Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa
File:                     323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa (raw, json)
Hash identifier:          AwGylNAjRWiIu3eD/GbArOIeVW/b3ndf0gPJqSYzHsE=
Subject key identifier:   F2:D3:B8:23:C9:1E:BE:E5:A9:11:1A:5D:3C:D3:5B:7D:B6:F1:E3:27
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       5D125BB97754440B98241FA83913FBD7D7D5FECA
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa
Signing time:             Sat 08 Apr 2023 03:25:55 +0000
ROA not before:           Sat 08 Apr 2023 03:20:55 +0000
ROA not after:            Sat 06 Apr 2024 03:25:55 +0000
asID:                     213045
IP address blocks:        2602:fc23:11a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:12:5b:b9:77:54:44:0b:98:24:1f:a8:39:13:fb:d7:d7:d5:fe:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:55 2023 GMT
            Not After : Apr  6 03:25:55 2024 GMT
        Subject: CN=F2D3B823C91EBEE5A9111A5D3CD35B7DB6F1E327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:14:69:91:92:07:e7:b5:f2:68:29:d6:19:
                    07:61:5d:4b:9a:66:fc:8c:77:40:7a:9a:34:8b:80:
                    d3:94:50:f5:15:0a:6a:1c:52:52:2a:24:d5:e2:be:
                    e0:26:95:fd:83:81:fe:a9:e2:2e:35:69:72:91:fa:
                    9c:04:30:d8:3e:37:9e:dc:73:b3:cd:79:24:12:82:
                    64:b2:25:0f:ba:26:6b:04:fd:ab:15:71:35:bf:53:
                    6b:3d:a0:00:2b:a6:b5:3d:21:81:6e:13:65:d7:a2:
                    9e:fc:1d:25:e9:b5:ae:69:6d:84:70:da:37:16:3b:
                    61:d1:ec:c3:67:a8:25:ea:9d:33:2e:f1:70:24:68:
                    2f:47:9e:da:3f:ea:3a:09:3a:59:96:87:13:10:44:
                    82:28:7d:4e:cb:b8:eb:73:48:12:31:9d:67:0e:47:
                    09:b4:51:2a:11:9b:9a:ad:79:26:07:8c:93:01:c9:
                    65:7b:7e:e4:c5:6b:64:66:df:70:18:23:84:3c:4d:
                    a3:73:c4:5c:f8:8a:91:98:6d:b3:bd:a6:5e:70:d7:
                    8f:c7:5c:6a:53:94:41:91:84:2c:13:2c:20:41:6d:
                    6a:a7:42:5c:7f:31:6f:88:cd:b7:80:a5:6e:74:38:
                    dd:74:5e:32:2c:2f:ad:ab:1a:50:02:0b:4b:d4:b2:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D3:B8:23:C9:1E:BE:E5:A9:11:1A:5D:3C:D3:5B:7D:B6:F1:E3:27
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131613a3a2f34382d3438203d3e20323133303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11a::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:ec:ba:f5:5f:f8:05:67:40:0d:99:2f:a8:95:75:16:bc:9a:
         81:7d:b0:bd:03:13:42:f6:36:34:87:b6:63:57:fa:9b:7c:88:
         49:37:d6:fd:9a:a1:7d:0d:bd:db:6a:a6:f9:be:cf:91:78:39:
         1f:be:05:f5:cb:72:c9:71:36:7b:67:77:2e:75:ff:69:58:cb:
         31:77:34:2f:90:02:68:5e:38:b8:bd:29:65:16:5e:b4:78:bc:
         ff:80:1e:15:1b:e3:32:9e:50:84:d3:d3:d9:7d:25:47:a9:e9:
         55:9f:ca:08:d0:e2:ce:20:e9:e0:db:9f:e4:90:cd:af:61:8f:
         35:85:68:98:09:c6:66:38:63:ee:50:d1:24:e6:8f:b9:af:9f:
         c6:e0:90:7c:79:4c:12:92:c8:2e:22:5a:38:5f:0d:6f:a1:b1:
         d6:dd:4b:72:ca:33:ee:5c:25:8c:28:65:aa:aa:28:14:cc:58:
         88:eb:4a:47:93:25:b5:e2:74:32:05:49:78:3a:1b:be:ea:87:
         e7:e2:ac:79:7c:6e:92:8a:60:12:77:7d:36:d7:83:2d:13:85:
         96:10:93:01:37:02:69:1b:42:d5:52:1f:09:96:3f:6a:7a:35:
         3f:94:9e:0b:08:11:9b:9b:88:1c:db:04:96:f8:c9:58:25:2f:
         71:90:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----