Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa
File:                     323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa (raw, json)
Hash identifier:          P+1v2/6qlrqCLP9T1PoRE+XOa0Kr6WsfYgxm6f6D/sg=
Subject key identifier:   1E:72:74:C2:21:0B:5C:E2:52:42:4F:14:92:E0:D8:22:01:32:CB:04
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       50F1DE69E9ADCA456AB8BD4EB6879B5D4C648B2B
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa
Signing time:             Sat 08 Apr 2023 03:25:55 +0000
ROA not before:           Sat 08 Apr 2023 03:20:55 +0000
ROA not after:            Sat 06 Apr 2024 03:25:55 +0000
asID:                     54625
IP address blocks:        2602:fc23:150::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f1:de:69:e9:ad:ca:45:6a:b8:bd:4e:b6:87:9b:5d:4c:64:8b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:55 2023 GMT
            Not After : Apr  6 03:25:55 2024 GMT
        Subject: CN=1E7274C2210B5CE252424F1492E0D8220132CB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7e:46:ad:d4:1c:5c:45:46:09:58:cf:3b:a3:
                    0d:c0:c4:92:79:63:f2:ac:d7:13:99:fd:e3:8d:03:
                    d6:23:f6:97:ba:3f:a7:bf:a5:39:c9:c5:f3:30:39:
                    02:04:7c:3f:10:28:4a:08:df:5c:0c:25:6a:5e:50:
                    90:4b:e5:ff:46:00:18:0c:4e:0b:ec:3c:c9:56:94:
                    c6:cc:2b:c8:1a:d8:10:99:bc:b4:fa:0c:16:9c:9a:
                    ac:0e:08:c0:3d:d6:50:44:d5:61:3f:7f:98:6d:50:
                    e9:8b:6c:0a:37:38:af:a6:ca:a7:18:49:20:3e:7f:
                    57:63:91:e6:9f:ca:2d:7b:22:cf:9a:c2:0a:4c:c1:
                    95:85:3b:80:b4:e5:30:68:4a:e8:80:ab:41:43:5f:
                    5c:6a:29:d1:fd:e5:33:67:01:a8:d4:06:d0:c9:75:
                    98:7f:8c:02:d1:1e:60:be:b9:3e:2a:26:b0:6f:9d:
                    84:84:75:65:ef:3f:89:ec:48:5e:6d:b6:38:0f:5b:
                    56:23:8b:76:a9:37:69:e7:98:88:ff:27:19:e3:d0:
                    07:14:b9:1f:3a:b8:27:63:e4:d5:f6:f5:3c:c6:8b:
                    e3:1f:2a:40:bc:b8:91:84:51:06:e9:0a:cf:80:fd:
                    cf:1f:9a:a7:2d:35:02:50:80:6f:9f:90:d9:35:54:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:72:74:C2:21:0B:5C:E2:52:42:4F:14:92:E0:D8:22:01:32:CB:04
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3135303a3a2f34342d3438203d3e203534363235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:150::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:30:36:3e:20:fa:29:18:e4:d7:6f:67:69:12:a0:f5:57:6c:
         0c:0b:5f:6c:a5:ce:70:04:7b:96:f7:5b:42:01:07:d6:72:21:
         ec:c1:23:ae:92:f3:e8:9c:b6:c2:2a:32:bf:07:71:df:63:98:
         0d:12:d9:48:58:ad:ac:29:15:81:dd:d6:38:81:d5:ef:5b:73:
         b0:27:42:61:e3:46:52:93:c0:23:b4:a6:71:4e:4f:85:fc:9f:
         5e:22:a4:55:d5:22:e7:6a:8e:7d:fd:fa:19:1f:d7:bd:0e:7a:
         4c:45:0c:27:fe:84:0d:0a:00:6e:99:ee:15:d0:da:b9:1c:12:
         11:4b:82:7e:24:92:d1:12:9a:82:94:0a:ec:3e:7d:6a:9c:42:
         97:01:9b:cb:a0:f2:29:d0:48:d5:14:3a:9f:b9:62:c0:26:03:
         03:19:17:4b:a8:27:2d:e3:88:79:a9:c5:80:f0:55:b7:5f:f9:
         e0:af:88:b2:b3:e6:cc:e6:8a:95:c0:0f:e1:47:4a:98:fa:55:
         bd:0a:e9:fa:27:b6:59:dc:ac:22:b3:e9:ca:68:dc:ac:2d:a9:
         2f:0f:43:45:1f:ba:6b:bd:51:2c:6d:c4:10:64:10:97:a8:66:
         4d:24:ab:c6:58:4d:fb:63:80:6f:a6:8e:93:ac:96:7d:11:c9:
         2f:15:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----