Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130353a646663373a626130303a3a2f33392d3438203d3e20313938393233.roa
File:                     326130353a646663373a626130303a3a2f33392d3438203d3e20313938393233.roa (raw, json)
Hash identifier:          hmD54/xeFTvU6GArYYtg2emnBfaaBJzRqI8PjslP7SI=
Subject key identifier:   5B:AA:DF:35:1F:05:99:4F:39:A4:B5:88:40:A5:37:85:DC:21:58:F7
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       0F77C49C3F880E1B67DD2BAF0DABD56B3E83F23F
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130353a646663373a626130303a3a2f33392d3438203d3e20313938393233.roa
Signing time:             Fri 23 Jun 2023 15:54:31 +0000
ROA not before:           Fri 23 Jun 2023 15:49:31 +0000
ROA not after:            Fri 21 Jun 2024 15:54:31 +0000
asID:                     198923
IP address blocks:        2a05:dfc7:ba00::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:77:c4:9c:3f:88:0e:1b:67:dd:2b:af:0d:ab:d5:6b:3e:83:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 23 15:49:31 2023 GMT
            Not After : Jun 21 15:54:31 2024 GMT
        Subject: CN=5BAADF351F05994F39A4B58840A53785DC2158F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:06:13:4d:a5:09:d1:5c:c7:1f:36:3e:16:
                    d6:72:59:7b:97:6d:23:cf:53:8c:c1:7b:81:66:9f:
                    1d:6b:e3:41:9a:7d:80:72:08:74:1b:4f:36:fe:7b:
                    df:0f:58:53:eb:ae:9f:27:d1:94:f3:8e:75:22:79:
                    6a:ea:a2:18:f9:45:fa:5e:cc:88:81:0e:a2:4c:1b:
                    11:0d:01:90:ca:6e:06:e3:bf:e9:08:5d:75:79:38:
                    99:bb:40:a2:0e:99:7a:1f:e5:a5:62:ed:d1:51:0e:
                    fb:68:a2:b5:3a:11:ef:58:cd:90:ea:93:fa:4d:1f:
                    c5:ae:bc:f5:a5:0b:60:34:8d:9a:7a:84:6e:8c:4e:
                    0a:3d:e6:d9:c8:f3:31:b3:23:9a:71:38:08:23:1c:
                    f1:33:a5:bc:7d:be:65:2e:c1:d2:99:84:5c:87:ed:
                    9e:47:d9:17:e7:24:cd:2f:51:1b:c7:f4:b5:8b:00:
                    b3:2d:6c:3c:e6:c7:e3:89:d8:65:0c:6b:19:25:b6:
                    ef:be:45:df:ca:2d:df:99:59:e3:e6:53:af:4e:72:
                    1d:07:2d:6d:6c:5d:9f:b3:5a:eb:9b:fe:43:91:58:
                    8a:09:db:11:98:80:60:35:34:e7:50:2e:0b:36:eb:
                    3c:a7:fe:87:d1:f8:6c:b8:d0:ed:2a:94:61:03:46:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:DF:35:1F:05:99:4F:39:A4:B5:88:40:A5:37:85:DC:21:58:F7
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130353a646663373a626130303a3a2f33392d3438203d3e20313938393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:ba00::/39

    Signature Algorithm: sha256WithRSAEncryption
         19:71:b5:77:6c:a4:f1:19:cc:25:36:2d:f3:20:28:bb:31:9e:
         03:77:2d:5e:98:27:79:03:fc:09:83:f4:7c:0d:da:2b:dc:6b:
         ba:b4:c2:0e:64:82:8f:b2:cf:49:1a:7e:5e:e1:e9:55:aa:95:
         a9:00:4c:83:f0:8f:d0:1b:7b:65:30:59:0f:d0:14:70:d8:f2:
         7a:c8:74:d4:db:f9:5d:61:4d:13:c6:c3:d7:38:9d:a3:82:b1:
         48:84:c6:ad:57:5c:a8:c2:92:10:d3:44:83:13:79:ce:d6:92:
         c4:86:f5:26:2e:78:68:71:ab:04:9f:ed:7e:84:da:9e:42:aa:
         c4:6d:a2:8d:8d:a5:d0:b6:e5:07:3d:97:a7:bd:a8:ae:55:09:
         df:a7:58:33:3d:c2:6b:02:79:dd:f1:3a:0a:ec:2b:f1:41:57:
         73:e9:2a:5c:2a:6a:51:ea:40:e0:60:6b:9c:86:fe:c9:a5:35:
         2d:9a:60:8b:88:2a:b4:00:af:ec:e5:e0:24:da:8f:58:f9:f8:
         79:99:3e:5b:db:1f:2a:86:37:b6:bb:d4:e2:9b:27:4e:39:fa:
         86:21:53:20:9a:0a:ba:55:ee:f8:89:02:52:6a:f2:54:66:d6:
         2a:f2:c4:f8:83:4b:a8:39:a8:69:30:e5:23:fc:b6:87:8f:57:
         76:fe:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----