Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa
File:                     323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          +Duld6kvS6tL0H55yyMNJYZfs0YeFmgw3o2qQ7IoSpk=
Subject key identifier:   FA:A7:0C:28:3E:52:30:66:B5:3C:66:3D:D1:F7:0A:19:F6:A4:82:8C
Certificate issuer:       /CN=2B0F671D7AE79173881896E45806BAE58D91D4D6
Certificate serial:       758EFB5C1494133A606BDAF83087CC128C940495
Authority key identifier: 2B:0F:67:1D:7A:E7:91:73:88:18:96:E4:58:06:BA:E5:8D:91:D4:D6
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/2B0F671D7AE79173881896E45806BAE58D91D4D6.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa
Signing time:             Fri 10 Feb 2023 01:30:28 +0000
ROA not before:           Fri 10 Feb 2023 01:25:28 +0000
ROA not after:            Fri 09 Feb 2024 01:30:28 +0000
asID:                     204857
IP address blocks:        2602:fac2:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8e:fb:5c:14:94:13:3a:60:6b:da:f8:30:87:cc:12:8c:94:04:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0F671D7AE79173881896E45806BAE58D91D4D6
        Validity
            Not Before: Feb 10 01:25:28 2023 GMT
            Not After : Feb  9 01:30:28 2024 GMT
        Subject: CN=FAA70C283E523066B53C663DD1F70A19F6A4828C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:fd:6d:fe:bd:c4:b8:7e:aa:e1:af:51:c9:
                    02:39:35:3c:a5:c4:8d:0d:21:f9:fc:d6:21:b6:2d:
                    d1:83:9c:77:70:63:dd:0f:68:b6:8a:63:f5:19:9a:
                    46:22:03:df:55:66:ff:bc:bb:0b:00:92:0b:ba:9e:
                    41:bd:2a:cc:b3:cc:05:bb:42:7c:cc:5f:49:eb:cf:
                    2c:40:0b:8e:4c:1f:09:a8:d9:34:4c:f5:47:f1:c6:
                    86:6f:81:3a:a7:b4:a1:98:33:58:fc:c9:14:8b:c8:
                    61:3b:42:a4:84:1e:c6:76:96:a0:fc:c0:ed:05:ba:
                    ce:52:d8:bb:08:d5:98:c7:86:3c:04:27:48:d2:fa:
                    c9:41:df:ae:77:c5:11:71:57:ad:37:9e:d4:85:fe:
                    a7:fa:3d:a2:d1:d1:4b:5b:75:9b:2c:3b:e0:dd:da:
                    a8:5b:48:62:b6:9e:19:91:99:7a:47:2c:d1:a9:f8:
                    7a:c9:21:da:5c:00:88:98:87:1b:8b:75:cd:72:45:
                    ed:fd:bc:96:e1:b2:4e:b7:23:ed:3f:bb:95:d1:31:
                    40:fe:10:73:cd:36:0d:ab:42:6f:f8:95:00:0e:c9:
                    fc:39:3f:93:8c:fe:76:48:f6:1a:cf:89:f9:82:95:
                    ab:0e:25:d6:6e:90:21:83:68:6b:4b:2e:f3:05:b5:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A7:0C:28:3E:52:30:66:B5:3C:66:3D:D1:F7:0A:19:F6:A4:82:8C
            X509v3 Authority Key Identifier:
                keyid:2B:0F:67:1D:7A:E7:91:73:88:18:96:E4:58:06:BA:E5:8D:91:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/5/2B0F671D7AE79173881896E45806BAE58D91D4D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/2B0F671D7AE79173881896E45806BAE58D91D4D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:fb:9d:fe:ec:01:60:36:3e:d2:c8:3d:e1:24:c9:a6:95:
