Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/3134392e3131322e32362e302f32342d3234203d3e203531393330.roa
File:                     3134392e3131322e32362e302f32342d3234203d3e203531393330.roa (raw, json)
Hash identifier:          SC8aVRI9obFpZn1W7cr8RK8zng1u329BzTDNYJdfqdY=
Subject key identifier:   87:52:21:D4:3B:C3:CB:7B:A6:13:1F:EF:A3:6B:35:14:D9:9C:B9:90
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       7E075C3A7AB902A6963FD454B1FC7CA9B16745ED
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/3134392e3131322e32362e302f32342d3234203d3e203531393330.roa
Signing time:             Sat 08 Apr 2023 03:25:58 +0000
ROA not before:           Sat 08 Apr 2023 03:20:58 +0000
ROA not after:            Sat 06 Apr 2024 03:25:58 +0000
asID:                     51930
IP address blocks:        149.112.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:07:5c:3a:7a:b9:02:a6:96:3f:d4:54:b1:fc:7c:a9:b1:67:45:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:58 2023 GMT
            Not After : Apr  6 03:25:58 2024 GMT
        Subject: CN=875221D43BC3CB7BA6131FEFA36B3514D99CB990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:a5:4a:44:4a:c2:62:97:fd:93:04:30:c2:
                    1b:32:c0:c9:e8:23:89:af:7f:62:2a:b9:1f:fb:1b:
                    b5:0f:29:e5:90:26:fd:2f:2c:a9:67:1f:7a:5a:96:
                    70:ea:00:f2:ae:2d:16:d1:73:f1:2a:0e:80:b9:10:
                    af:66:4c:77:fd:41:cb:d6:ae:ea:6d:46:86:15:36:
                    b5:e0:2e:11:71:63:a4:00:83:85:11:1e:b4:bf:44:
                    92:48:d6:64:cd:cd:8a:63:42:25:99:c6:e3:d0:a8:
                    e1:74:43:5b:a2:18:45:c5:dc:3f:b0:dd:d3:b1:c4:
                    fd:bc:c7:e6:af:55:a6:cc:66:f8:87:02:fa:29:ac:
                    a2:6f:0a:de:ba:d8:41:a6:07:18:0d:a7:65:60:26:
                    7d:15:85:d8:a1:a9:3f:4a:f7:41:17:66:15:41:e9:
                    bb:f2:9b:8c:c3:98:f3:00:12:2d:b2:bf:2e:7b:a9:
                    20:e6:d5:18:a5:19:ac:27:f8:ab:7d:8c:f9:1c:81:
                    0d:43:d4:c8:53:67:98:14:e9:48:11:25:fb:8b:a7:
                    07:97:55:fc:47:49:e7:02:74:09:df:ec:71:cc:2d:
                    5f:03:1f:8c:1c:01:c1:55:0e:19:1d:9d:59:25:76:
                    35:01:90:f3:41:01:21:08:23:24:4f:3c:8f:8d:3a:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:52:21:D4:3B:C3:CB:7B:A6:13:1F:EF:A3:6B:35:14:D9:9C:B9:90
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/3134392e3131322e32362e302f32342d3234203d3e203531393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b3:f9:dc:b8:eb:68:ae:2a:79:ab:42:24:8e:e9:43:e8:da:
         2a:1e:c6:0f:0a:21:32:3b:0d:4d:cd:4c:ea:c8:43:24:33:29:
         b6:bf:b1:0b:88:81:00:dc:05:88:cb:2a:62:34:c5:29:8c:4e:
         e4:8c:e2:de:8b:c0:04:e8:0e:61:77:a0:0d:b5:7b:f0:f5:f8:
         61:37:4a:e7:6f:6f:90:e5:0e:cd:12:16:d1:24:95:eb:1a:f2:
         67:d1:ee:88:0b:12:5d:7e:ac:e1:86:44:86:2f:0d:32:0f:29:
         9b:4c:73:df:66:f6:94:9b:b5:38:9c:d7:ef:8c:be:a8:41:3a:
         4e:ca:3c:ee:9a:eb:62:c0:81:91:f3:7f:71:e0:89:73:c8:73:
         2d:36:0e:b4:8a:45:68:ff:19:98:ef:45:12:95:14:a4:a6:1c:
         76:3c:cd:34:59:ee:9b:42:76:50:e2:7b:d4:94:86:82:1f:0b:
         84:24:61:af:f2:31:50:e0:6e:08:38:5f:da:c6:9b:0a:df:59:
         9d:2c:9a:5c:ff:8e:d1:37:0a:43:23:3f:07:e2:00:a6:ae:b4:
         6e:d6:f4:75:8a:87:20:52:83:fc:02:20:e4:5c:4b:88:f8:ac:
         3f:19:f3:a9:bf:fc:15:b6:30:e2:7c:56:e3:6d:6b:cf:18:8c:
         52:30:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----