Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3131343a3a2f34372d3438203d3e203434343036.roa
File:                     323630323a666332333a3131343a3a2f34372d3438203d3e203434343036.roa (raw, json)
Hash identifier:          m1wSNfsZyaKG5GcX0tJSLXHqQEgWl7EGUbxC9SIMGf4=
Subject key identifier:   FB:86:F7:EE:2C:98:3B:B3:CB:A2:57:B8:1F:20:C7:8E:29:CA:AD:E0
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       7AB65D73DB1AC5F96858B21DF1C58A0BEBCF1D5F
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131343a3a2f34372d3438203d3e203434343036.roa
Signing time:             Sat 08 Apr 2023 03:25:58 +0000
ROA not before:           Sat 08 Apr 2023 03:20:58 +0000
ROA not after:            Sat 06 Apr 2024 03:25:58 +0000
asID:                     44406
IP address blocks:        2602:fc23:114::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:5d:73:db:1a:c5:f9:68:58:b2:1d:f1:c5:8a:0b:eb:cf:1d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:58 2023 GMT
            Not After : Apr  6 03:25:58 2024 GMT
        Subject: CN=FB86F7EE2C983BB3CBA257B81F20C78E29CAADE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:f6:29:df:16:bf:27:c6:ea:82:c3:55:6a:
                    6e:6a:5b:e4:ab:23:8a:4e:67:c2:8c:d6:e5:7e:75:
                    de:65:89:95:33:cd:d5:42:97:53:bb:c7:40:ea:ad:
                    4f:44:c7:ea:4b:01:b1:89:02:f5:f0:42:8a:0a:5a:
                    83:b2:c6:5c:ea:94:6f:85:8f:c8:37:fb:83:7e:0a:
                    41:d0:b6:31:eb:fa:14:22:31:48:1d:56:6a:fe:fd:
                    92:bc:b1:c2:fd:b9:6c:9f:56:4f:92:01:f3:ec:be:
                    34:14:1a:25:61:ab:f4:68:51:58:82:3d:ef:c6:8c:
                    ad:63:9e:41:c4:8c:64:b9:6f:c5:76:8a:7e:55:dd:
                    e0:4d:f6:25:64:2d:b1:22:71:10:c9:09:1c:03:49:
                    ac:4d:00:4e:69:df:24:82:04:38:c7:5a:38:e6:7a:
                    c1:a0:74:f3:4d:4f:3d:20:88:9f:5b:57:a3:8c:1d:
                    26:01:99:70:ed:f3:2d:e7:f4:22:9e:d6:3e:32:a2:
                    7c:9a:1d:4c:19:29:ed:82:15:d9:2b:39:6e:3c:9f:
                    ec:c2:bf:a7:4b:08:5e:47:da:f4:e2:f3:90:db:66:
                    c7:bb:79:19:73:31:af:81:8c:5e:ea:09:37:51:63:
                    54:67:f1:ac:34:34:63:d6:28:56:ea:66:69:8f:14:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:F7:EE:2C:98:3B:B3:CB:A2:57:B8:1F:20:C7:8E:29:CA:AD:E0
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131343a3a2f34372d3438203d3e203434343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:114::/47

    Signature Algorithm: sha256WithRSAEncryption
         bf:01:cc:ae:29:17:3b:57:1e:e7:b5:8e:2f:5a:7e:e7:1e:2c:
         2c:15:76:7f:0e:a6:b2:58:e3:1c:e8:88:bc:91:57:16:49:99:
         01:bc:01:eb:ab:3e:83:4e:65:d8:28:d9:0a:f5:43:62:a7:c2:
         1d:93:18:73:eb:55:30:53:f6:63:43:0f:28:da:ad:8f:33:89:
         93:82:b1:ce:92:70:00:75:85:ee:b6:af:71:6d:ea:6a:4e:90:
         8d:b4:de:a6:f4:5a:dc:a2:64:d8:a8:a0:0f:9e:34:f9:f4:77:
         b5:aa:52:2b:fa:56:d6:13:a0:8b:be:fc:2b:2d:39:44:da:d3:
         6e:da:f9:a5:b6:c7:91:6c:81:8e:20:90:bf:ee:47:8e:dd:cc:
         ad:dd:03:bb:97:5d:ff:6f:68:1a:3b:1f:ac:e1:18:1b:ad:a9:
         33:8b:98:74:0a:cc:56:1d:9c:ea:c8:cc:9f:8e:e6:d2:59:d0:
         3c:e3:4d:80:fb:b5:97:71:a2:1d:5c:eb:cb:bf:be:a2:68:ce:
         d1:fb:db:0e:1b:74:97:3b:b7:d2:35:54:06:ba:d3:b4:0c:45:
         65:8c:cd:f5:f3:1a:65:78:96:58:96:e2:31:78:d8:76:07:9b:
         0b:5c:6f:f9:b3:9f:8f:0a:f5:6b:6e:51:e4:e0:15:ae:d3:9c:
         da:85:4e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----