Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3136303a3a2f34342d3438203d3e20323038363930.roa
File:                     323630323a666332333a3136303a3a2f34342d3438203d3e20323038363930.roa (raw, json)
Hash identifier:          zvjSkvbZUZhAzHjlnQCjTr6k+aIeKpiQxOQwZz6qs84=
Subject key identifier:   DE:C9:30:DE:2F:B1:ED:70:7E:A6:23:15:CC:8E:F7:19:4B:71:EF:8A
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       1FF701B1C6D09BF1D620064ADEB6CEA704631AC8
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3136303a3a2f34342d3438203d3e20323038363930.roa
Signing time:             Sat 08 Apr 2023 03:25:57 +0000
ROA not before:           Sat 08 Apr 2023 03:20:57 +0000
ROA not after:            Sat 06 Apr 2024 03:25:57 +0000
asID:                     208690
IP address blocks:        2602:fc23:160::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f7:01:b1:c6:d0:9b:f1:d6:20:06:4a:de:b6:ce:a7:04:63:1a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:57 2023 GMT
            Not After : Apr  6 03:25:57 2024 GMT
        Subject: CN=DEC930DE2FB1ED707EA62315CC8EF7194B71EF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:cc:06:f8:5b:23:38:ba:55:f0:a4:5d:bb:
                    3c:cd:09:a3:11:09:f1:c6:ef:6c:fe:e9:f2:b9:e6:
                    ba:7a:a8:3b:e0:fc:85:90:8f:1a:5c:e1:45:45:f9:
                    8b:de:90:f7:d2:d3:51:e6:4f:1c:d1:eb:7c:81:d7:
                    ea:dc:31:03:66:7e:39:ba:49:ca:a0:73:73:d9:b6:
                    f7:ab:7d:52:b5:fc:50:87:5d:03:c4:83:29:38:c6:
                    c4:0d:15:21:2f:76:39:09:66:8b:7b:e3:29:78:b1:
                    55:e9:b8:3d:46:88:44:f4:ad:a6:ac:1e:0a:89:9f:
                    05:cf:01:e3:1c:a5:40:fb:a2:77:a3:00:63:c1:06:
                    44:b1:28:ed:b1:59:06:b5:bf:8e:cb:a9:f0:14:c0:
                    53:42:3f:f7:aa:42:82:1c:50:e7:fe:44:a3:22:22:
                    d0:92:22:2b:21:a6:fb:e9:c9:61:5e:2e:49:7d:fd:
                    10:4c:c2:dc:46:0e:9d:60:21:7c:3b:70:39:3d:96:
                    ee:f5:76:d2:73:29:e1:5d:37:a2:45:6d:dc:13:4f:
                    b9:77:63:04:50:9a:2f:c6:8d:23:5c:1b:97:df:b7:
                    59:6e:f7:98:93:28:5f:a5:80:15:1d:eb:81:39:9e:
                    a2:ed:66:cc:5d:2a:bd:b2:db:c1:77:8d:4e:c5:fe:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:30:DE:2F:B1:ED:70:7E:A6:23:15:CC:8E:F7:19:4B:71:EF:8A
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3136303a3a2f34342d3438203d3e20323038363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         d8:87:5c:d1:7a:13:20:27:7a:1a:d8:d7:c8:9e:cb:f4:b4:57:
         a8:e8:dd:17:67:6a:a2:37:f8:cc:73:9c:01:c5:62:59:f7:e0:
         68:0f:61:db:55:37:71:11:0f:7f:91:08:50:0a:92:30:5e:b4:
