Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3230303a3a2f34302d3438203d3e20323035343332.roa
File:                     323630323a666332333a3230303a3a2f34302d3438203d3e20323035343332.roa (raw, json)
Hash identifier:          zdoD0ahiX01LdeJR75+HOENfjLzgsm3FKN1bXIvYUPA=
Subject key identifier:   47:8B:8E:06:0B:BE:A6:5B:06:20:4C:96:1E:4B:14:FD:DA:75:29:DC
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       2F75E3323E6C18060EBE4BBF62EB8801A13E7D70
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3230303a3a2f34302d3438203d3e20323035343332.roa
Signing time:             Sat 08 Apr 2023 03:25:57 +0000
ROA not before:           Sat 08 Apr 2023 03:20:57 +0000
ROA not after:            Sat 06 Apr 2024 03:25:57 +0000
asID:                     205432
IP address blocks:        2602:fc23:200::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:75:e3:32:3e:6c:18:06:0e:be:4b:bf:62:eb:88:01:a1:3e:7d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:57 2023 GMT
            Not After : Apr  6 03:25:57 2024 GMT
        Subject: CN=478B8E060BBEA65B06204C961E4B14FDDA7529DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:81:61:50:05:34:83:eb:ff:c1:85:a7:9e:
                    f3:82:86:d7:a1:d8:1d:93:c7:b2:54:8e:81:76:fc:
                    02:b6:0d:6b:1b:62:cc:76:d6:c1:a8:bf:45:c4:3b:
                    fb:5a:54:95:c4:47:71:d1:5a:b4:7c:a4:66:2d:50:
                    5e:0e:90:f0:44:5c:f6:86:38:1d:a0:04:83:34:af:
                    bc:2b:d6:25:de:52:79:6f:19:ce:bc:a0:d3:18:38:
                    87:32:a1:10:aa:db:cb:0d:3b:2e:76:01:41:0f:97:
                    97:46:1d:ad:22:33:68:da:88:b0:88:b4:27:fa:b7:
                    eb:7c:49:1d:e2:03:0c:28:a2:db:1a:41:99:80:b5:
                    4d:3b:de:85:6a:c2:3c:f3:f8:ff:c4:48:8d:1e:cb:
                    c7:9b:f3:63:62:7c:31:fe:cb:87:22:28:4f:70:2a:
                    26:eb:5a:be:97:e6:f1:bd:a4:87:e8:80:d5:66:47:
                    e3:a8:ac:96:ec:b8:dd:13:51:9e:62:78:f0:d3:90:
                    80:51:3f:f1:c8:b7:70:e8:1a:2a:a0:8d:1c:4a:68:
                    60:c7:6d:12:4f:73:38:d9:cd:ec:03:43:e8:d7:d9:
                    9b:96:fc:be:be:3e:fc:92:63:3d:0f:0e:51:31:65:
                    80:8f:d2:f6:e4:28:a8:eb:2a:c9:b1:3e:53:ef:7f:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8B:8E:06:0B:BE:A6:5B:06:20:4C:96:1E:4B:14:FD:DA:75:29:DC
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3230303a3a2f34302d3438203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:f2:35:17:03:f1:d1:2a:a2:11:fb:de:e0:5f:bd:a9:01:
         32:f9:6e:97:e0:0d:2a:ac:1f:53:90:01:c2:78:56:53:7e:63:
         c9:5e:2c:01:f8:63:10:66:29:1e:98:c4:ee:a1:36:f0:9e:b6:
