Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/AS64457.roa
File:                     AS64457.roa (raw, json)
Hash identifier:          3vTrht6IkgTBL1KwIhS/pdZzQQHr/dhYWuR2llBZKtw=
Subject key identifier:   AD:30:1F:34:17:F6:67:49:A8:A6:99:42:F0:73:79:E3:D2:6E:E3:B7
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0FA609CEF52ECBB9F76AFD8AD9297E59DFCABACB
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/AS64457.roa
Signing time:             Thu 06 Jul 2023 11:17:33 +0000
ROA not before:           Thu 06 Jul 2023 11:12:33 +0000
ROA not after:            Thu 04 Jul 2024 11:17:33 +0000
asID:                     64457
IP address blocks:        2a05:dfc7:5000::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a6:09:ce:f5:2e:cb:b9:f7:6a:fd:8a:d9:29:7e:59:df:ca:ba:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jul  6 11:12:33 2023 GMT
            Not After : Jul  4 11:17:33 2024 GMT
        Subject: CN=AD301F3417F66749A8A69942F07379E3D26EE3B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:87:f5:1c:fc:0c:67:8e:9e:a1:8d:4f:89:
                    13:0e:b8:00:af:da:0b:1a:01:f3:15:c4:c6:ef:6a:
                    00:0f:8e:5d:76:01:21:43:cd:2e:e8:a7:01:76:74:
                    c5:51:f8:ac:eb:42:64:17:f4:93:74:36:b0:fe:8b:
                    d9:39:0d:d2:6b:04:eb:d1:83:4c:34:82:93:ac:70:
                    42:3e:5c:5e:cc:6c:b6:96:8e:c2:ec:fb:af:a2:8f:
                    e7:d6:c3:0f:93:6e:a8:2a:f1:eb:bf:1d:d5:92:bc:
                    ee:52:96:4b:74:72:cb:a1:48:6f:58:a1:8d:f4:8e:
                    2a:89:c8:03:af:b1:a5:b3:72:a5:10:f1:89:25:3b:
                    9a:22:7d:f3:cd:74:d3:e5:a8:87:a5:b1:97:94:65:
                    ce:b7:30:7a:b9:a0:5f:9a:3b:79:cb:5f:55:e0:fa:
                    a7:95:2d:f6:04:d9:6f:4e:5e:73:4d:bb:07:90:d4:
                    80:67:cc:0b:dc:ce:fc:49:74:ee:6a:2a:0a:81:8c:
                    60:8e:93:c1:50:83:32:fa:6e:ca:4f:28:0b:ef:f0:
                    ba:c0:d6:b0:ad:57:65:20:e0:cb:3e:18:a6:ba:8e:
                    7c:38:5c:0b:6d:26:b4:22:ef:fd:39:a2:94:7d:9c:
                    ee:8e:fd:d6:05:19:e1:2e:a3:08:06:99:fa:64:29:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:30:1F:34:17:F6:67:49:A8:A6:99:42:F0:73:79:E3:D2:6E:E3:B7
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/AS64457.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:5000::/39

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:50:3c:3b:e0:76:55:93:4b:55:4e:58:12:42:d5:98:50:
         67:66:fa:f0:83:02:9e:5d:49:bc:15:3f:2c:92:8a:27:9d:77:
         3d:69:49:52:c3:fa:96:56:13:0d:ad:52:0b:72:0a:ac:2d:48:
         63:30:e7:cf:07:52:bf:4a:d8:df:a0:56:94:9b:45:9c:30:37:
         54:1e:3b:b9:a3:42:82:24:31:30:8f:53:d1:d5:20:12:78:ef:
         2b:e5:20:16:d4:9b:50:3f:ca:2e:1a:b3:80:3b:21:79:4c:a8:
         d3:93:f5:b2:dc:1b:d9:ce:27:e1:cf:a5:e7:21:a3:84:46:83:
         f0:b7:14:f6:83:1c:27:3f:2b:b1:e9:c1:87:e1:6b:dc:65:a7:
         96:77:bb:18:20:58:0b:d6:71:d1:db:21:71:c1:a9:28:dd:2b:
         01:32:4d:6e:a5:13:42:19:84:e8:8b:eb:f8:ef:e6:e3:a3:00:
         1c:fe:ec:9b:99:d0:12:32:3c:23:a8:c8:f9:68:9b:47:65:ca:
         5a:2e:e1:fa:c0:74:5a:3e:9b:7b:dc:2a:88:23:09:b7:e6:fc:
         06:8b:2a:b6:92:bb:02:77:d1:1b:f4:17:81:f6:90:c8:c6:6e:
         07:93:c4:09:db:03:8c:12:41:0f:16:7d:d7:e8:4e:d9:48:f4:
         c7:d0:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----