:38:1b:70:77:40:6a:e1:9b:
         0a:8e:aa:ae:56:1a:ec:2d:dc:24:f8:0d:15:d1:62:e8:76:e7:
         79:62:ef:48:b6:09:3e:10:4d:90:4b:8f:81:39:3f:2a:29:26:
         f3:de:5c:d5:ae:4f:ca:32:d2:be:8a:47:09:95:76:c8:38:61:
         8b:28:37:bc:37:11:68:5d:7a:69:0b:c6:b2:60:4b:ac:6e:34:
         47:95:8b:dd:2d:0c:71:e2:da:31:f2:8a:dd:d7:42:a1:89:cb:
         65:9e:53:18:cc:a1:3c:ff:0f:2e:95:a0:04:f6:5f:3a:20:1b:
         43:c0:96:91:ea:0e:2f:ed:87:43:86:7a:dd:0d:a1:75:b9:08:
         f2:ab:1d:62:31:e6:37:88:58:d1:46:d4:a2:1c:6a:c7:dc:3d:
         0b:68:01:bd:fb:d3:92:12:92:0c:42:b2:39:b7:dc:5d:f7:da:
         22:0c:bf:3e:74:ea:2d:f3:6f:5c:59:c4:7a:28:ed:0a:de:7d:
         1c:cc:4f:fe:7a:c0:48:82:28:f5:bd:ad:5d:b3:6d:31:89:67:
         34:8e:5a:a8:d9:a9:30:29:9b:4f:60:76:89:f5:4e:f2:b2:18:
         13:e0:12:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----