         0f:74:71:8d:f7:22:08:e1:8a:1e:b6:e7:44:fd:60:ad:db:8f:
         6f:98:7b:80:8b:87:4a:1a:32:e4:b9:6b:dc:46:22:97:94:88:
         02:f2:f6:c9:6e:8c:27:ee:6f:66:44:32:d8:02:4c:0d:08:62:
         77:c7:9e:3c:3e:b4:d5:6c:28:e6:fd:b1:ae:2d:73:f2:74:5b:
         5b:90:d6:a9:e1:91:3b:a8:e4:53:44:a3:8b:6e:98:b5:66:1f:
         67:19:57:f6:ce:9e:ba:03:16:7b:81:88:a7:b6:18:75:11:60:
         b1:fe:e9:36:1a:55:9b:79:11:9a:d6:15:45:61:e1:12:54:cf:
         7f:d3:55:8e:f9:f2:eb:6d:eb:d9:64:44:55:ad:df:e9:2a:f7:
         1d:94:55:c3:2a:d9:92:1b:21:d0:82:90:22:eb:1d:80:e2:38:
         0d:66:2a:82:34:4d:3e:6f:a8:da:62:65:4b:40:8d:24:6d:2f:
         f6:3c:8c:43:89:cc:fb:a7:47:b8:e5:00:32:ce:58:de:00:44:
         ec:09:f1:c9
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUH/cBscbQm/HWIAZK3rbOpwRjGsgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmN2FhNmFmNDgyY2Y3NDk0MWU2NzBl
ZDY2ZDRkYWQ1NTJkNjEwMjkwHhcNMjMwNDA4MDMyMDU3WhcNMjQwNDA2MDMyNTU3
WjAzMTEwLwYDVQQDEyhERUM5MzBERTJGQjFFRDcwN0VBNjIzMTVDQzhFRjcxOTRC
NzFFRjhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsurMBvhbIzi6
VfCkXbs8zQmjEQnxxu9s/unyuea6eqg74PyFkI8aXOFFRfmL3pD30tNR5k8c0et8
gdfq3DEDZn45uknKoHNz2bb3q31StfxQh10DxIMpOMbEDRUhL3Y5CWaLe+MpeLFV
6bg9RohE9K2mrB4KiZ8FzwHjHKVA+6J3owBjwQZEsSjtsVkGtb+Oy6nwFMBTQj/3
qkKCHFDn/kSjIiLQkiIrIab76clhXi5Jff0QTMLcRg6dYCF8O3A5PZbu9XbScynh
XTeiRW3cE0+5d2MEUJovxo0jXBuX37dZbveYkyhfpYAVHeuBOZ6i7WbMXSq9stvB
d41Oxf4g/QIDAQABo4ICXzCCAlswHQYDVR0OBBYEFN7JMN4vse1wfqYjFcyO9xlL
ce+KMB8GA1UdIwQYMBaAFAZhgSak8hB0XKvnPu1EWhB3sxn/MA4GA1UdDwEB/wQE
AwIHgDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kuY28vcmVwby9IWVNQ
LzAvMDY2MTgxMjZBNEYyMTA3NDVDQUJFNzNFRUQ0NDVBMTA3N0IzMTlGRi5jcmww
gfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5h
cmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQw
M2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3
MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy82
NTA2YTY2ZWQwZWY3YWE2YWY0ODJjZjc0OTQxZTY3MGVkNjZkNGRhZDU1MmQ2MTAy
OS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2ku
Y28vcmVwby9IWVNQLzAvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMTM2MzAzYTNhMmYz
NDM0MmQzNDM4MjAzZDNlMjAzMjMwMzgzNjM5MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQmAvwjAWAw
DQYJKoZIhvcNAQELBQADggEBANiHXNF6EyAnehrY18iey/S0V6jo3RdnaqI3+Mxz
nAHFYln34GgPYdtVN3ERD3+RCFAKkjBetA90cY33Igjhih6250T9YK3bj2+Ye4CL
h0oaMuS5a9xGIpeUiALy9slujCfub2ZEMtgCTA0IYnfHnjw+tNVsKOb9sa4tc/J0
W1uQ1qnhkTuo5FNEo4tumLVmH2cZV/bOnroDFnuBiKe2GHURYLH+6TYaVZt5EZrW
FUVh4RJUz3/TVY758utt69lkRFWt3+kq9x2UVcMq2ZIbIdCCkCLrHYDiOA1mKoI0
TT5vqNpiZUtAjSRtL/Y8jEOJzPunR7jlADLOWN4AROwJ8ck=
-----END CERTIFICATE-----