Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a353830303a3a2f34382d3438203d3e20323038333238.roa
File:                     326130363a313238373a353830303a3a2f34382d3438203d3e20323038333238.roa (raw, json)
Hash identifier:          IuMJTIlQJBikZixOmp27QPju/sS+SLcbljHpyHBEGds=
Subject key identifier:   7D:58:9F:18:FE:EE:39:25:FE:9C:9D:3B:BA:2D:24:45:0F:55:81:7C
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6CE6F44DFC418CEF91DB5B364258A7B33752260B
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a353830303a3a2f34382d3438203d3e20323038333238.roa
Signing time:             Sun 25 Jun 2023 19:21:07 +0000
ROA not before:           Sun 25 Jun 2023 19:16:07 +0000
ROA not after:            Sun 23 Jun 2024 19:21:07 +0000
asID:                     208328
IP address blocks:        2a06:1287:5800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e6:f4:4d:fc:41:8c:ef:91:db:5b:36:42:58:a7:b3:37:52:26:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 25 19:16:07 2023 GMT
            Not After : Jun 23 19:21:07 2024 GMT
        Subject: CN=7D589F18FEEE3925FE9C9D3BBA2D24450F55817C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:0d:ee:a0:d9:b1:76:d5:b1:be:d3:2e:5f:
                    7f:42:bd:d9:eb:86:4f:82:a8:32:89:39:68:5f:3e:
                    d5:80:a8:10:c5:df:b4:f7:a7:f8:8d:67:96:ea:8a:
                    7b:ff:80:65:1e:0f:7d:c1:12:ed:97:26:dd:e5:28:
                    67:61:3e:3b:5b:e3:26:00:c9:0c:92:76:cf:0e:1b:
                    32:52:88:dc:a9:48:b7:49:21:0f:2f:ae:0f:48:69:
                    57:6c:2a:28:71:a7:34:22:29:18:ed:e0:13:00:02:
                    6f:fe:61:3f:ed:21:4a:87:f9:7a:16:43:bf:18:d2:
                    c4:65:60:c1:d6:0a:9a:af:69:ce:f6:de:43:09:1d:
                    19:3a:5f:eb:98:ec:ee:87:71:ac:a4:bb:21:08:31:
                    37:17:66:ea:12:6a:bb:43:3b:10:d9:28:c9:52:73:
                    ce:b6:d4:1f:12:fd:fa:d5:7c:dd:5f:6e:c3:5c:31:
                    8a:0f:3a:da:53:e4:3c:e1:0a:2c:d5:c0:25:c0:2d:
                    15:66:28:26:28:8b:1e:08:c0:82:d3:d6:06:52:4a:
                    cc:5a:91:44:95:06:67:62:6d:28:f2:2f:5d:80:c4:
                    97:01:69:b1:d7:22:90:c2:e6:c0:37:8d:19:ce:4c:
                    03:8c:bc:7f:33:a9:4e:2f:3e:15:0e:c5:6e:19:64:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:9F:18:FE:EE:39:25:FE:9C:9D:3B:BA:2D:24:45:0F:55:81:7C
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a353830303a3a2f34382d3438203d3e20323038333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:d0:01:23:31:84:41:2d:d0:aa:a7:31:00:4a:cd:e8:4b:b7:
         01:29:ba:b7:ed:91:b2:9d:46:3a:dd:e3:f8:f3:03:99:00:13:
         56:ac:0e:f3:ab:62:62:35:93:09:62:4c:a8:e7:8b:08:3f:1f:
         de:2a:ee:c8:10:99:0e:77:5c:81:bf:80:60:7c:7c:37:2e:24:
         2d:84:44:b2:47:de:7f:68:0e:30:64:49:f0:e9:25:a9:09:d9:
         60:ff:08:e8:f9:e0:5e:91:ec:9a:b2:3d:ba:ad:81:bc:26:05:
         c5:f0:82:e1:49:89:9e:1c:af:53:d1:9d:54:23:f1:7c:79:6a:
         76:42:93:e6:f6:6b:a8:e3:1b:f4:d5:99:ab:92:d9:51:6a:15:
         2a:30:2d:f5:ca:a1:34:fc:74:96:07:38:ea:ef:4e:fb:a6:ed:
         de:e0:1b:c2:0a:ed:07:46:74:b1:2e:58:9a:e9:e5:bd:b4:4e:
         c4:a4:1d:73:d0:f9:fb:35:a5:b0:7e:b6:86:59:a4:90:8b:81:
         09:75:5d:80:2e:6a:55:d7:8e:8f:f2:1d:e5:2b:65:d7:9c:32:
         b1:09:d8:32:88:8b:89:dc:0d:08:87:36:f0:b7:a6:9c:b4:94:
         89:47:be:97:a2:11:fc:e3:51:1e:d5:3d:14:de:57:68:f4:d5:
         a2:80:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----