Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS63800.roa
File:                     AS63800.roa (raw, json)
Hash identifier:          uI7nwtR9TpOBtpccsT3mW4AwL8TorMXfqmTJml00Od0=
Subject key identifier:   8F:88:EE:27:57:B9:D6:87:AA:70:68:43:58:FC:6D:DC:19:19:FF:A2
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       436A7BD6B0FD79450DC1715FD420872A2B599866
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS63800.roa
Signing time:             Thu 06 Jul 2023 11:17:16 +0000
ROA not before:           Thu 06 Jul 2023 11:12:16 +0000
ROA not after:            Thu 04 Jul 2024 11:17:16 +0000
asID:                     63800
IP address blocks:        2a06:1287:6200::/39 maxlen: 48
                          2a06:1287:6400::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6a:7b:d6:b0:fd:79:45:0d:c1:71:5f:d4:20:87:2a:2b:59:98:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:16 2023 GMT
            Not After : Jul  4 11:17:16 2024 GMT
        Subject: CN=8F88EE2757B9D687AA70684358FC6DDC1919FFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:dd:ae:cf:79:9c:de:2e:77:dd:c4:55:00:
                    d1:1f:96:2e:d5:af:51:03:50:e2:f8:0c:d2:fc:c6:
                    fc:14:73:3e:28:49:aa:65:5a:29:66:61:e3:77:ee:
                    d8:18:05:94:70:c1:be:bc:0e:f3:b6:11:41:5e:75:
                    da:ba:45:2b:e5:42:80:43:ac:e5:00:38:d8:f1:e5:
                    e0:76:39:2c:34:90:47:64:7b:d2:00:68:2b:fa:48:
                    89:d5:63:5e:74:ee:33:94:83:4f:b9:3b:e1:25:c1:
                    78:2e:e9:0c:ee:85:87:1a:0d:4c:d9:62:0c:d8:4f:
                    0a:be:93:04:91:da:29:6e:93:3f:8d:cb:31:86:95:
                    73:ff:19:e2:23:ef:df:a4:d9:7e:f3:84:2e:9e:40:
                    de:92:4d:f2:55:ab:0e:a1:ef:ce:c5:be:30:d7:fc:
                    85:44:37:32:6d:a8:2e:7b:ea:95:fd:27:8e:f9:b2:
                    f8:fb:28:32:5b:58:c1:92:e4:a6:c6:c1:9c:df:ab:
                    7f:5e:c5:da:5b:f4:e6:25:56:bf:3c:85:d4:18:75:
                    bf:76:ac:44:f8:8e:e3:6a:53:9a:03:19:47:80:87:
                    84:67:6e:60:0f:12:0a:d0:bd:7f:68:20:9a:10:1b:
                    23:fd:26:cd:bd:03:45:eb:e1:82:cf:31:dd:71:ae:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:88:EE:27:57:B9:D6:87:AA:70:68:43:58:FC:6D:DC:19:19:FF:A2
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS63800.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:6200::-2a06:1287:65ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         a5:5c:10:1f:ce:ba:94:a9:41:92:bb:4a:93:b9:a1:cf:c6:53:
         33:31:cd:a2:cf:d8:a6:01:4e:17:fe:9d:40:91:19:d1:e2:d2:
         66:d6:4a:a3:be:48:2c:92:cf:c8:26:28:3f:93:15:e3:7b:d1:
         f5:d6:23:54:35:78:d4:95:2a:20:35:11:69:e6:8a:49:b1:6d:
         20:9a:39:fa:0e:fb:4e:a2:10:0c:e0:9d:9c:16:5d:39:f1:dc:
         46:89:ba:98:89:d9:d4:47:54:96:52:c5:b6:80:69:40:bb:bf:
         5c:24:98:17:47:13:01:67:09:8d:a4:92:51:63:1b:a6:54:2a:
         31:f7:52:10:12:cc:b7:e8:e5:0b:02:e9:1f:86:ba:ff:18:a0:
         8b:19:71:1d:60:9f:8f:c2:07:fa:54:87:cc:24:c0:4a:e8:ca:
         f3:55:5b:a2:a7:1e:9f:58:36:8f:84:e1:39:c8:19:72:92:7a:
         22:d3:0e:24:86:98:dc:0c:00:be:a7:0a:54:22:b7:04:5c:b2:
         85:20:c3:e5:33:76:79:35:0a:08:71:3e:e0:74:5d:08:3e:56:
         79:fc:6f:e2:64:49:1e:02:4f:24:21:8f:57:3e:18:47:28:72:
         6a:4d:cc:41:8b:cd:0b:d0:7e:5b:e0:1a:38:c1:60:e2:3b:90:
         f2:7b:7f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----