Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
File:                     323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          lAsJDQhwRK5fbEE+5B0K+TqFTG8WxSDx1sWTIYo3vOs=
Subject key identifier:   D7:21:BB:FA:F9:23:FC:C6:59:5B:84:1F:68:F9:28:FC:06:E8:48:77
Certificate issuer:       /CN=2B0F671D7AE79173881896E45806BAE58D91D4D6
Certificate serial:       307CA1D02FB4FE0E13C0EC27DDF2025327674466
Authority key identifier: 2B:0F:67:1D:7A:E7:91:73:88:18:96:E4:58:06:BA:E5:8D:91:D4:D6
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/2B0F671D7AE79173881896E45806BAE58D91D4D6.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
Signing time:             Sat 21 Jan 2023 18:46:47 +0000
ROA not before:           Sat 21 Jan 2023 18:41:47 +0000
ROA not after:            Sat 20 Jan 2024 18:46:47 +0000
asID:                     50224
IP address blocks:        2602:fac2:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7c:a1:d0:2f:b4:fe:0e:13:c0:ec:27:dd:f2:02:53:27:67:44:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0F671D7AE79173881896E45806BAE58D91D4D6
        Validity
            Not Before: Jan 21 18:41:47 2023 GMT
            Not After : Jan 20 18:46:47 2024 GMT
        Subject: CN=D721BBFAF923FCC6595B841F68F928FC06E84877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:50:15:c7:3c:92:9b:95:b3:32:c5:db:a6:
                    e0:73:ae:29:3d:38:73:a2:77:ca:32:35:86:1d:fe:
                    9d:cb:b7:40:92:0f:07:9d:b2:21:af:5a:d9:5b:e2:
                    ab:3e:b1:d5:47:81:21:d6:2f:f3:33:3f:58:92:cb:
                    1f:cf:5d:ed:03:70:6d:66:f5:70:04:a2:6b:c3:a3:
                    d2:e2:2b:94:fb:72:40:bc:61:3f:68:07:ac:e1:ec:
                    fe:9b:96:42:29:3d:c9:a4:b0:44:19:3b:b8:5d:33:
                    c0:e6:fc:28:8b:b3:5e:f0:e0:43:9d:a1:ec:c1:55:
                    c7:f2:f0:e7:36:db:92:3e:26:da:25:47:41:21:3a:
                    a3:01:99:0f:eb:14:4a:34:20:d2:e2:a9:1f:c7:19:
                    eb:d7:1d:00:aa:28:f5:a3:67:11:a5:3a:0d:a3:ff:
                    f8:e7:3e:1e:b1:09:66:9c:53:f4:2f:90:ec:a1:36:
                    25:a5:04:0d:61:a1:72:78:6b:b4:23:6e:69:b0:bd:
                    3e:79:ce:e3:4d:e6:c8:be:c7:6c:28:df:59:64:d2:
                    bb:8f:a5:db:ef:62:b0:8c:c4:6a:ec:45:f7:11:57:
                    e3:96:5c:e0:b6:6d:a9:39:6e:5d:de:4a:9a:6b:d3:
                    17:26:f6:b2:44:0d:2a:2a:98:eb:46:fc:d0:22:66:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:21:BB:FA:F9:23:FC:C6:59:5B:84:1F:68:F9:28:FC:06:E8:48:77
            X509v3 Authority Key Identifier:
                keyid:2B:0F:67:1D:7A:E7:91:73:88:18:96:E4:58:06:BA:E5:8D:91:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/5/2B0F671D7AE79173881896E45806BAE58D91D4D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/2B0F671D7AE79173881896E45806BAE58D91D4D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/5/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:ef:88:d2:d5:1a:fe:26:22:ff:2c:c7:32:72:e5:55:f5:
         6b:df:f1:1c:85:aa:f2:98:46:99:de:a9:d6:66:f6:3d:b3:ff:
         2d:77:b8:ff:dc:7c:62:a0:5c:1a:b8:3f:8b:6c:1f:c0:b6:47:
         45:0b:75:da:fa:e0:d8:ce:b0:ba:cc:c7:a0:07:e2:99:54:06:
         13:9c:1a:6f:e0:67:f6:b7:02:7f:50:56:af:ef:91:53:41:4b:
         c7:79:ba:21:51:d8:a7:e9:4e:3c:cb:89:3c:2f:88:5b:25:97:
         55:9a:42:83:06:7d:b8:28:a9:6e:3d:fa:4b:ec:f0:70:5a:c4:
         a6:99:0d:0a:cd:97:75:22:9e:c9:11:5e:72:fb:55:b1:62:c7:
         5f:ba:bd:b9:d7:de:63:ee:a6:b4:50:75:56:f2:ec:42:09:30:
         0e:a7:41:48:e8:69:47:11:4b:25:da:c5:d4:89:1a:d7:8b:4e:
         ff:fa:77:ff:5b:61:e9:2e:56:37:ee:49:9b:ed:75:2b:4b:4d:
         04:17:1e:66:5f:22:06:f3:26:8c:42:36:f6:20:b0:82:2e:25:
         7e:af:3f:a5:6b:5d:96:2d:3f:04:c5:61:24:49:e4:04:93:75:
         81:52:0e:08:31:bf:65:98:a9:c8:57:56:d4:c3:1c:22:67:1a:
         35:a6:45:13
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUMHyh0C+0/g4TwOwn3fICUydnRGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIwRjY3MUQ3QUU3OTE3Mzg4MTg5NkU0NTgwNkJBRTU4
RDkxRDRENjAeFw0yMzAxMjExODQxNDdaFw0yNDAxMjAxODQ2NDdaMDMxMTAvBgNV
BAMTKEQ3MjFCQkZBRjkyM0ZDQzY1OTVCODQxRjY4RjkyOEZDMDZFODQ4NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi4VAVxzySm5WzMsXbpuBzrik9
OHOid8oyNYYd/p3Lt0CSDwedsiGvWtlb4qs+sdVHgSHWL/MzP1iSyx/PXe0DcG1m
9XAEomvDo9LiK5T7ckC8YT9oB6zh7P6blkIpPcmksEQZO7hdM8Dm/CiLs17w4EOd
oezBVcfy8Oc225I+JtolR0EhOqMBmQ/rFEo0INLiqR/HGevXHQCqKPWjZxGlOg2j
//jnPh6xCWacU/QvkOyhNiWlBA1hoXJ4a7QjbmmwvT55zuNN5si+x2wo31lk0ruP
pdvvYrCMxGrsRfcRV+OWXOC2bak5bl3eSppr0xcm9rJEDSoqmOtG/NAiZoa1AgMB
AAGjggImMIICIjAdBgNVHQ4EFgQU1yG7+vkj/MZZW4QfaPko/AboSHcwHwYDVR0j
BBgwFoAUKw9nHXrnkXOIGJbkWAa65Y2R1NYwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9yZXBvL015
dGhpY2FsS2l0dGVuLzUvMkIwRjY3MUQ3QUU3OTE3Mzg4MTg5NkU0NTgwNkJBRTU4
RDkxRDRENi5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1
MjEwMTg1MGI2NWIxMGIzNThiLzAvMkIwRjY3MUQ3QUU3OTE3Mzg4MTg5NkU0NTgw
NkJBRTU4RDkxRDRENi5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpLmtpdHRlbi5uZXR3b3JrL3JlcG8vTXl0aGljYWxLaXR0ZW4v
NS8zMjM2MzAzMjNhNjY2MTYzMzIzYTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+sIABjANBgkqhkiG9w0BAQsFAAOCAQEA
RhrviNLVGv4mIv8sxzJy5VX1a9/xHIWq8phGmd6p1mb2PbP/LXe4/9x8YqBcGrg/
i2wfwLZHRQt12vrg2M6wuszHoAfimVQGE5wab+Bn9rcCf1BWr++RU0FLx3m6IVHY
p+lOPMuJPC+IWyWXVZpCgwZ9uCipbj36S+zwcFrEppkNCs2XdSKeyRFecvtVsWLH
X7q9udfeY+6mtFB1VvLsQgkwDqdBSOhpRxFLJdrF1Ika14tO//p3/1th6S5WN+5J
m+11K0tNBBceZl8iBvMmjEI29iCwgi4lfq8/pWtdli0/BMVhJEnkBJN1gVIOCDG/
ZZipyFdW1MMcImcaNaZFEw==
-----END CERTIFICATE-----