Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS205432/0/326130363a313238373a653230303a3a2f33392d3438203d3e20313938393233.roa
File:                     326130363a313238373a653230303a3a2f33392d3438203d3e20313938393233.roa (raw, json)
Hash identifier:          L4tYLBxp4MnVcg6SXDPOuQjeOE4n+tBS9VYPVVPwCZk=
Subject key identifier:   13:62:07:59:5B:3E:63:14:B5:94:59:B8:EE:07:1B:E8:A6:C0:AD:8F
Certificate issuer:       /CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
Certificate serial:       6FC863C6C729F34DDC32D001A23ED8AC7681B4F9
Authority key identifier: C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer
Subject info access:      rsync://rpki.co/repo/AS205432/0/326130363a313238373a653230303a3a2f33392d3438203d3e20313938393233.roa
Signing time:             Fri 23 Jun 2023 15:57:30 +0000
ROA not before:           Fri 23 Jun 2023 15:52:30 +0000
ROA not after:            Fri 21 Jun 2024 15:57:30 +0000
asID:                     198923
IP address blocks:        2a06:1287:e200::/39 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:63:c6:c7:29:f3:4d:dc:32:d0:01:a2:3e:d8:ac:76:81:b4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C478BDE60E1B92F9755040D6C67C9CFB64C7D355
        Validity
            Not Before: Jun 23 15:52:30 2023 GMT
            Not After : Jun 21 15:57:30 2024 GMT
        Subject: CN=136207595B3E6314B59459B8EE071BE8A6C0AD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:31:0c:e8:15:a6:12:ad:f3:6f:9b:a9:37:25:
                    dd:42:d3:5b:52:6d:bc:e7:8d:8a:c7:23:90:43:f5:
                    83:04:44:33:06:3e:87:a6:e8:f7:91:6e:cd:88:e4:
                    f2:82:a7:f8:f8:d6:c0:e6:aa:d2:1b:63:92:1a:a3:
                    93:fe:8d:87:17:d2:a4:7f:09:44:fa:69:6d:ba:69:
                    86:89:59:f3:41:9d:3e:cb:b5:c3:35:88:30:13:2b:
                    ae:c0:75:ee:78:88:a2:e8:19:1f:a9:43:27:ed:93:
                    ba:2a:2f:fa:db:57:ed:56:fc:9b:6b:d2:3d:5c:ee:
                    0d:ea:40:5d:5e:f6:f9:6d:47:ba:19:4d:41:b0:c1:
                    00:8b:56:df:44:1c:0c:53:56:b5:18:2b:fb:b3:20:
                    44:f5:86:67:0a:1c:8e:96:e0:f8:c1:7c:01:1f:1e:
                    42:2e:d6:c2:84:78:d4:f9:d8:c8:aa:5a:3b:e8:4f:
                    e7:93:9e:15:d9:84:a4:ec:9c:4c:ea:04:e7:57:4d:
                    bf:f7:69:bd:b3:08:87:f5:0b:36:51:38:09:b4:a4:
                    d6:64:c3:04:0a:b7:84:9d:22:c2:ab:4f:d2:bc:ef:
                    f0:9a:fd:29:6c:c8:6b:75:b3:00:4d:36:95:5e:de:
                    a9:99:8c:04:92:e2:92:1a:13:49:ce:35:ec:4d:f6:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:62:07:59:5B:3E:63:14:B5:94:59:B8:EE:07:1B:E8:A6:C0:AD:8F
            X509v3 Authority Key Identifier:
