Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a336430333a3a2f34382d3438203d3e20323136343732.roa
File:                     326131323a646434373a336430333a3a2f34382d3438203d3e20323136343732.roa (raw, json)
Hash identifier:          Q/th3wl1Ympo+NJgLOY9d1DJTBxWOZf6ehAnf0oxDbE=
Subject key identifier:   1A:E2:7B:B4:FB:8C:EC:EB:C9:0D:14:DD:5E:94:E6:0A:B7:72:4A:61
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       4F4C00C3440A02F448015906D924546C86A7CF09
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430333a3a2f34382d3438203d3e20323136343732.roa
Signing time:             Mon 22 Jul 2024 23:21:14 +0000
ROA not before:           Mon 22 Jul 2024 23:16:14 +0000
ROA not after:            Mon 21 Jul 2025 23:21:14 +0000
asID:                     216472
IP address blocks:        2a12:dd47:3d03::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4c:00:c3:44:0a:02:f4:48:01:59:06:d9:24:54:6c:86:a7:cf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Jul 22 23:16:14 2024 GMT
            Not After : Jul 21 23:21:14 2025 GMT
        Subject: CN=1AE27BB4FB8CECEBC90D14DD5E94E60AB7724A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8d:60:4f:3e:6b:87:a8:8a:64:4d:a3:56:dc:
                    04:b8:22:c8:bf:49:28:31:d2:5d:a5:cf:47:b9:83:
                    e2:a1:36:2e:ba:58:11:d4:88:8f:67:d5:6b:80:6b:
                    41:92:f1:66:3a:d3:ba:bb:b2:05:89:86:ff:87:92:
                    5e:95:00:e6:47:79:80:49:9d:77:bb:67:fe:88:8f:
                    10:f8:f1:43:73:9a:0e:44:ba:5a:cb:d0:78:8a:f2:
                    96:fe:1a:c9:78:5e:fd:01:c7:ea:4d:38:73:27:4f:
                    2c:98:b1:67:ac:70:9e:9d:e9:35:ec:a6:e5:7c:82:
                    07:f1:ec:51:ea:fc:1d:37:c3:aa:d0:b1:ca:f5:18:
                    34:98:a4:ee:fe:c7:e8:ab:ae:cf:df:68:78:a5:f2:
                    3d:15:ee:b6:74:d9:d1:af:f1:5f:bd:40:bd:6d:5f:
                    bc:48:96:e8:92:2d:5c:36:01:5e:20:82:86:f2:b6:
                    17:1f:68:95:d9:b2:b3:b8:f7:69:e7:3c:7e:28:b5:
                    ed:01:48:c2:b3:1a:63:fe:c5:3e:9e:8a:8d:2e:92:
                    41:24:60:fd:45:8c:77:55:54:0f:08:75:3e:cf:55:
                    3f:e1:59:80:9f:a6:fe:b5:12:01:1b:7d:f7:40:72:
                    94:4f:48:cc:b6:fa:e6:1d:a7:94:27:5a:83:b7:a6:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E2:7B:B4:FB:8C:EC:EB:C9:0D:14:DD:5E:94:E6:0A:B7:72:4A:61
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a336430333a3a2f34382d3438203d3e20323136343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3d03::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:f1:14:19:7c:94:4a:56:43:20:a9:31:1b:2e:84:eb:50:2a:
         46:5d:1b:97:38:98:c8:dc:8c:f0:05:14:5a:10:0e:37:de:83:
         10:f0:2a:8e:f8:2c:2d:0d:fe:e0:90:37:57:c4:1d:9e:01:f8:
         5f:2b:63:da:54:68:51:b3:ee:fe:a7:92:44:29:b3:c3:a3:37:
         aa:f0:95:e0:cf:4e:0c:c6:47:eb:2f:86:f7:ea:34:c4:e0:e2:
         9c:92:67:df:92:8c:f2:29:5d:25:7d:b9:fd:b5:aa:45:61:a3:
         96:1d:4e:c5:ca:26:6a:fc:48:19:3b:02:1e:2a:4d:66:2d:41:
         45:43:d9:88:4b:23:79:19:75:f7:10:d0:03:ae:9d:9b:c8:aa:
         51:ea:82:22:5c:2f:7d:2a:74:03:d3:ab:c9:81:7c:96:9a:64:
         de:4e:79:30:4c:40:25:9e:db:eb:66:20:fb:bf:01:be:5b:ae:
         fe:16:14:9e:5f:91:a6:60:6b:30:a2:c3:02:a7:92:81:a0:07:
         9c:03:dc:4e:84:b0:a3:f3:5a:56:e7:d6:e5:c1:29:46:24:24:
         19:d8:e2:32:8e:04:1f:ce:d0:2c:4b:f9:b1:3b:c8:7a:5d:8f:
         d5:90:f1:2d:0f:56:58:22:53:29:44:8c:19:db:b7:4a:d3:b2:
         8c:5d:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----