Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa
File:                     323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa (raw, json)
Hash identifier:          7LmBgoacOaKAiG8M3z4z8Acnp1UI8brbEkJnwOjOxYY=
Subject key identifier:   8B:2B:26:19:0A:2D:BC:E8:D9:33:B6:21:03:EE:E4:40:62:D7:D3:5C
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       1D0ECB2609C637B7F9AC88CFAD26143575E0E445
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa
Signing time:             Sat 08 Apr 2023 03:25:56 +0000
ROA not before:           Sat 08 Apr 2023 03:20:56 +0000
ROA not after:            Sat 06 Apr 2024 03:25:56 +0000
asID:                     57481
IP address blocks:        2602:fc23:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0e:cb:26:09:c6:37:b7:f9:ac:88:cf:ad:26:14:35:75:e0:e4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:56 2023 GMT
            Not After : Apr  6 03:25:56 2024 GMT
        Subject: CN=8B2B26190A2DBCE8D933B62103EEE44062D7D35C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:13:f5:8a:81:cc:84:da:08:63:fe:55:d7:
                    6c:62:58:5f:f5:8e:d2:94:68:38:7b:64:65:1c:1d:
                    e9:12:c9:07:b5:b4:cf:a2:20:f9:ed:6f:bf:05:04:
                    24:ab:0f:4c:1b:f3:95:b9:09:e2:0d:44:1f:e9:4e:
                    cd:c6:4c:c5:68:d4:fe:04:56:ad:8b:d0:12:2a:3e:
                    e0:96:e9:b7:85:e6:79:74:97:99:dd:86:a0:9d:c9:
                    ed:2f:9a:41:c3:ec:da:c3:fc:93:c5:d2:57:06:a2:
                    cd:32:01:56:7d:e5:f3:7c:6f:1f:ea:71:37:00:5b:
                    12:ee:7a:da:67:1f:7c:89:6e:e8:89:82:7f:ff:43:
                    00:d7:00:1d:4d:80:02:59:d2:4b:a4:4e:c3:86:af:
                    c3:f1:0c:12:40:d4:08:ff:9c:3d:91:7f:7c:14:39:
                    db:8c:ff:e8:2d:a0:06:6b:36:ff:4e:f1:6e:d7:58:
                    64:59:93:dd:42:5a:17:58:7c:a8:8c:d0:c2:6d:35:
                    78:23:b3:69:86:24:0f:52:a5:e9:29:ba:8b:72:d2:
                    ca:18:4f:a7:18:f4:d0:e8:e4:d7:c6:79:82:fd:8c:
                    91:1f:ee:c7:d7:86:2e:49:66:b2:f3:ec:2e:17:11:
                    b2:5f:61:a5:af:e6:4d:36:e3:d2:c6:65:52:06:f0:
                    72:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2B:26:19:0A:2D:BC:E8:D9:33:B6:21:03:EE:E4:40:62:D7:D3:5C
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3330303a3a2f34302d3430203d3e203537343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:3b:5f:11:b2:e2:b2:fa:d5:a4:4c:ad:a0:9e:54:bd:b1:a6:
         c4:f4:22:d5:41:b9:ef:aa:c2:3c:23:26:e2:36:6d:b6:cb:db:
         bd:a7:7b:45:c7:09:f5:65:af:7b:c4:76:68:ab:63:65:4c:1f:
