Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
File:                     323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa (raw, json)
Hash identifier:          E/tLaBl0gGpg9G1g7TCWzdy5Va72elGc5wGQ74K0yLc=
Subject key identifier:   92:F9:8E:E2:A2:DF:94:0D:48:66:30:B6:A5:38:9A:79:B2:CA:93:62
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       29EADFF4820B456C6975F7DB5E8CE08A5D262F39
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
Signing time:             Sat 08 Apr 2023 03:25:57 +0000
ROA not before:           Sat 08 Apr 2023 03:20:57 +0000
ROA not after:            Sat 06 Apr 2024 03:25:57 +0000
asID:                     212360
IP address blocks:        2602:fc23:112::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ea:df:f4:82:0b:45:6c:69:75:f7:db:5e:8c:e0:8a:5d:26:2f:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:57 2023 GMT
            Not After : Apr  6 03:25:57 2024 GMT
        Subject: CN=92F98EE2A2DF940D486630B6A5389A79B2CA9362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:c6:f8:81:00:2a:2a:26:b5:44:15:63:0e:
                    f5:28:6a:14:3b:9d:64:49:04:08:8c:57:a4:39:83:
                    b5:c9:e4:89:55:7e:79:a1:6a:84:38:ad:37:4e:24:
                    40:dc:ea:97:20:cb:7f:56:9f:c5:37:b1:99:63:f7:
                    be:5a:00:79:17:28:b2:c3:f2:6a:ef:26:35:b6:e9:
                    7a:74:10:89:ae:ae:99:7b:2f:fa:d3:bd:08:42:b0:
                    1e:87:25:4f:a5:31:f3:32:dc:c6:0e:76:0f:e0:e7:
                    6b:c7:bd:b2:08:eb:5c:17:13:59:1f:f2:02:74:35:
                    5d:5e:fa:67:79:fd:fc:2a:71:3b:c0:8c:6a:a7:6d:
                    f5:4b:24:22:8b:74:42:85:fd:2f:3c:31:dc:66:6e:
                    7c:8a:e8:e5:b4:6e:4c:fc:f9:b9:99:23:5d:ae:3a:
                    48:6e:1a:f3:34:b2:07:ed:a0:ff:5b:9d:0d:3b:95:
                    e4:21:de:2b:f1:35:e5:af:a9:e7:a4:c6:d8:06:ce:
                    56:7c:77:cf:fc:87:ac:87:49:ba:c5:c9:fb:c8:83:
                    db:9a:10:fd:59:59:5c:4d:bb:8f:f9:dc:84:36:0e:
                    27:64:04:12:a2:2d:9e:53:38:7b:17:e3:a4:57:2f:
                    11:c1:04:3b:73:42:1c:c9:91:75:ba:b9:8c:80:45:
                    fd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:8E:E2:A2:DF:94:0D:48:66:30:B6:A5:38:9A:79:B2:CA:93:62
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:99:12:3f:99:b8:8d:6a:86:fc:9d:4b:78:23:ff:ca:32:
         f7:e0:35:f7:dc:31:11:d4:09:8e:2a:c6:46:94:cc:85:fc:5f:
         83:8d:33:0b:f8:e3:aa:e2:1b:84:21:91:7a:f5:ac:b4:ae:39:
         62:bc:98:d7:96:27:52:71:db:8a:03:b5:01:c4:50:89:26:ec:
         54:ac:3d:1e:a0:d8:7d:fa:71:c9:b5:26:d2:42:21:a0:fe:41:
         88:f4:b7:dd:57:17:3c:4b:2d:f8:70:ae:a1:3d:38:69:d2:a6:
         79:9d:bb:9f:fd:6b:74:0a:5b:ab:0c:a8:8c:d1:a0:ed:3b:8a:
         e2:a6:2a:a7:7b:62:21:c5:ff:b4:bf:ac:f3:c3:46:e3:0f:90:
         98:55:fe:87:a7:1b:24:ae:bf:c3:44:71:6e:89:2d:8c:0a:76:
         e2:b5:96:ad:de:c8:f1:9b:14:f6:ca:71:9d:e3:76:6e:9c:9c:
         40:cc:23:db:4e:aa:6c:fe:b2:5e:75:5b:b7:be:df:a1:45:b2:
         1f:b6:f2:b2:d0:86:4b:37:f9:5d:6a:d9:87:56:d0:d8:31:b0:
         0b:7d:6b:8a:d4:6b:9c:00:cb:1e:9b:fc:50:60:d7:3f:ba:5a:
         e9:2b:c7:fb:60:68:b6:88:72:8b:0f:5e:a1:65:38:bf:cf:49:
         ee:c4:64:07
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUKerf9IILRWxpdffbXozgil0mLzkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmN2FhNmFmNDgyY2Y3NDk0MWU2NzBl
ZDY2ZDRkYWQ1NTJkNjEwMjkwHhcNMjMwNDA4MDMyMDU3WhcNMjQwNDA2MDMyNTU3
WjAzMTEwLwYDVQQDEyg5MkY5OEVFMkEyREY5NDBENDg2NjMwQjZBNTM4OUE3OUIy
Q0E5MzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiHG+IEAKiom
tUQVYw71KGoUO51kSQQIjFekOYO1yeSJVX55oWqEOK03TiRA3OqXIMt/Vp/FN7GZ
Y/e+WgB5Fyiyw/Jq7yY1tul6dBCJrq6Zey/6070IQrAehyVPpTHzMtzGDnYP4Odr
x72yCOtcFxNZH/ICdDVdXvpnef38KnE7wIxqp231SyQii3RChf0vPDHcZm58iujl
tG5M/Pm5mSNdrjpIbhrzNLIH7aD/W50NO5XkId4r8TXlr6nnpMbYBs5WfHfP/Ies
h0m6xcn7yIPbmhD9WVlcTbuP+dyENg4nZAQSoi2eUzh7F+OkVy8RwQQ7c0IcyZF1
urmMgEX9qQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFJL5juKi35QNSGYwtqU4mnmy
ypNiMB8GA1UdIwQYMBaAFAZhgSak8hB0XKvnPu1EWhB3sxn/MA4GA1UdDwEB/wQE
AwIHgDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kuY28vcmVwby9IWVNQ
LzAvMDY2MTgxMjZBNEYyMTA3NDVDQUJFNzNFRUQ0NDVBMTA3N0IzMTlGRi5jcmww
gfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5h
cmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQw
M2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3
MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy82
NTA2YTY2ZWQwZWY3YWE2YWY0ODJjZjc0OTQxZTY3MGVkNjZkNGRhZDU1MmQ2MTAy
OS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2ku
Y28vcmVwby9IWVNQLzAvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMTMxMzIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMxMzIzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvwjARIw
DQYJKoZIhvcNAQELBQADggEBAAXGmRI/mbiNaob8nUt4I//KMvfgNffcMRHUCY4q
xkaUzIX8X4ONMwv446riG4QhkXr1rLSuOWK8mNeWJ1Jx24oDtQHEUIkm7FSsPR6g
2H36ccm1JtJCIaD+QYj0t91XFzxLLfhwrqE9OGnSpnmdu5/9a3QKW6sMqIzRoO07
iuKmKqd7YiHF/7S/rPPDRuMPkJhV/oenGySuv8NEcW6JLYwKduK1lq3eyPGbFPbK
cZ3jdm6cnEDMI9tOqmz+sl51W7e+36FFsh+28rLQhks3+V1q2YdW0NgxsAt9a4rU
a5wAyx6b/FBg1z+6Wukrx/tgaLaIcosPXqFlOL/PSe7EZAc=
-----END CERTIFICATE-----