Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3131383a313830353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3131383a313830353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          3bdsqnUdiUdqY2nu3U67hw8FNhjbCgR+IN5Dq1XApyw=
Subject key identifier:   0D:38:33:F9:91:DD:44:44:1A:93:01:E9:20:7A:E0:1C:50:89:E0:0E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       03CAA57521708C1EC4BD236D30C3B6FD44D99C3B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3131383a313830353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 18 Jan 2022 18:05:02 +0000
ROA not before:           Tue 18 Jan 2022 18:00:02 +0000
ROA not after:            Tue 17 Jan 2023 18:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:118:1805::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ca:a5:75:21:70:8c:1e:c4:bd:23:6d:30:c3:b6:fd:44:d9:9c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 18 18:00:02 2022 GMT
            Not After : Jan 17 18:05:02 2023 GMT
        Subject: CN=3082010A0282010100EFE9D72503C881D0E350F74A55467C0E253D87479D473838E1C9EFA931329ACBC7CC08CD651A4A08319580491C6CCE39C7B302CCB95B4F80A6DD9B558333EA6F1BC8989E826678A1F997DABABD04F2D8499A6A1589007607A7BECFDDF19AC474DFFFE58562F8A14936E5AF3C52C0D1745FCB2257F9B1B43D6287BA70258C110A8FF2C4BBE4424ED87696BEB8E5768557AFD228A01C13B7ACB0EFD5E897CC1FB6723605EC5C0280034F2FF7E0D95AA82823F3A7229AB7E861FBE881B0419F1C93C325237159991E14A78B37789DBD8E85AFB640B0D797029CBC779074ADA6AF5F6093FA7AEF874F46A01D56E09BA294539516936740F57AA10C7EA7451A2879B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e9:d7:25:03:c8:81:d0:e3:50:f7:4a:55:46:
                    7c:0e:25:3d:87:47:9d:47:38:38:e1:c9:ef:a9:31:
                    32:9a:cb:c7:cc:08:cd:65:1a:4a:08:31:95:80:49:
                    1c:6c:ce:39:c7:b3:02:cc:b9:5b:4f:80:a6:dd:9b:
                    55:83:33:ea:6f:1b:c8:98:9e:82:66:78:a1:f9:97:
                    da:ba:bd:04:f2:d8:49:9a:6a:15:89:00:76:07:a7:
                    be:cf:dd:f1:9a:c4:74:df:ff:e5:85:62:f8:a1:49:
                    36:e5:af:3c:52:c0:d1:74:5f:cb:22:57:f9:b1:b4:
                    3d:62:87:ba:70:25:8c:11:0a:8f:f2:c4:bb:e4:42:
                    4e:d8:76:96:be:b8:e5:76:85:57:af:d2:28:a0:1c:
                    13:b7:ac:b0:ef:d5:e8:97:cc:1f:b6:72:36:05:ec:
                    5c:02:80:03:4f:2f:f7:e0:d9:5a:a8:28:23:f3:a7:
                    22:9a:b7:e8:61:fb:e8:81:b0:41:9f:1c:93:c3:25:
                    23:71:59:99:1e:14:a7:8b:37:78:9d:bd:8e:85:af:
                    b6:40:b0:d7:97:02:9c:bc:77:90:74:ad:a6:af:5f:
                    60:93:fa:7a:ef:87:4f:46:a0:1d:56:e0:9b:a2:94:
