Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa
File:                     323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa (raw, json)
Hash identifier:          hml9vonbqgWQ9lI+YYyTMIT2ndFjawUw6OnIK8YxMdA=
Subject key identifier:   92:B8:38:F8:05:13:C7:79:C5:44:BC:1F:99:90:89:24:AB:3F:81:92
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       5128F309EADA17531AF203012BBE22D13FA45A65
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa
Signing time:             Sat 08 Apr 2023 03:25:57 +0000
ROA not before:           Sat 08 Apr 2023 03:20:57 +0000
ROA not after:            Sat 06 Apr 2024 03:25:57 +0000
asID:                     57401
IP address blocks:        2602:fc23:110::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:28:f3:09:ea:da:17:53:1a:f2:03:01:2b:be:22:d1:3f:a4:5a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:57 2023 GMT
            Not After : Apr  6 03:25:57 2024 GMT
        Subject: CN=92B838F80513C779C544BC1F99908924AB3F8192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:b7:ec:1b:c9:54:11:ff:d0:42:74:1c:f3:
                    82:87:2a:3f:d6:27:1c:46:6a:b5:8c:a4:05:8d:5d:
                    53:4f:07:52:7f:c8:8c:7a:2f:97:de:bd:1e:ce:53:
                    a3:2a:4d:7a:c6:e1:e6:62:c3:98:95:a9:44:39:dd:
                    27:6b:6e:98:bc:c8:44:ad:13:b0:91:ec:38:26:44:
                    6d:c8:a6:68:1b:6f:a1:e4:01:a0:a0:1c:d5:3e:6b:
                    9f:3d:1e:7e:d4:e3:92:69:64:fb:51:0d:70:2a:86:
                    74:45:17:a4:2a:1f:36:d7:ba:1c:26:90:40:0b:00:
                    ac:48:6b:78:12:8c:15:b8:9a:34:01:fe:f9:47:8d:
                    3b:4a:cc:71:63:12:12:76:17:eb:f9:39:d4:8a:84:
                    ff:f3:42:d9:97:c3:38:89:04:b2:a4:d5:e7:90:10:
                    1d:ba:7a:a4:b2:18:7c:0b:47:0f:82:2b:3b:43:b2:
                    68:02:69:7a:9a:60:f9:72:8f:cc:32:14:d9:21:b2:
                    01:77:48:65:17:51:5a:f2:5e:68:71:b6:f6:d1:83:
                    2f:1e:94:62:fb:bc:a0:c6:18:ed:80:e8:59:74:1c:
                    cc:9d:75:c9:db:8e:75:d7:3c:44:b9:78:ff:87:10:
                    ad:a8:b2:5f:ff:fe:0d:be:b5:b9:5d:39:48:8b:ef:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B8:38:F8:05:13:C7:79:C5:44:BC:1F:99:90:89:24:AB:3F:81:92
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131303a3a2f34382d3438203d3e203537343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:58:4d:40:53:15:43:e6:39:3b:8e:89:53:fa:b0:76:9f:ea:
         41:6a:6b:6d:fb:41:9c:d7:cf:c9:01:f7:c1:f3:64:3d:bf:7f:
         a8:bd:a4:e3:c0:a4:4a:26:1c:f1:01:ea:c3:2f:4c:08:e4:00:
         d8:5e:3e:47:2a:f1:fb:3b:d5:d5:fa:ab:f9:81:c3:2f:13:98:
         a9:5c:ea:cd:86:cc:ba:53:3f:d3:d4:b6:b0:5e:2d:f0:65:c3:
         69:00:a9:4f:e9:c9:2f:bd:68:3e:73:f1:87:2c:37:99:0e:35:
         4c:b7:0c:4a:cb:02:3c:3e:0c:6e:4d:87:f1:9a:35:9b:9f:50:
         f4:be:4b:5d:7f:00:f3:90:18:ac:d8:b1:b2:bc:19:31:ce:6e:
         77:02:f3:84:1c:cd:4a:64:45:9d:f4:49:df:5c:e7:df:fd:9e:
         2d:72:81:40:3e:c6:45:fa:82:f1:c2:f4:ea:bd:75:d8:f7:6c:
         16:01:6a:bb:90:91:d8:94:22:9d:76:13:31:18:0a:5e:e7:a3:
         c0:11:09:5f:c2:e9:ac:03:3b:b6:f4:b3:cb:62:7e:48:1b:cd:
         d2:66:71:c1:a3:98:50:b2:6f:5b:97:d9:b4:b2:44:98:f2:c4:
         6e:97:e9:61:2f:bd:a6:a5:21:3c:69:7b:e1:fd:96:03:cc:83:
         fd:f3:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----