Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
File:                     323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa (raw, json)
Hash identifier:          dKfyeiVPB9zLp9wPTd/UduyLwdbNJbmGOathSGAnuHE=
Subject key identifier:   14:D6:2E:44:58:1F:4D:1B:22:13:88:50:50:C3:E7:39:FF:A7:96:F1
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       647D483D45061BFAC79824271980592C13F9139C
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa
Signing time:             Sat 08 Apr 2023 03:25:55 +0000
ROA not before:           Sat 08 Apr 2023 03:20:55 +0000
ROA not after:            Sat 06 Apr 2024 03:25:55 +0000
asID:                     57429
IP address blocks:        2602:fc23:111::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7d:48:3d:45:06:1b:fa:c7:98:24:27:19:80:59:2c:13:f9:13:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:55 2023 GMT
            Not After : Apr  6 03:25:55 2024 GMT
        Subject: CN=14D62E44581F4D1B2213885050C3E739FFA796F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:40:9c:d6:65:28:61:ec:83:85:af:3d:69:
                    d7:98:a2:4a:49:ec:90:f6:81:a7:8c:9a:51:6c:8b:
                    0b:c8:a7:78:fd:df:f8:ef:4a:b9:46:c9:0d:c4:2b:
                    e1:a6:51:5f:38:ad:b1:67:5a:39:c7:90:7e:47:ea:
                    c2:31:d4:89:4a:8e:1a:44:48:32:1c:7e:08:ba:70:
                    c0:3a:2b:4a:a0:d0:51:63:d4:60:e4:3c:a8:9b:58:
                    73:5d:2f:18:da:e2:d1:1d:d0:af:64:82:2b:0d:21:
                    d1:18:b3:5d:99:1f:e8:2c:ec:60:f8:0d:b0:a4:50:
                    c3:6a:d0:6a:30:61:db:8f:d2:ff:16:3f:aa:8a:28:
                    a9:37:bf:2a:d4:83:09:46:9d:84:06:6b:bf:7f:73:
                    14:4f:b7:dd:33:52:27:88:91:53:6f:00:0b:d1:5f:
                    6f:97:eb:6c:51:a8:56:15:4c:f5:08:e0:3d:3c:37:
                    e6:9d:90:6c:33:5f:a2:8c:ff:0e:93:53:ea:0d:41:
                    37:48:18:51:a1:b6:d7:c1:cb:3d:93:88:65:f0:61:
                    3d:f8:a9:9c:5f:f2:84:12:f0:4f:6f:9b:0b:65:d2:
                    cb:15:d9:dc:d1:43:19:b4:ed:b8:9f:31:ab:31:c7:
                    05:0d:4f:ec:76:bd:02:18:23:3a:e6:6a:34:4c:66:
                    d1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D6:2E:44:58:1F:4D:1B:22:13:88:50:50:C3:E7:39:FF:A7:96:F1
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131313a3a2f34382d3438203d3e203537343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:cc:58:2e:28:b9:52:ac:d1:70:a9:5e:e4:a6:a7:9f:65:87:
         1a:2c:38:8d:7b:11:d2:02:b5:e2:09:38:85:ca:d8:f4:a8:2e:
         e4:ee:9b:81:71:3d:ae:5e:83:ec:aa:62:60:88:20:80:ab:96:
         fa:07:18:34:46:03:cd:f2:f8:b9:53:39:c0:db:e7:a1:a4:39:
         78:b6:6a:db:b2:b2:4d:68:ea:d5:8a:92:66:42:63:04:46:62:
         a7:af:27:d0:65:15:14:1b:56:f0:56:8d:ab:76:bc:eb:55:2e:
         07:cc:bf:60:08:33:bd:a6:f1:eb:5b:38:08:21:63:28:b9:dd:
         0c:af:44:42:7e:4a:4a:aa:b0:6c:ac:bd:c9:a6:bf:10:7e:12:
         ae:66:29:dc:70:20:58:2d:46:4d:31:29:d9:e3:93:92:05:53:
         65:15:ba:bb:ad:fa:d1:af:76:f9:08:8c:5c:74:94:c8:c7:de:
         ef:79:02:4f:48:ae:7e:14:3f:f0:8d:bc:5d:cd:ff:31:17:7f:
         c7:16:8e:aa:1b:3e:96:b7:6e:7e:f0:64:60:c0:fa:ba:7b:63:
         cd:c0:91:c4:01:e1:a0:b4:2d:70:43:c0:ce:9c:54:4c:a9:9a:
         77:cf:54:5c:6e:b5:77:1e:88:ad:80:70:ee:97:75:ae:29:71:
         76:ef:6a:28
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUZH1IPUUGG/rHmCQnGYBZLBP5E5wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmN2FhNmFmNDgyY2Y3NDk0MWU2NzBl
ZDY2ZDRkYWQ1NTJkNjEwMjkwHhcNMjMwNDA4MDMyMDU1WhcNMjQwNDA2MDMyNTU1
WjAzMTEwLwYDVQQDEygxNEQ2MkU0NDU4MUY0RDFCMjIxMzg4NTA1MEMzRTczOUZG
QTc5NkYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2FAnNZlKGHs
g4WvPWnXmKJKSeyQ9oGnjJpRbIsLyKd4/d/470q5RskNxCvhplFfOK2xZ1o5x5B+
R+rCMdSJSo4aREgyHH4IunDAOitKoNBRY9Rg5Dyom1hzXS8Y2uLRHdCvZIIrDSHR
GLNdmR/oLOxg+A2wpFDDatBqMGHbj9L/Fj+qiiipN78q1IMJRp2EBmu/f3MUT7fd
M1IniJFTbwAL0V9vl+tsUahWFUz1COA9PDfmnZBsM1+ijP8Ok1PqDUE3SBhRobbX
wcs9k4hl8GE9+KmcX/KEEvBPb5sLZdLLFdnc0UMZtO24nzGrMccFDU/sdr0CGCM6
5mo0TGbRGQIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFBTWLkRYH00bIhOIUFDD5zn/
p5bxMB8GA1UdIwQYMBaAFAZhgSak8hB0XKvnPu1EWhB3sxn/MA4GA1UdDwEB/wQE
AwIHgDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kuY28vcmVwby9IWVNQ
LzAvMDY2MTgxMjZBNEYyMTA3NDVDQUJFNzNFRUQ0NDVBMTA3N0IzMTlGRi5jcmww
gfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5h
cmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQw
M2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3
MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy82
NTA2YTY2ZWQwZWY3YWE2YWY0ODJjZjc0OTQxZTY3MGVkNjZkNGRhZDU1MmQ2MTAy
OS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2ku
Y28vcmVwby9IWVNQLzAvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMTMxMzEzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzNTM3MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8IwERMA0G
CSqGSIb3DQEBCwUAA4IBAQCczFguKLlSrNFwqV7kpqefZYcaLDiNexHSArXiCTiF
ytj0qC7k7puBcT2uXoPsqmJgiCCAq5b6Bxg0RgPN8vi5UznA2+ehpDl4tmrbsrJN
aOrVipJmQmMERmKnryfQZRUUG1bwVo2rdrzrVS4HzL9gCDO9pvHrWzgIIWMoud0M
r0RCfkpKqrBsrL3Jpr8QfhKuZinccCBYLUZNMSnZ45OSBVNlFbq7rfrRr3b5CIxc
dJTIx97veQJPSK5+FD/wjbxdzf8xF3/HFo6qGz6Wt25+8GRgwPq6e2PNwJHEAeGg
tC1wQ8DOnFRMqZp3z1RcbrV3HoitgHDul3WuKXF272oo
-----END CERTIFICATE-----