Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/0/323630323a666332333a3a2f33362d3336203d3e203530303538.roa
File:                     323630323a666332333a3a2f33362d3336203d3e203530303538.roa (raw, json)
Hash identifier:          OtBbBpyEfFlelBe+3Lk2uDmcS2KLFM8MjRsxhVpDnD4=
Subject key identifier:   5B:85:E5:CE:0B:ED:40:26:57:29:A1:83:93:C6:33:0C:86:92:05:8C
Certificate issuer:       /CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
Certificate serial:       553360AE39EF6106CE44A6C58915AC066D1BB0E5
Authority key identifier: 06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer
Subject info access:      rsync://rpki.co/repo/HYSP/0/323630323a666332333a3a2f33362d3336203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:25:55 +0000
ROA not before:           Sat 08 Apr 2023 03:20:55 +0000
ROA not after:            Sat 06 Apr 2024 03:25:55 +0000
asID:                     50058
IP address blocks:        2602:fc23::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:33:60:ae:39:ef:61:06:ce:44:a6:c5:89:15:ac:06:6d:1b:b0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029
        Validity
            Not Before: Apr  8 03:20:55 2023 GMT
            Not After : Apr  6 03:25:55 2024 GMT
        Subject: CN=5B85E5CE0BED40265729A18393C6330C8692058C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3c:4b:54:cd:e4:2d:7c:12:d7:04:a6:e1:c4:
                    97:07:79:48:60:ba:53:1e:0c:68:fc:28:e3:cc:48:
                    44:f9:79:b3:52:df:31:49:0a:66:dc:30:b1:ad:16:
                    72:04:d2:fd:53:ed:14:5c:18:7a:fd:f8:8e:85:4e:
                    28:4d:81:70:80:36:0f:3b:08:02:49:38:23:2c:41:
                    c1:d8:19:1f:66:95:c4:67:1d:9d:aa:fe:b7:a5:49:
                    95:cf:44:eb:bd:77:10:73:5b:55:53:7c:07:9f:f2:
                    4f:e8:f4:b3:fc:08:ba:45:e9:c9:06:21:68:52:fd:
                    59:a0:bb:6a:bd:4c:c6:97:24:9a:0f:49:12:e2:0d:
                    56:a2:16:ff:dd:2a:49:94:6f:b5:80:f1:61:2f:54:
                    03:b0:29:3c:38:ff:1c:c7:39:ea:d7:5f:fb:f6:ce:
                    4f:2a:32:0f:0e:1d:19:50:b5:d8:b9:d6:f2:24:b0:
                    4e:85:98:b7:73:06:ee:26:92:d2:f0:28:ac:fb:f9:
                    52:23:44:f1:a9:b0:47:97:2e:33:96:14:dd:00:fb:
                    4f:6e:ad:53:40:b9:93:3e:35:40:cf:1b:c0:e5:f4:
                    ef:32:98:a8:11:f8:a4:e8:29:32:b7:8c:2d:e3:03:
                    dd:e2:5a:42:86:88:e0:10:c8:be:35:0b:ea:e4:8c:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:85:E5:CE:0B:ED:40:26:57:29:A1:83:93:C6:33:0C:86:92:05:8C
            X509v3 Authority Key Identifier:
                keyid:06:61:81:26:A4:F2:10:74:5C:AB:E7:3E:ED:44:5A:10:77:B3:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/0/06618126A4F210745CABE73EED445A1077B319FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0ef7aa6af482cf74941e670ed66d4dad552d61029.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/0/323630323a666332333a3a2f33362d3336203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:31:18:6f:99:94:f1:03:f6:2d:11:e2:16:d6:a6:c8:2d:
         8a:f9:03:4f:0e:80:f4:3f:20:b8:4f:3a:d0:8c:0c:37:d5:46:
         ce:42:21:3e:e8:b0:54:25:0c:99:86:fb:0e:d7:b2:41:34:11:
         fe:49:e7:55:01:3f:b6:54:e0:c2:92:c7:0b:a9:7b:6f:78:47:
         57:c2:8a:ed:fa:80:48:a0:b2:21:3b:f1:fd:1d:d7:82:3b:e9:
         52:ea:c5:b3:06:e7:31:7a:53:d9:21:0d:2b:b0:9f:a5:30:41:
         96:c3:f3:4f:8a:5e:f6:0a:59:f3:92:2f:f8:82:88:11:58:58:
         2b:8c:f7:46:27:93:18:10:5e:13:7b:bb:0f:8c:1c:17:35:9f:
         ac:f2:bd:b5:c5:d2:13:a2:61:c6:65:46:43:fd:c8:18:c2:48:
         17:58:6c:fe:5a:49:de:12:ee:c3:50:f4:ea:53:cc:65:c4:ea:
         89:09:a9:a6:2a:4e:50:42:04:4e:2c:c7:df:83:9c:e8:ec:99:
         98:22:fb:55:93:e8:30:e3:84:23:83:14:36:e7:55:61:85:2d:
         fa:f6:b2:44:48:75:9c:f1:90:fb:ec:9d:fc:6c:19:bf:99:ad:
         8c:19:1b:0a:ed:a3:1f:49:99:43:bc:a9:01:bf:1d:88:20:49:
         e3:fd:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----