Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa
File:                     323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa (raw, json)
Hash identifier:          opt6ZwB8q6zksBDy24KLxXH6DP4l1zflwQrmQtBMAHc=
Subject key identifier:   88:B4:9E:EF:FE:AB:60:84:CF:69:4F:23:7E:1B:5C:46:B3:13:58:7C
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       42BAD9DCE06CE6ACB92EBE9FD4BB43B99C2F04E3
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa
Signing time:             Sat 08 Apr 2023 03:25:57 +0000
ROA not before:           Sat 08 Apr 2023 03:20:57 +0000
ROA not after:            Sat 06 Apr 2024 03:25:57 +0000
asID:                     207852
IP address blocks:        2602:fc23:11b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ba:d9:dc:e0:6c:e6:ac:b9:2e:be:9f:d4:bb:43:b9:9c:2f:04:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:57 2023 GMT
            Not After : Apr  6 03:25:57 2024 GMT
        Subject: CN=88B49EEFFEAB6084CF694F237E1B5C46B313587C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:61:02:73:32:45:6c:b3:2e:6e:1b:42:ab:
                    f4:b0:4a:98:6f:ed:53:eb:25:4e:ce:28:5f:4f:56:
                    92:dd:07:d4:3a:4c:0d:c8:0b:ef:4d:bf:f5:25:c7:
                    9a:64:40:fa:ac:5f:7c:f2:0f:d8:ec:cd:fd:6f:d9:
                    d8:6b:36:1a:75:47:8a:35:84:d4:5c:1a:27:cb:60:
                    0a:2f:60:9d:35:30:35:5e:e5:ce:69:1d:f2:4d:e7:
                    c5:49:29:49:98:87:b1:fd:7a:1d:99:d1:fc:44:d7:
                    e8:ef:09:f3:48:a3:80:50:94:f7:5e:e5:71:60:7a:
                    60:17:7f:04:40:d0:57:d7:22:94:8b:2c:ae:34:41:
                    be:a1:e0:b7:0e:cc:dc:af:7a:fb:a5:e4:73:f4:da:
                    d4:7a:c3:c7:70:b4:af:9c:ad:96:bb:5e:9b:e5:1b:
                    77:65:14:a3:46:dd:ea:45:9b:f7:8d:2a:fd:9d:c1:
                    90:ac:a2:a7:ef:80:6e:3d:74:95:b4:09:43:69:91:
                    7b:83:a7:9d:06:35:bc:83:72:bb:aa:7b:5e:d5:f9:
                    9f:31:f7:2f:12:9d:da:b0:86:0c:3e:0c:9f:ef:61:
                    a0:9b:49:68:b0:b5:d8:6f:d0:ab:e6:9a:2a:83:6b:
                    ac:67:7a:4c:ff:b1:08:0e:86:17:ee:cf:f4:49:d5:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B4:9E:EF:FE:AB:60:84:CF:69:4F:23:7E:1B:5C:46:B3:13:58:7C
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131623a3a2f34382d3438203d3e20323037383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11b::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:33:af:2f:31:02:b0:62:d1:7c:d6:50:87:0c:cd:8d:e5:8f:
         4b:0f:6e:e8:2e:80:72:eb:d7:ca:8e:ec:62:ac:e9:a3:b4:26:
         65:75:88:1d:9f:4e:81:d6:fb:ff:b3:47:47:95:8c:e1:6e:c4:
         7d:17:98:6e:d7:24:81:be:68:76:69:c4:91:bc:d8:13:8d:ba:
         41:66:e5:cd:a6:f0:0f:c5:ae:aa:bf:fb:e4:00:7d:e2:ed:68:
         fb:ff:9b:77:e9:b5:c6:b9:e9:4a:1b:5f:a8:d9:75:9d:fe:1d:
         2b:73:c5:7d:c7:aa:a0:37:56:9c:86:d5:86:bb:db:bb:54:79:
         28:47:ae:fd:b7:81:40:b4:74:ea:9e:62:0b:c0:75:a3:da:b3:
         fd:f5:b0:15:ff:8b:21:5a:c4:e4:bf:c7:e1:ef:fb:b0:1a:ee:
         38:d5:f1:5f:c0:75:d6:b9:7d:66:7d:79:b3:b0:6d:e2:39:32:
         4f:5f:a5:bd:d4:b9:1d:58:ec:38:14:4d:23:61:e5:d3:e5:7a:
         77:4c:8d:6d:ed:f7:bb:4d:61:45:1d:45:05:4e:00:45:a4:cb:
         c4:ce:6e:ff:cc:ad:9c:c7:f8:67:df:93:6a:eb:53:30:4c:d5:
         3b:97:6f:d5:53:30:7f:a0:5d:d7:43:ab:bc:5a:41:82:3b:2f:
         62:81:81:45
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUQrrZ3OBs5qy5Lr6f1LtDuZwvBOMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmN2FhNmFmNDgyY2Y3NDk0MWU2NzBl
ZDY2ZDRkYWQ1NTJkNjEwMjkwHhcNMjMwNDA4MDMyMDU3WhcNMjQwNDA2MDMyNTU3
WjAzMTEwLwYDVQQDEyg4OEI0OUVFRkZFQUI2MDg0Q0Y2OTRGMjM3RTFCNUM0NkIz
MTM1ODdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrNhAnMyRWyz
Lm4bQqv0sEqYb+1T6yVOzihfT1aS3QfUOkwNyAvvTb/1JceaZED6rF988g/Y7M39
b9nYazYadUeKNYTUXBony2AKL2CdNTA1XuXOaR3yTefFSSlJmIex/XodmdH8RNfo
7wnzSKOAUJT3XuVxYHpgF38EQNBX1yKUiyyuNEG+oeC3Dszcr3r7peRz9NrUesPH
cLSvnK2Wu16b5Rt3ZRSjRt3qRZv3jSr9ncGQrKKn74BuPXSVtAlDaZF7g6edBjW8
g3K7qnte1fmfMfcvEp3asIYMPgyf72Ggm0losLXYb9Cr5poqg2usZ3pM/7EIDoYX
7s/0SdU5fQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFIi0nu/+q2CEz2lPI34bXEaz
E1h8MB8GA1UdIwQYMBaAFAZhgSak8hB0XKvnPu1EWhB3sxn/MA4GA1UdDwEB/wQE
AwIHgDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kuY28vcmVwby9IWVNQ
LzAvMDY2MTgxMjZBNEYyMTA3NDVDQUJFNzNFRUQ0NDVBMTA3N0IzMTlGRi5jcmww
gfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5h
cmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQw
M2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3
MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy82
NTA2YTY2ZWQwZWY3YWE2YWY0ODJjZjc0OTQxZTY3MGVkNjZkNGRhZDU1MmQ2MTAy
OS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2ku
Y28vcmVwby9IWVNQLzAvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMTMxNjIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMjMwMzczODM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvwjARsw
DQYJKoZIhvcNAQELBQADggEBAJIzry8xArBi0XzWUIcMzY3lj0sPbugugHLr18qO
7GKs6aO0JmV1iB2fToHW+/+zR0eVjOFuxH0XmG7XJIG+aHZpxJG82BONukFm5c2m
8A/Frqq/++QAfeLtaPv/m3fptca56UobX6jZdZ3+HStzxX3HqqA3VpyG1Ya727tU
eShHrv23gUC0dOqeYgvAdaPas/31sBX/iyFaxOS/x+Hv+7Aa7jjV8V/Adda5fWZ9
ebOwbeI5Mk9fpb3UuR1Y7DgUTSNh5dPlendMjW3t97tNYUUdRQVOAEWky8TObv/M
rZzH+Gffk2rrUzBM1TuXb9VTMH+gXddDq7xaQYI7L2KBgUU=
-----END CERTIFICATE-----