Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa
File:                     323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa (raw, json)
Hash identifier:          yyzSZR1TAGMjbt0lai09j7GD1S55QuZgV3mtE1+a2Ko=
Subject key identifier:   F5:29:7A:20:29:9A:CA:30:47:04:81:84:41:4A:1B:B1:E4:F2:5B:92
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       6ED9E6D871B855476EF49C25011F0962AD43A842
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa
Signing time:             Sat 08 Apr 2023 03:25:56 +0000
ROA not before:           Sat 08 Apr 2023 03:20:56 +0000
ROA not after:            Sat 06 Apr 2024 03:25:56 +0000
asID:                     57406
IP address blocks:        2602:fc23:130::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d9:e6:d8:71:b8:55:47:6e:f4:9c:25:01:1f:09:62:ad:43:a8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:56 2023 GMT
            Not After : Apr  6 03:25:56 2024 GMT
        Subject: CN=F5297A20299ACA3047048184414A1BB1E4F25B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9c:9a:40:99:60:3f:c7:d4:a5:85:ef:ee:12:
                    03:73:c2:39:af:8c:2f:4f:92:c6:51:0c:57:74:0a:
                    1a:db:c2:9f:aa:a5:ab:e0:f1:ec:f7:06:71:04:19:
                    47:6a:3a:38:3f:f0:32:52:08:7a:5d:10:34:a3:06:
                    6b:7d:0f:5f:e7:01:a2:00:d9:40:e1:61:41:bf:dc:
                    80:f5:42:f8:3b:cf:ab:1c:59:a9:a2:22:4e:43:00:
                    a7:f7:17:c0:26:fe:25:4b:d3:27:5e:67:04:57:33:
                    6e:23:97:96:96:45:8d:df:d9:7f:9c:cd:bb:ac:9c:
                    74:24:be:59:b7:23:07:09:2e:a0:16:19:bc:bb:a1:
                    8d:eb:f2:7d:0a:75:12:7d:c1:15:1f:13:b2:fd:4f:
                    70:39:b1:46:19:7f:63:5d:68:f0:8e:f5:92:85:6b:
                    b2:ee:9f:8a:89:47:fc:fc:e2:70:dc:a3:e9:52:a8:
                    4d:3e:1a:0f:d4:1f:f6:2c:55:81:a4:48:54:74:e8:
                    da:1e:e7:ca:ed:8b:28:c6:83:e6:e6:3b:f1:3c:c1:
                    df:ef:a7:ae:a7:8e:e1:fd:e9:0b:d2:ac:47:9c:48:
                    5b:27:de:00:b5:c3:39:84:f6:b6:8b:ea:28:a8:70:
                    c4:1c:6f:e0:41:31:b8:b2:9d:f7:51:ee:71:97:b8:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:29:7A:20:29:9A:CA:30:47:04:81:84:41:4A:1B:B1:E4:F2:5B:92
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3133303a3a2f34342d3438203d3e203537343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:130::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:c7:28:c7:17:79:72:8a:58:66:86:8b:f1:f0:a3:b7:5e:
         a7:c3:f0:1d:c7:14:36:20:e9:7a:32:b7:ee:2c:31:f6:ad:b1:
         14:d3:33:98:11:9e:07:e0:91:15:a9:90:05:e0:23:cf:37:a4:
         20:55:32:7f:14:7f:0f:bb:99:6f:c7:6d:fe:f2:e2:30:dd:da:
         fb:15:a2:48:e2:9a:bf:ec:07:91:db:a7:ee:55:c9:1f:fe:18:
         ce:f6:98:e2:70:39:73:58:58:95:2d:8e:81:9c:89:f5:0f:57:
         1f:93:6f:9b:de:2c:b2:19:ba:22:9e:76:9a:0a:6e:cd:8a:99:
         fb:02:1d:ce:35:d5:df:3e:50:e2:29:4c:1b:52:95:38:2d:4a:
         57:59:0a:0b:13:fc:6b:77:2f:ab:ce:54:39:46:5d:6d:6d:ef:
         05:01:f3:81:9a:62:42:2a:43:02:00:bc:65:e6:4e:d2:2a:75:
         ef:f1:32:4d:1f:63:d1:19:5d:ce:b5:fc:e8:6c:3b:7a:f6:88:
         3b:e1:d0:c4:d4:14:a1:f3:52:c1:41:15:67:d4:96:37:5b:a5:
         4c:c6:93:19:4e:b1:df:98:68:b3:74:5a:82:3f:95:50:a1:19:
         59:ee:da:d3:ab:4f:67:62:0d:d8:84:1d:cd:9c:0c:80:06:15:
         77:77:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----