         20:fc:c5:1b:21:ce:03:31:e3:60:c4:fe:b1:02:f6:e8:60:0e:
         6a:fc:ef:67:e6:25:5a:8f:52:7f:a8:21:7e:ed:53:15:b2:f7:
         26:71:b3:fe:20:cc:e2:ae:ff:a7:26:66:42:0f:2b:a9:27:18:
         16:8c:71:f2:67:c7:7c:16:13:a9:e1:a1:8d:c9:a7:93:7a:05:
         67:2a:28:fb:80:2e:12:e0:b0:3d:8e:4a:97:f3:7b:a0:22:2e:
         e5:70:8e:76:ea:e4:e5:53:21:ff:b7:05:27:78:f2:6c:ce:1c:
         09:3c:8c:75:89:cf:4b:5b:50:4e:0b:42:94:8e:a0:75:20:4f:
         ee:64:28:96:5a:86:d0:f4:46:36:eb:13:b3:82:a1:51:90:d4:
         15:13:cd:ab:dc:95:46:1a:6a:d8:77:40:21:53:99:55:52:ee:
         c7:12:a4:4c:d8:72:bb:cf:56:a7:b5:98:6b:29:66:ae:dd:d7:
         ce:47:c4:65:fd:f0:cc:62:3d:c2:d1:8c:4f:d7:dc:9f:d8:9d:
         c9:ba:38:b3
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUHQ7LJgnGN7f5rIjPrSYUNXXg5EUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMGVmN2FhNmFmNDgyY2Y3NDk0MWU2NzBl
ZDY2ZDRkYWQ1NTJkNjEwMjkwHhcNMjMwNDA4MDMyMDU2WhcNMjQwNDA2MDMyNTU2
WjAzMTEwLwYDVQQDEyg4QjJCMjYxOTBBMkRCQ0U4RDkzM0I2MjEwM0VFRTQ0MDYy
RDdEMzVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcgT9YqBzITa
CGP+VddsYlhf9Y7SlGg4e2RlHB3pEskHtbTPoiD57W+/BQQkqw9MG/OVuQniDUQf
6U7NxkzFaNT+BFati9ASKj7glum3heZ5dJeZ3YagncntL5pBw+zaw/yTxdJXBqLN
MgFWfeXzfG8f6nE3AFsS7nraZx98iW7oiYJ//0MA1wAdTYACWdJLpE7Dhq/D8QwS
QNQI/5w9kX98FDnbjP/oLaAGazb/TvFu11hkWZPdQloXWHyojNDCbTV4I7NphiQP
UqXpKbqLctLKGE+nGPTQ6OTXxnmC/YyRH+7H14YuSWay8+wuFxGyX2Glr+ZNNuPS
xmVSBvBypQIDAQABo4ICXDCCAlgwHQYDVR0OBBYEFIsrJhkKLbzo2TO2IQPu5EBi
19NcMB8GA1UdIwQYMBaAFAZhgSak8hB0XKvnPu1EWhB3sxn/MA4GA1UdDwEB/wQE
AwIHgDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kuY28vcmVwby9IWVNQ
LzAvMDY2MTgxMjZBNEYyMTA3NDVDQUJFNzNFRUQ0NDVBMTA3N0IzMTlGRi5jcmww
gfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5h
cmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQw
M2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3
MjI3ZTk3MWFjL2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2M2YzNy82
NTA2YTY2ZWQwZWY3YWE2YWY0ODJjZjc0OTQxZTY3MGVkNjZkNGRhZDU1MmQ2MTAy
OS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2ku
Y28vcmVwby9IWVNQLzAvMzIzNjMwMzIzYTY2NjMzMjMzM2EzMzMwMzAzYTNhMmYz
NDMwMmQzNDMwMjAzZDNlMjAzNTM3MzQzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8IwMwDQYJ
KoZIhvcNAQELBQADggEBAJ87XxGy4rL61aRMraCeVL2xpsT0ItVBue+qwjwjJuI2
bbbL272ne0XHCfVlr3vEdmirY2VMHyD8xRshzgMx42DE/rEC9uhgDmr872fmJVqP
Un+oIX7tUxWy9yZxs/4gzOKu/6cmZkIPK6knGBaMcfJnx3wWE6nhoY3Jp5N6BWcq
KPuALhLgsD2OSpfze6AiLuVwjnbq5OVTIf+3BSd48mzOHAk8jHWJz0tbUE4LQpSO
oHUgT+5kKJZahtD0RjbrE7OCoVGQ1BUTzavclUYaath3QCFTmVVS7scSpEzYcrvP
Vqe1mGspZq7d185HxGX98MxiPcLRjE/X3J/Yncm6OLM=
-----END CERTIFICATE-----