                keyid:C4:78:BD:E6:0E:1B:92:F9:75:50:40:D6:C6:7C:9C:FB:64:C7:D3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS205432/0/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C478BDE60E1B92F9755040D6C67C9CFB64C7D355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS205432/0/326130363a313238373a653230303a3a2f33392d3438203d3e20313938393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:e200::/39

    Signature Algorithm: sha256WithRSAEncryption
         43:87:5a:6c:a5:f0:f8:be:94:9e:43:24:66:01:6b:ed:b3:5b:
         ad:44:cc:aa:22:c5:a3:cd:bd:1b:ff:9a:d8:80:71:57:0e:19:
         d9:e5:fc:e1:71:4f:4a:f7:e1:bb:b1:66:83:03:b6:0b:41:56:
         3e:b3:f5:70:36:75:db:42:a2:03:92:f9:17:c6:1f:9f:0b:c3:
         83:4d:42:c6:d6:91:50:c5:f8:41:67:d9:7f:5e:b5:b7:29:57:
         a5:89:74:f9:61:1c:9e:2b:89:bb:77:a6:89:72:fe:65:a8:99:
         38:71:72:71:88:6f:51:f1:ba:70:f1:68:04:2a:2e:0d:4b:dc:
         17:ef:5e:7e:18:e8:b3:9d:43:6a:b3:86:54:30:45:37:7b:9e:
         47:fb:f7:7c:28:af:8a:10:ef:10:b9:8a:22:05:37:c4:dd:8b:
         64:b0:1c:c6:3a:a1:6b:b8:32:cb:2d:77:b4:81:df:3e:fe:fa:
         8d:64:2e:a8:67:aa:cd:bc:65:4b:cd:fe:49:e2:5a:87:55:21:
         0f:7f:33:3a:a0:92:65:9f:30:7e:dc:7e:af:bf:4e:07:ef:03:
         c4:45:b1:31:40:cd:16:44:31:96:d7:3f:c2:02:8d:90:b9:ba:
         cf:ae:76:75:5a:db:6f:8d:a7:64:b2:55:15:1f:4f:15:91:a5:
         ad:db:75:c4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUb8hjxscp803cMtABoj7YrHaBtPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2
NEM3RDM1NTAeFw0yMzA2MjMxNTUyMzBaFw0yNDA2MjExNTU3MzBaMDMxMTAvBgNV
BAMTKDEzNjIwNzU5NUIzRTYzMTRCNTk0NTlCOEVFMDcxQkU4QTZDMEFEOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfMQzoFaYSrfNvm6k3Jd1C01tS
bbznjYrHI5BD9YMERDMGPoem6PeRbs2I5PKCp/j41sDmqtIbY5Iao5P+jYcX0qR/
CUT6aW26aYaJWfNBnT7LtcM1iDATK67Ade54iKLoGR+pQyftk7oqL/rbV+1W/Jtr
0j1c7g3qQF1e9vltR7oZTUGwwQCLVt9EHAxTVrUYK/uzIET1hmcKHI6W4PjBfAEf
HkIu1sKEeNT52MiqWjvoT+eTnhXZhKTsnEzqBOdXTb/3ab2zCIf1CzZROAm0pNZk
wwQKt4SdIsKrT9K87/Ca/SlsyGt1swBNNpVe3qmZjASS4pIaE0nONexN9mt1AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUE2IHWVs+YxS1lFm47gcb6KbArY8wHwYDVR0j
BBgwFoAUxHi95g4bkvl1UEDWxnyc+2TH01UwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjA1NDMyLzAvQzQ3
OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jcmwwgZMGCCsG
AQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlk
LzIvQzQ3OEJERTYwRTFCOTJGOTc1NTA0MEQ2QzY3QzlDRkI2NEM3RDM1NS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLmNvL3Jl
cG8vQVMyMDU0MzIvMC8zMjYxMzAzNjNhMzEzMjM4MzczYTY1MzIzMDMwM2EzYTJm
MzMzOTJkMzQzODIwM2QzZTIwMzEzOTM4MzkzMjMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKgYSh+Iw
DQYJKoZIhvcNAQELBQADggEBAEOHWmyl8Pi+lJ5DJGYBa+2zW61EzKoixaPNvRv/
mtiAcVcOGdnl/OFxT0r34buxZoMDtgtBVj6z9XA2ddtCogOS+RfGH58Lw4NNQsbW
kVDF+EFn2X9etbcpV6WJdPlhHJ4ribt3poly/mWomThxcnGIb1HxunDxaAQqLg1L
3BfvXn4Y6LOdQ2qzhlQwRTd7nkf793wor4oQ7xC5iiIFN8Tdi2SwHMY6oWu4Msst
d7SB3z7++o1kLqhnqs28ZUvN/kniWodVIQ9/MzqgkmWfMH7cfq+/TgfvA8RFsTFA
zRZEMZbXP8ICjZC5us+udnVa22+Np2SyVRUfTxWRpa3bdcQ=
-----END CERTIFICATE-----