         46:3d:7f:26:52:7a:9f:2c:1d:87:8f:73:a9:a0:9a:39:10:7f:
         77:70:a3:15:77:09:b4:a9:19:15:20:07:f7:9e:52:95:78:e8:
         e6:38:f9:4a:8c:dc:e5:bc:07:16:dd:86:1d:0a:7b:00:2d:7a:
         d6:08:e0:ca:2a:a7:93:32:c0:9a:a8:a9:d1:00:42:0c:29:25:
         f7:23:d9:fb:28:bf:5b:78:5b:dd:2f:5d:59:28:8e:d7:fe:cd:
         bb:9b:41:90:6b:03:1e:21:97:42:71:dc:37:cd:17:ea:05:10:
         20:4f:dd:f2:57:37:44:0e:61:36:22:19:47:ce:6f:9c:5f:d8:
         3b:84:18:da:6c:7a:37:9f:59:12:d6:e1:24:04:b1:1a:3f:c4:
         2a:37:31:f1:fe:28:fe:2d:9f:4d:64:19:cf:08:db:31:78:a3:
         dd:03:67:34:be:44:1d:f8:6b:48:ec:a9:a5:8b:7f:e1:40:f5:
         de:e7:42:fd:2e:3f:e2:97:b6:cc:50:89:8d:90:32:81:fb:d8:
         db:b4:96:63:e5:3c:16:90:50:c4:e9:d2:9f:cc:cb:58:2d:0f:
         c4:fa:1e:97:cf:e8:f5:6a:1a:1e:c9:a8:6d:8f:7f:a7:51:1d:
         cd:e9:60:f9
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUdY77XBSUEzpga9r4MIfMEoyUBJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwRjY3MUQ3QUU3OTE3Mzg4MTg5NkU0NTgwNkJBRTU4
RDkxRDRENjAeFw0yMzAyMTAwMTI1MjhaFw0yNDAyMDkwMTMwMjhaMDMxMTAvBgNV
BAMTKEZBQTcwQzI4M0U1MjMwNjZCNTNDNjYzREQxRjcwQTE5RjZBNDgyOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRM/1t/r3EuH6q4a9RyQI5NTyl
xI0NIfn81iG2LdGDnHdwY90PaLaKY/UZmkYiA99VZv+8uwsAkgu6nkG9KsyzzAW7
QnzMX0nrzyxAC45MHwmo2TRM9UfxxoZvgTqntKGYM1j8yRSLyGE7QqSEHsZ2lqD8
wO0Fus5S2LsI1ZjHhjwEJ0jS+slB3653xRFxV603ntSF/qf6PaLR0UtbdZssO+Dd
2qhbSGK2nhmRmXpHLNGp+HrJIdpcAIiYhxuLdc1yRe39vJbhsk63I+0/u5XRMUD+
EHPNNg2rQm/4lQAOyfw5P5OM/nZI9hrPifmClasOJdZukCGDaGtLLvMFtdjXAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQU+qcMKD5SMGa1PGY90fcKGfakgowwHwYDVR0j
BBgwFoAUKw9nHXrnkXOIGJbkWAa65Y2R1NYwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9yZXBvL015
dGhpY2FsS2l0dGVuLzUvMkIwRjY3MUQ3QUU3OTE3Mzg4MTg5NkU0NTgwNkJBRTU4
RDkxRDRENi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1
MjEwMTg1MGI2NWIxMGIzNThiLzAvMkIwRjY3MUQ3QUU3OTE3Mzg4MTg5NkU0NTgw
NkJBRTU4RDkxRDRENi5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9yZXBvL015dGhpY2FsS2l0dGVu
LzUvMzIzNjMwMzIzYTY2NjE2MzMyM2EzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2Uy
MDMyMzAzNDM4MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+sIABjANBgkqhkiG9w0BAQsFAAOC
AQEAQBz7nf7sAWA2PtLIPeEkyaaVRj1/JlJ6nywdh49zqaCaORB/d3CjFXcJtKkZ
FSAH955SlXjo5jj5Sozc5bwHFt2GHQp7AC161gjgyiqnkzLAmqip0QBCDCkl9yPZ
+yi/W3hb3S9dWSiO1/7Nu5tBkGsDHiGXQnHcN80X6gUQIE/d8lc3RA5hNiIZR85v
nF/YO4QY2mx6N59ZEtbhJASxGj/EKjcx8f4o/i2fTWQZzwjbMXij3QNnNL5EHfhr
SOyppYt/4UD13udC/S4/4pe2zFCJjZAygfvY27SWY+U8FpBQxOnSn8zLWC0PxPoe
l8/o9WoaHsmobY9/p1Edzelg+Q==
-----END CERTIFICATE-----