Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/13/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa
File:                     32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa (raw, json)
Hash identifier:          NyyWqYaRJftv62H5zo3b7Yf5KTJYRWBkQEseArWXWa8=
Subject key identifier:   50:6E:6F:1A:DC:CE:25:CA:6C:08:94:1F:F7:F9:83:25:06:A3:D3:7B
Certificate issuer:       /CN=62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798
Certificate serial:       30DA786836CCCDDB7853B5E60A5BB5D6DBEE681B
Authority key identifier: 66:E3:DF:F6:91:62:45:9A:12:A7:8D:3B:03:E2:E4:26:3C:B9:F7:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798.cer
Subject info access:      rsync://rpki.co/repo/HYSP/13/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa
Signing time:             Sat 08 Apr 2023 03:25:18 +0000
ROA not before:           Sat 08 Apr 2023 03:20:18 +0000
ROA not after:            Sat 06 Apr 2024 03:25:18 +0000
asID:                     212895
IP address blocks:        23.149.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:da:78:68:36:cc:cd:db:78:53:b5:e6:0a:5b:b5:d6:db:ee:68:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798
        Validity
            Not Before: Apr  8 03:20:18 2023 GMT
            Not After : Apr  6 03:25:18 2024 GMT
        Subject: CN=506E6F1ADCCE25CA6C08941FF7F9832506A3D37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:38:70:eb:e0:c4:8b:43:84:dd:df:fe:ea:
                    00:29:f6:3d:be:2a:51:2d:1b:f7:dd:c5:79:01:6b:
                    68:cf:14:ea:67:d6:bf:a3:08:04:30:71:64:92:6a:
                    83:34:b6:b9:ea:61:f1:f9:62:7e:a3:0c:46:c1:ea:
                    44:ec:54:e9:db:dd:e1:13:fb:23:fa:4e:90:cc:8c:
                    62:d6:a8:83:5a:65:25:90:25:ec:8d:78:2d:9a:9a:
                    78:84:e3:86:be:29:3e:86:e5:36:de:a9:85:14:15:
                    44:40:3f:d5:37:04:c6:f7:da:22:2b:7d:10:56:03:
                    bb:7e:fc:8c:75:13:0e:ad:1b:25:23:f9:0e:53:c7:
                    be:30:73:76:b5:44:5e:66:ae:5d:68:41:62:2f:a1:
                    1a:29:63:0b:cd:1b:56:bb:c0:0a:b9:7d:5a:ee:06:
                    a2:c1:08:85:01:f9:8f:a6:9b:dd:00:72:27:a7:83:
                    69:1c:33:b4:48:52:10:8a:52:3a:78:96:14:a6:77:
                    1e:8b:19:0e:87:d0:ed:86:35:7a:44:93:49:fd:59:
                    b2:4e:0e:d5:af:cc:7f:7a:d4:21:25:d3:80:7e:97:
                    c6:03:67:3e:48:a1:cc:f7:70:f4:9c:35:47:4d:f7:
                    df:35:70:bd:a9:00:9a:61:5a:86:31:6d:46:10:6c:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6E:6F:1A:DC:CE:25:CA:6C:08:94:1F:F7:F9:83:25:06:A3:D3:7B
            X509v3 Authority Key Identifier:
                keyid:66:E3:DF:F6:91:62:45:9A:12:A7:8D:3B:03:E2:E4:26:3C:B9:F7:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/13/66E3DFF69162459A12A78D3B03E2E4263CB9F7B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/13/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:60:7b:2a:6a:fc:b8:b1:ca:9d:1f:5f:3d:26:28:f0:55:88:
         05:f6:22:85:a4:81:33:e5:0d:02:9f:3f:4d:56:d0:8e:22:8b:
         0f:da:49:f8:33:38:90:29:b1:d3:24:6a:85:d1:a7:61:fc:79:
         f0:72:96:a7:7c:7d:97:d5:70:1c:f7:fd:c9:db:18:95:66:9c:
         81:30:6c:f9:3b:6d:60:6e:97:9b:8e:fb:08:f8:22:b3:09:e5:
         32:d7:3b:10:67:83:d4:57:f1:2b:35:d1:7b:77:a9:20:eb:59:
         d2:51:c0:4d:d3:7e:25:fc:1e:d6:a1:6f:2a:9a:4a:f5:53:66:
         52:90:fb:80:09:4c:66:9f:d3:22:f1:4d:65:9b:97:16:e3:93:
         5f:db:93:7c:fb:b0:05:42:42:15:31:82:1c:ef:2f:b4:be:62:
         cb:d4:37:a5:4d:db:d0:ba:2f:94:cd:08:df:98:f2:e2:62:16:
         cc:7a:dd:c3:06:df:97:33:c6:79:1b:93:33:22:cd:79:cb:cb:
         3a:99:9f:1a:5d:fe:1c:2b:40:fc:35:50:19:cd:03:0a:50:ff:
         23:3c:01:c6:8f:49:bf:f3:3a:46:04:b4:eb:00:65:32:27:2f:
         50:11:74:18:c3:fa:97:89:ef:d1:c2:b1:23:db:c2:fb:ce:3c:
         6d:a6:99:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:26 2023 by rpki-client on console-ams.rpki-client.org