Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa
File:                     323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa (raw, json)
Hash identifier:          sECKaHSZ0pHn003hkhTn3lY8er/vNlN84aCkOA9zkWw=
Subject key identifier:   87:72:51:BC:B8:0B:92:5F:DA:E3:20:2C:F8:A5:95:1B:84:39:41:B3
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       29612FAD75727E2AB07786E2278AA6B4DC3FD863
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa
Signing time:             Sat 08 Apr 2023 03:25:56 +0000
ROA not before:           Sat 08 Apr 2023 03:20:56 +0000
ROA not after:            Sat 06 Apr 2024 03:25:56 +0000
asID:                     18041
IP address blocks:        2602:fc23:11d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:61:2f:ad:75:72:7e:2a:b0:77:86:e2:27:8a:a6:b4:dc:3f:d8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:56 2023 GMT
            Not After : Apr  6 03:25:56 2024 GMT
        Subject: CN=877251BCB80B925FDAE3202CF8A5951B843941B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:eb:79:7a:00:f9:f3:87:90:1a:5d:38:0e:05:
                    1c:87:53:38:87:b8:18:98:45:20:bd:96:77:72:66:
                    5e:13:ed:99:95:42:84:51:d4:dc:9f:bd:93:fb:5e:
                    ba:7d:55:d4:ce:48:b0:1c:44:04:42:da:41:1e:40:
                    28:b5:27:cf:f0:49:5e:95:f7:d6:8d:de:0b:20:32:
                    45:37:c9:0b:fb:40:20:24:0f:0f:dc:89:8d:9e:e9:
                    1d:e4:35:bb:b4:7b:16:9a:98:7c:19:12:85:2e:4a:
                    72:de:98:78:75:47:27:68:35:bf:92:45:86:ff:2a:
                    a4:c0:ed:d9:c9:a1:58:6e:ec:b7:51:46:9c:7b:b0:
                    38:5f:3f:58:5c:8d:0b:b6:30:65:47:63:d4:2b:2e:
                    0a:65:e7:4c:c2:6d:2c:72:d4:e8:b6:17:2f:2c:f0:
                    8d:3b:b4:87:4d:e2:bb:60:c0:58:25:fc:2d:2b:49:
                    27:fc:c4:ff:81:b2:ed:b2:b7:aa:de:f9:17:2e:90:
                    a5:27:fa:23:33:47:89:f8:b6:96:fa:7e:c1:58:b6:
                    46:29:32:1a:9d:19:dd:0b:a9:30:f9:30:a3:32:be:
                    4e:b6:eb:d1:55:02:08:e5:68:8c:2d:10:6a:8b:9a:
                    de:5c:ae:ab:3a:69:e7:c3:68:03:69:10:c5:77:0d:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:72:51:BC:B8:0B:92:5F:DA:E3:20:2C:F8:A5:95:1B:84:39:41:B3
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3131643a3a2f34382d3438203d3e203138303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:11d::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:74:7b:4b:f2:1a:0b:b0:33:fa:59:f1:4e:d8:ae:d4:5a:
         38:9c:7d:1b:8f:08:f8:a3:a2:a7:05:0e:0d:48:6d:fb:a6:ec:
         4b:8e:ff:e8:08:06:e9:33:a9:af:04:de:1f:2f:d6:e4:1a:fd:
