Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e203632383533.roa (raw, json)
Hash identifier:          /tUd2Iwvp3O8svC8uNxHoaGXnwRxFJ1p3mDIMRvaO+c=
Subject key identifier:   16:97:93:4A:CE:9D:6B:7D:A6:C4:6B:25:40:AA:A4:84:14:8C:82:7D
Certificate issuer:       /CN=7e6381cf358b835573195019f8321db1c81c6ebf389967614b
Certificate serial:       7A39BB70F104C9DF230A846A406B6D56A6655E07
Authority key identifier: 6C:8D:AE:92:3F:63:DC:0D:CD:49:82:0D:AE:F7:20:ED:76:43:43:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf358b835573195019f8321db1c81c6ebf389967614b.cer
Subject info access:      rsync://rpki.co/repo/HYSP/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa
Signing time:             Sat 08 Apr 2023 03:25:20 +0000
ROA not before:           Sat 08 Apr 2023 03:20:20 +0000
ROA not after:            Sat 06 Apr 2024 03:25:20 +0000
asID:                     62853
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:39:bb:70:f1:04:c9:df:23:0a:84:6a:40:6b:6d:56:a6:65:5e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf358b835573195019f8321db1c81c6ebf389967614b
        Validity
            Not Before: Apr  8 03:20:20 2023 GMT
            Not After : Apr  6 03:25:20 2024 GMT
        Subject: CN=1697934ACE9D6B7DA6C46B2540AAA484148C827D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:3d:23:be:d1:64:a2:59:42:a6:fd:ec:3c:
                    0e:7e:79:b0:e3:14:98:fa:00:67:7a:75:b8:3b:5f:
                    63:95:21:e5:d0:41:30:d5:3f:98:ec:8a:86:74:14:
                    06:de:b9:e9:03:3c:37:9f:df:b2:7c:a3:0a:43:40:
                    4c:01:9c:5c:a2:7a:06:dc:95:fc:87:b2:fc:3e:48:
                    ed:06:b4:db:c4:24:44:57:29:1c:6e:da:59:9d:17:
                    fa:80:25:e0:fb:9a:74:66:44:0c:c9:89:5c:06:8a:
                    47:32:6a:05:03:ae:f9:3f:32:8d:d2:7b:b4:49:6a:
                    c2:d5:d3:f7:3b:9a:9b:3c:3d:fa:58:35:66:b8:7f:
                    f2:1e:24:40:5d:e8:87:c1:f8:c9:c9:14:5c:fc:d1:
                    b6:cc:bd:16:8c:f7:fd:2b:c6:5e:d1:52:66:0b:07:
                    17:e4:dc:3e:bf:4f:96:6b:f4:47:53:1e:8a:ec:a7:
                    2e:2a:c8:a2:e3:a7:78:00:7f:75:6f:45:ca:0b:1b:
                    01:1b:0d:e6:3e:90:8e:1a:60:13:8e:9b:38:20:e3:
                    a8:34:ed:1e:8a:84:1e:c2:74:a9:da:43:09:36:90:
                    d5:f4:67:b7:5a:00:ab:91:04:f2:28:b9:f5:4a:f8:
                    9d:2d:99:da:a1:a4:d9:1c:b8:ad:5b:34:23:3d:33:
                    6c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:97:93:4A:CE:9D:6B:7D:A6:C4:6B:25:40:AA:A4:84:14:8C:82:7D
            X509v3 Authority Key Identifier:
                keyid:6C:8D:AE:92:3F:63:DC:0D:CD:49:82:0D:AE:F7:20:ED:76:43:43:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/10/6C8DAE923F63DC0DCD49820DAEF720ED7643438B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf358b835573195019f8321db1c81c6ebf389967614b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/10/32332e3133382e3233322e302f32342d3234203d3e203632383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:1b:66:92:1d:95:af:68:48:8d:4e:54:77:ed:f3:4e:89:
         11:4f:b7:c0:34:8c:50:58:fe:bc:b8:f5:3d:6f:30:1a:f3:98:
         e1:c7:d3:e8:08:dd:73:9b:68:42:34:10:08:85:bb:34:ba:c1:
         40:2a:49:d5:7f:a0:bf:0c:b8:7a:f8:e3:ec:2e:c6:20:62:d8:
         76:7e:a2:cc:00:fb:85:c2:a7:3a:2a:91:b7:1c:6b:bb:9c:c7:
         23:c5:f6:da:ff:1e:51:34:fc:85:1c:4b:2b:58:e7:c2:da:79:
         8c:8c:06:f2:23:09:83:39:1a:f2:c5:82:ca:5e:a9:c0:7b:f2:
         4f:63:8d:af:da:ef:46:69:61:79:09:ac:a5:2f:72:3f:52:3e:
         11:47:0d:9d:55:3d:b0:47:35:49:b9:6b:f7:59:f0:3f:1b:eb:
         c7:4b:bb:f8:72:36:0a:79:fb:6b:ba:ed:f0:7f:09:ab:1d:b2:
         40:ec:dc:c6:ec:2a:a1:ea:74:77:aa:87:5b:38:77:bd:46:7d:
         d6:94:3f:12:2a:91:1b:ec:90:fb:2e:d7:b9:ef:63:58:40:17:
         8b:ee:fa:7d:ee:a5:40:e8:9d:02:20:f4:59:e2:5b:72:d7:61:
         5e:65:ca:ba:d4:b0:07:65:18:a9:d3:e4:67:69:6c:3f:d5:b2:
         a0:0f:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----