Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
File:                     3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          l8wqEsnZu41H7QHEoNwMJbb54gsq/ur4ZMEasAkdDXE=
Subject key identifier:   38:A6:60:C8:55:AD:FD:28:7D:97:66:7F:4E:B6:43:79:CC:E5:11:B0
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       1A134670F3C32993A953BAFF9ACA0497EF2A5F63
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:25:56 +0000
ROA not before:           Sat 08 Apr 2023 03:20:56 +0000
ROA not after:            Sat 06 Apr 2024 03:25:56 +0000
asID:                     50058
IP address blocks:        165.140.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:13:46:70:f3:c3:29:93:a9:53:ba:ff:9a:ca:04:97:ef:2a:5f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:56 2023 GMT
            Not After : Apr  6 03:25:56 2024 GMT
        Subject: CN=38A660C855ADFD287D97667F4EB64379CCE511B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:43:c6:cb:97:1a:52:6d:aa:f6:1c:42:d3:
                    f0:81:45:a1:f6:d5:ba:c6:d8:00:3f:65:b6:31:9a:
                    26:62:a4:bf:95:f3:07:5a:bc:3a:3f:7c:22:8a:6f:
                    10:44:29:be:9f:58:cc:b8:0f:de:ea:c6:00:14:20:
                    77:eb:72:b7:b8:46:15:15:f2:b3:9b:f2:38:94:cb:
                    f3:f5:b9:b4:65:cb:47:98:20:4d:a7:9f:ff:ab:b8:
                    0b:85:a2:9d:49:b9:c4:21:44:54:f7:f7:89:37:cb:
                    fb:52:5a:2f:6c:36:c8:d3:7e:3e:6d:e1:8b:13:6e:
                    01:f7:c8:28:e5:73:19:c4:50:67:0a:0a:7f:b5:c1:
                    33:9f:29:47:e8:1c:7c:dc:ac:96:96:38:a7:94:4f:
                    4d:b8:5a:6d:6b:a6:a5:b7:74:68:85:a9:0d:7c:14:
                    c0:fd:55:6b:66:4c:c9:53:d7:08:e9:38:00:92:b0:
                    6e:cf:51:8c:45:c2:cd:c2:88:1b:31:a3:2f:3c:17:
                    7a:43:33:7c:26:fd:da:e6:a6:da:3a:41:8a:ef:96:
                    2b:01:32:97:c6:ed:8f:a1:d2:4c:ec:2a:c2:63:08:
                    ff:cc:68:9e:be:47:94:6a:c3:e9:4c:1e:1b:aa:97:
                    93:b4:64:9d:31:84:84:0b:20:64:1d:1a:7c:7f:3e:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A6:60:C8:55:AD:FD:28:7D:97:66:7F:4E:B6:43:79:CC:E5:11:B0
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:93:e8:dd:10:31:4a:22:69:2a:35:30:3a:46:a4:1f:10:
         17:a9:ae:dd:92:6b:ab:95:54:2b:48:79:4a:bc:83:ab:e7:6f:
         34:95:37:e2:bb:c4:40:ca:e9:a6:e7:63:5d:2f:3c:18:ae:fa:
         3f:52:07:4d:9a:eb:ca:ae:f3:2f:76:25:44:8d:22:fd:96:20:
         b2:fd:be:2a:c7:7f:1e:89:5b:49:5b:77:84:a1:6e:67:31:c7:
         9a:d4:9f:0b:3a:90:82:95:60:b3:a5:33:1a:9e:d0:35:34:9d:
         91:9d:7d:b5:b9:b0:fa:27:ab:32:f9:2a:92:29:a7:23:b8:74:
         0a:0c:c8:33:83:42:be:33:60:10:93:c2:0b:b5:97:81:8c:05:
         1d:88:45:ff:f5:3c:7b:88:03:21:49:68:91:03:6f:ae:55:3e:
         fc:a4:47:87:fd:ec:87:93:91:b4:e4:c0:92:1b:06:35:92:1f:
         19:95:63:f2:c1:3a:76:3e:2c:a8:54:38:94:bf:48:e8:a1:06:
         25:77:08:eb:2b:ef:55:51:26:9e:6b:d7:63:0f:1b:e8:04:ba:
         32:d8:dc:91:bf:69:ef:7c:54:c6:17:93:59:2e:9e:90:ce:16:
         51:53:c2:0a:ad:e5:c3:90:c4:69:b3:c7:89:97:bf:41:ee:89:
         41:02:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----