Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/13/323630363a623063303a3a2f33362d3336203d3e20393435.roa
File:                     323630363a623063303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          j/FlLI/+f+VzuoqoHUQITcUTzxZKWnvlORiG/wYFSRY=
Subject key identifier:   38:7E:3F:4C:5D:17:A7:1E:28:2F:FA:74:37:FE:78:59:91:42:18:71
Certificate issuer:       /CN=62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798
Certificate serial:       548D34597EE9A43EA45BB97D6BE95A909653804B
Authority key identifier: 66:E3:DF:F6:91:62:45:9A:12:A7:8D:3B:03:E2:E4:26:3C:B9:F7:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798.cer
Subject info access:      rsync://rpki.co/repo/HYSP/13/323630363a623063303a3a2f33362d3336203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 03:25:17 +0000
ROA not before:           Sat 08 Apr 2023 03:20:17 +0000
ROA not after:            Sat 06 Apr 2024 03:25:17 +0000
asID:                     945
IP address blocks:        2606:b0c0::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8d:34:59:7e:e9:a4:3e:a4:5b:b9:7d:6b:e9:5a:90:96:53:80:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798
        Validity
            Not Before: Apr  8 03:20:17 2023 GMT
            Not After : Apr  6 03:25:17 2024 GMT
        Subject: CN=387E3F4C5D17A71E282FFA7437FE785991421871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:87:13:9d:4c:41:ac:a5:ab:fa:63:81:0a:
                    ce:be:e3:99:c4:64:8d:47:bc:d6:90:5a:84:96:8d:
                    da:bb:6e:57:d8:53:18:e6:c2:e1:1a:69:0f:8f:8f:
                    36:20:84:0c:6b:32:b1:f1:9c:e0:d6:a3:08:46:73:
                    63:ef:24:8c:d9:8d:55:f1:9c:82:c6:e1:e5:7c:53:
                    89:2e:0b:75:46:06:32:22:dd:c8:18:a0:48:03:81:
                    33:6b:4e:d8:e9:98:5c:7a:ce:63:f0:ac:40:b2:2f:
                    c4:29:f8:b5:fe:68:1a:6c:85:4a:8f:03:5d:59:b6:
                    5a:25:d2:ad:aa:5d:a7:a1:af:83:97:b7:e0:e3:67:
                    0f:49:30:16:4f:86:8e:1f:ce:d8:fe:f4:57:6c:9b:
                    32:2c:8f:72:e6:0a:26:c5:a4:19:3f:5d:a9:8d:a4:
                    93:4b:32:77:b7:46:64:c9:e3:d9:3c:ce:4e:e0:94:
                    bf:64:60:53:dd:19:ee:fb:fa:82:76:98:fc:53:40:
                    ec:1e:78:57:f5:4d:18:10:07:65:3a:a2:d0:2f:8a:
                    3b:ff:db:2b:71:3a:a6:8b:31:0f:73:3e:fc:ae:94:
                    c5:57:5d:d8:e5:ee:a2:ff:ff:b4:d4:2b:41:49:48:
                    66:8f:23:42:c1:f8:ea:81:7e:49:1f:ce:93:f7:17:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:3F:4C:5D:17:A7:1E:28:2F:FA:74:37:FE:78:59:91:42:18:71
            X509v3 Authority Key Identifier:
                keyid:66:E3:DF:F6:91:62:45:9A:12:A7:8D:3B:03:E2:E4:26:3C:B9:F7:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/13/66E3DFF69162459A12A78D3B03E2E4263CB9F7B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af161c486c9c77f1920be7eda3a6d867adf351fd5798.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/13/323630363a623063303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b0c0::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:bf:22:7b:a2:09:3d:d2:41:e0:6c:2f:65:ec:ee:07:8e:
         78:75:44:12:a6:99:c3:e8:27:78:d0:27:02:51:01:d0:80:96:
         94:a2:4b:79:5d:e2:b6:7f:a5:aa:00:09:15:c3:9d:ad:70:b6:
         16:12:a2:f5:cf:32:f0:fc:b2:32:2f:61:b5:f6:0d:8f:3a:d4:
         d1:a6:3d:05:a9:a0:60:bd:3f:a3:7e:08:1e:38:23:a3:1f:9c:
         92:df:f8:a0:5c:c4:c2:d2:d6:bd:04:12:43:d3:f8:78:61:23:
         de:94:2f:ec:68:92:eb:c5:e8:1e:a6:9e:af:5f:91:f6:eb:06:
         21:d9:a5:bc:e7:a3:98:e1:e3:83:c7:17:5e:92:ae:20:5d:16:
         76:fb:64:10:73:cb:78:71:33:9c:2f:2f:f3:79:72:47:07:77:
         7d:4f:6b:51:95:ec:6c:e4:16:77:1a:70:f5:f3:cf:f9:3c:c4:
         03:3d:b4:19:c4:9f:14:4b:bf:f7:84:f0:e6:04:b1:2e:d9:9e:
         3b:4d:12:bb:12:9b:ab:6b:83:4c:2b:dd:83:9a:6d:8a:92:35:
         bb:11:ef:0d:a1:40:51:f9:46:c5:89:44:c8:72:bc:b2:ec:8f:
         46:53:78:d6:52:d2:af:d5:92:cd:62:13:a7:2b:a4:fb:02:46:
         02:b4:b0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----