         69:f0:64:8f:f7:fb:c3:b2:60:a4:43:76:9a:e5:c2:0c:b8:c6:
         d7:26:4c:93:c5:bb:2b:bf:fe:bc:c9:2c:85:f0:01:8f:1a:04:
         06:43:94:39:89:3e:a5:f5:56:85:ce:50:53:8e:1a:18:b1:58:
         4a:53:7e:16:09:a6:ba:5d:2a:56:88:18:b4:f3:29:9c:31:7f:
         fb:6b:9b:f5:f8:ac:dd:b2:59:c7:34:13:89:1c:2a:7c:0d:93:
         71:aa:31:4b:a9:ac:f2:c8:b8:35:eb:fc:73:01:1d:92:63:06:
         46:47:3c:d7:26:bf:45:d4:cc:4a:d6:30:14:3f:1b:5d:19:97:
         16:7c:0d:9a:ce:95:18:bf:10:37:d0:de:3b:ad:6f:97:ce:e8:
         c0:50:bc:2d:6f:33:49:dc:5c:37:2c:b6:28:0e:03:9e:90:c4:
         d7:29:9f:cd:a6:22:1e:77:b4:92:0a:45:bf:c1:7b:8e:cd:9f:
         df:6b:58:d1:15:e2:b1:4e:26:b0:cd:02:8c:cc:63:31:0c:ce:
         36:02:87:d4
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUL3XjMj5sGAYOvku/YuuIAaE+fXAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmN2FhNmFmNDgyY2Y3NDk0MWU2NzBl
ZDY2ZDRkYWQ1NTJkNjEwMjkwHhcNMjMwNDA4MDMyMDU3WhcNMjQwNDA2MDMyNTU3
WjAzMTEwLwYDVQQDEyg0NzhCOEUwNjBCQkVBNjVCMDYyMDRDOTYxRTRCMTRGRERB
NzUyOURDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+iBYVAFNIPr
/8GFp57zgobXodgdk8eyVI6BdvwCtg1rG2LMdtbBqL9FxDv7WlSVxEdx0Vq0fKRm
LVBeDpDwRFz2hjgdoASDNK+8K9Yl3lJ5bxnOvKDTGDiHMqEQqtvLDTsudgFBD5eX
Rh2tIjNo2oiwiLQn+rfrfEkd4gMMKKLbGkGZgLVNO96FasI88/j/xEiNHsvHm/Nj
Ynwx/suHIihPcCom61q+l+bxvaSH6IDVZkfjqKyW7LjdE1GeYnjw05CAUT/xyLdw
6BoqoI0cSmhgx20ST3M42c3sA0Po19mblvy+vj78kmM9Dw5RMWWAj9L25Cio6yrJ
sT5T73+qTQIDAQABo4ICXjCCAlowHQYDVR0OBBYEFEeLjgYLvqZbBiBMlh5LFP3a
dSncMB8GA1UdIwQYMBaAFAZhgSak8hB0XKvnPu1EWhB3sxn/MA4GA1UdDwEB/wQE
AwIHgDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kuY28vcmVwby9IWVNQ
LzAvMDY2MTgxMjZBNEYyMTA3NDVDQUJFNzNFRUQ0NDVBMTA3N0IzMTlGRi5jcmww
gfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5h
cmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQw
M2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3
MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy82
NTA2YTY2ZWQwZWY3YWE2YWY0ODJjZjc0OTQxZTY3MGVkNjZkNGRhZDU1MmQ2MTAy
OS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jwa2ku
Y28vcmVwby9IWVNQLzAvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMjMwMzAzYTNhMmYz
NDMwMmQzNDM4MjAzZDNlMjAzMjMwMzUzNDMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAmAvwjAjAN
BgkqhkiG9w0BAQsFAAOCAQEAuavyNRcD8dEqohH73uBfvakBMvlul+ANKqwfU5AB
wnhWU35jyV4sAfhjEGYpHpjE7qE28J62afBkj/f7w7JgpEN2muXCDLjG1yZMk8W7
K7/+vMkshfABjxoEBkOUOYk+pfVWhc5QU44aGLFYSlN+Fgmmul0qVogYtPMpnDF/
+2ub9fis3bJZxzQTiRwqfA2TcaoxS6ms8si4Nev8cwEdkmMGRkc81ya/RdTMStYw
FD8bXRmXFnwNms6VGL8QN9DeO61vl87owFC8LW8zSdxcNyy2KA4DnpDE1ymfzaYi
Hne0kgpFv8F7js2f32tY0RXisU4msM0CjMxjMQzONgKH1A==
-----END CERTIFICATE-----