Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/sky/1/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          drcUMy6ZhMdI2KA0EERUztN6UxhXnn/3DT6i4duXZqc=
Subject key identifier:   0C:BF:24:C0:23:AE:55:75:09:D3:33:22:36:96:19:52:E0:E5:4E:5F
Certificate issuer:       /CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
Certificate serial:       5B7B863B1D312888CF475DF8FF3436E69822EDAF
Authority key identifier: 0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer
Subject info access:      rsync://rpki.co/repo/sky/1/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Mon 04 Dec 2023 19:55:15 +0000
ROA not before:           Mon 04 Dec 2023 19:50:15 +0000
ROA not after:            Mon 02 Dec 2024 19:55:15 +0000
asID:                     10103
IP address blocks:        2607:74c0:140::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7b:86:3b:1d:31:28:88:cf:47:5d:f8:ff:34:36:e6:98:22:ed:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea
        Validity
            Not Before: Dec  4 19:50:15 2023 GMT
            Not After : Dec  2 19:55:15 2024 GMT
        Subject: CN=0CBF24C023AE557509D3332236961952E0E54E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8b:4a:72:23:43:08:64:bc:92:6d:5e:4d:39:
                    53:e4:61:aa:90:0a:4d:30:d6:f1:32:ea:3c:b4:ce:
                    78:ec:c9:33:ad:9b:b1:e6:4a:37:ab:d2:4e:68:da:
                    8a:8e:d5:f6:02:ff:02:8a:bf:84:a0:b4:db:ed:6c:
                    ef:4d:d9:f5:5b:9a:56:1d:19:05:79:e6:9d:1c:20:
                    c2:e4:23:11:69:01:65:c8:29:06:fd:53:84:44:17:
                    68:7e:dc:d7:6b:e8:30:a1:c5:2f:0f:c5:a9:26:52:
                    13:bc:6b:1d:2f:ac:5b:29:b1:9f:d2:1b:2a:06:68:
                    9f:c4:c4:42:7c:f1:ee:72:c8:33:df:ee:ba:ca:2c:
                    35:c7:5f:c2:c7:89:2d:e1:52:29:6f:7b:46:57:17:
                    49:c5:28:e9:32:ec:7e:96:7f:e5:1c:e8:ad:49:05:
                    50:f6:63:98:78:b8:cd:16:34:76:75:dd:dc:64:71:
                    e3:42:e2:9e:63:61:c4:94:36:14:46:bc:f2:8f:af:
                    f4:46:29:22:d3:a0:b2:55:26:33:ae:88:55:0f:0f:
                    45:ef:10:34:d3:dc:5f:f5:02:33:dd:75:e4:01:ed:
                    02:36:60:cf:e3:f1:16:28:72:a6:98:d4:e5:4d:9f:
                    4a:93:ae:2a:1e:12:d7:76:4f:f9:9b:c2:c4:4b:66:
                    6a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:24:C0:23:AE:55:75:09:D3:33:22:36:96:19:52:E0:E5:4E:5F
            X509v3 Authority Key Identifier:
                keyid:0B:A0:92:A2:49:85:35:46:64:8D:F8:B6:E3:1C:B8:7E:01:61:49:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/sky/1/0BA092A249853546648DF8B6E31CB87E0161491F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c0c632adee05c433c5b37931fb862a3241b8ea4fea.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/sky/1/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:140::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:60:2f:56:01:e5:5e:68:29:3b:37:f6:9f:f0:a9:13:64:f1:
         b2:eb:f3:79:e3:c4:83:d8:29:62:f4:80:55:da:88:27:de:00:
         31:85:0a:35:7a:8c:97:e3:bd:f7:a2:0f:7a:15:f1:7e:0c:5e:
         dd:17:0b:43:28:16:f5:e6:b9:51:a6:45:78:0a:b9:30:bf:06:
         e0:27:42:51:c3:18:66:23:96:0d:0b:3b:52:1e:e7:04:b7:2b:
         ea:e8:24:ba:82:d8:c4:cd:e4:9e:03:aa:08:12:37:ba:02:d7:
         23:b8:8c:1c:1e:07:7d:52:cf:a6:86:0b:88:63:22:bf:1b:66:
         da:5f:1c:e2:07:dc:b6:a0:47:ac:58:c3:73:97:c5:34:31:5e:
         69:77:6b:b4:7f:cd:ea:fe:02:33:f2:9c:8d:79:cf:fd:66:bf:
         d6:f5:14:2d:05:8c:f8:4a:69:60:4d:37:80:e7:b8:fe:84:18:
         87:ae:9f:59:88:00:e3:77:9c:45:13:b1:42:66:5a:7e:fb:1e:
         c5:e9:95:2d:e1:f7:c5:26:e3:d7:54:30:7c:9f:d5:8c:34:ba:
         2f:ca:0f:e7:d0:c1:1d:7d:ef:8e:ec:72:8d:1c:b1:9f:5b:7c:
         00:16:8b:82:4c:d2:c0:4a:ab:6d:1b:2d:f8:03:2c:54:bc:79:
         e6:dd:df:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----