         f2:04:b5:c5:ff:cb:b6:a7:2c:bc:65:cb:25:71:37:2e:07:37:
         a5:f2:df:e1:8a:7e:53:cd:56:ca:4d:f8:73:6f:ba:4e:17:d7:
         fa:dd:c5:72:a2:c6:87:e1:0d:08:5b:10:16:dd:ee:18:8b:ef:
         4f:0d:47:9f:cd:08:5e:77:6f:06:4a:6d:74:db:f5:6c:b6:9f:
         bd:b9:ac:59:d2:db:e5:e2:bb:20:9f:18:43:78:38:61:15:a1:
         94:fc:4e:2d:b9:b6:20:2f:dc:f5:f7:75:04:17:a2:a9:dd:6f:
         ad:ea:a9:13:db:38:0f:43:f9:e6:11:1d:85:73:09:5c:56:e9:
         66:8a:1c:b8:bd:b5:47:f1:1c:65:d5:1a:27:05:fc:19:f9:16:
         ab:a7:22:68:c1:73:db:bc:e4:b8:39:79:36:c7:57:55:77:98:
         c8:b3:e2:86:e6:cd:1a:6d:58:25:3b:52:f9:ef:a9:ca:a0:f5:
         02:1d:c5:2b:1b:95:8a:7b:43:82:9c:80:47:c9:34:9a:aa:66:
         25:d0:48:3a
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUKWEvrXVyfiqwd4biJ4qmtNw/2GMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmN2FhNmFmNDgyY2Y3NDk0MWU2NzBl
ZDY2ZDRkYWQ1NTJkNjEwMjkwHhcNMjMwNDA4MDMyMDU2WhcNMjQwNDA2MDMyNTU2
WjAzMTEwLwYDVQQDEyg4NzcyNTFCQ0I4MEI5MjVGREFFMzIwMkNGOEE1OTUxQjg0
Mzk0MUIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ut5egD584eQ
Gl04DgUch1M4h7gYmEUgvZZ3cmZeE+2ZlUKEUdTcn72T+166fVXUzkiwHEQEQtpB
HkAotSfP8ElelffWjd4LIDJFN8kL+0AgJA8P3ImNnukd5DW7tHsWmph8GRKFLkpy
3ph4dUcnaDW/kkWG/yqkwO3ZyaFYbuy3UUace7A4Xz9YXI0LtjBlR2PUKy4KZedM
wm0sctTothcvLPCNO7SHTeK7YMBYJfwtK0kn/MT/gbLtsreq3vkXLpClJ/ojM0eJ
+LaW+n7BWLZGKTIanRndC6kw+TCjMr5OtuvRVQII5WiMLRBqi5reXK6rOmnnw2gD
aRDFdw2YuwIDAQABo4ICXTCCAlkwHQYDVR0OBBYEFIdyUby4C5Jf2uMgLPillRuE
OUGzMB8GA1UdIwQYMBaAFAZhgSak8hB0XKvnPu1EWhB3sxn/MA4GA1UdDwEB/wQE
AwIHgDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kuY28vcmVwby9IWVNQ
LzAvMDY2MTgxMjZBNEYyMTA3NDVDQUJFNzNFRUQ0NDVBMTA3N0IzMTlGRi5jcmww
gfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5h
cmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQw
M2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3
MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy82
NTA2YTY2ZWQwZWY3YWE2YWY0ODJjZjc0OTQxZTY3MGVkNjZkNGRhZDU1MmQ2MTAy
OS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2ku
Y28vcmVwby9IWVNQLzAvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMTMxNjQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM4MzAzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8IwEdMA0G
CSqGSIb3DQEBCwUAA4IBAQAvV3R7S/IaC7Az+lnxTtiu1Fo4nH0bjwj4o6KnBQ4N
SG37puxLjv/oCAbpM6mvBN4fL9bkGv3yBLXF/8u2pyy8ZcslcTcuBzel8t/hin5T
zVbKTfhzb7pOF9f63cVyosaH4Q0IWxAW3e4Yi+9PDUefzQhed28GSm102/Vstp+9
uaxZ0tvl4rsgnxhDeDhhFaGU/E4tubYgL9z193UEF6Kp3W+t6qkT2zgPQ/nmER2F
cwlcVulmihy4vbVH8Rxl1RonBfwZ+RarpyJowXPbvOS4OXk2x1dVd5jIs+KG5s0a
bVglO1L576nKoPUCHcUrG5WKe0OCnIBHyTSaqmYl0Eg6
-----END CERTIFICATE-----