                    53:95:16:93:67:40:f5:7a:a1:0c:7e:a7:45:1a:28:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:38:33:F9:91:DD:44:44:1A:93:01:E9:20:7A:E0:1C:50:89:E0:0E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3131383a313830353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:118:1805::/80

    Signature Algorithm: sha256WithRSAEncryption
         52:67:0a:c7:e8:ad:54:a3:a7:2f:1b:12:33:a4:b0:b8:aa:6c:
         b4:ef:74:3a:f8:b4:18:f7:5e:20:8f:bd:68:ea:ff:e4:43:d3:
         39:21:60:1a:c9:8e:3d:b9:89:89:3c:f8:5c:7f:8e:fb:0b:e5:
         dc:0c:ff:59:6b:cf:dd:46:75:20:86:bb:1b:ae:c0:95:d4:7d:
         f0:73:71:3e:dd:28:67:52:4a:29:62:7c:91:c3:fb:27:55:3b:
         5b:f1:49:79:61:fd:59:4f:b3:2a:17:a8:52:2e:9d:98:66:41:
         dd:29:23:34:75:1b:06:9e:62:e6:9a:04:88:36:ca:ae:49:41:
         84:05:c7:4b:59:8f:c4:8f:65:5b:f6:29:0e:6f:50:48:30:a0:
         ba:af:90:df:90:ed:a5:fc:31:6f:c0:ac:fb:c6:9b:76:1b:c5:
         97:da:a3:67:2e:4b:ec:0c:01:f4:f8:ef:1e:5d:7a:6d:08:4f:
         da:a9:b7:9c:b5:42:fc:dc:e5:01:f1:29:93:bc:51:7c:ce:30:
         c9:11:4e:2f:f1:cc:fc:5d:6e:72:d4:a8:91:55:de:48:a9:a3:
         36:6b:67:d6:51:50:e7:79:20:72:9b:ac:a1:38:98:7d:e6:29:
         c7:2c:54:20:3e:d4:e0:75:54:f6:37:09:a1:a2:18:ba:1a:3d:
         d1:92:b7:67
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUA8qldSFwjB7EvSNtMMO2/UTZnDswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTE4MTgwMDAyWhcNMjMwMTE3MTgwNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEVGRTlENzI1
MDNDODgxRDBFMzUwRjc0QTU1NDY3QzBFMjUzRDg3NDc5RDQ3MzgzOEUxQzlFRkE5
MzEzMjlBQ0JDN0NDMDhDRDY1MUE0QTA4MzE5NTgwNDkxQzZDQ0UzOUM3QjMwMkND
Qjk1QjRGODBBNkREOUI1NTgzMzNFQTZGMUJDODk4OUU4MjY2NzhBMUY5OTdEQUJB
QkQwNEYyRDg0OTlBNkExNTg5MDA3NjA3QTdCRUNGRERGMTlBQzQ3NERGRkZFNTg1
NjJGOEExNDkzNkU1QUYzQzUyQzBEMTc0NUZDQjIyNTdGOUIxQjQzRDYyODdCQTcw
MjU4QzExMEE4RkYyQzRCQkU0NDI0RUQ4NzY5NkJFQjhFNTc2ODU1N0FGRDIyOEEw
MUMxM0I3QUNCMEVGRDVFODk3Q0MxRkI2NzIzNjA1RUM1QzAyODAwMzRGMkZGN0Uw
RDk1QUE4MjgyM0YzQTcyMjlBQjdFODYxRkJFODgxQjA0MTlGMUM5M0MzMjUyMzcx
NTk5OTFFMTRBNzhCMzc3ODlEQkQ4RTg1QUZCNjQwQjBENzk3MDI5Q0JDNzc5MDc0
QURBNkFGNUY2MDkzRkE3QUVGODc0RjQ2QTAxRDU2RTA5QkEyOTQ1Mzk1MTY5MzY3
NDBGNTdBQTEwQzdFQTc0NTFBMjg3OUI1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAO/p1yUDyIHQ41D3SlVGfA4lPYdHnUc4OOHJ76kx
MprLx8wIzWUaSggxlYBJHGzOOcezAsy5W0+Apt2bVYMz6m8byJiegmZ4ofmX2rq9
BPLYSZpqFYkAdgenvs/d8ZrEdN//5YVi+KFJNuWvPFLA0XRfyyJX+bG0PWKHunAl
jBEKj/LEu+RCTth2lr645XaFV6/SKKAcE7essO/V6JfMH7ZyNgXsXAKAA08v9+DZ
WqgoI/OnIpq36GH76IGwQZ8ck8MlI3FZmR4Up4s3eJ29joWvtkCw15cCnLx3kHSt
pq9fYJP6eu+HT0agHVbgm6KUU5UWk2dA9XqhDH6nRRooebUCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQNODP5kd1ERBqTAekgeuAcUIngDjAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMxMzgzYTMxMzgzMDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiARgYBTANBgkqhkiG
9w0BAQsFAAOCAQEAUmcKx+itVKOnLxsSM6SwuKpstO90Ovi0GPdeII+9aOr/5EPT
OSFgGsmOPbmJiTz4XH+O+wvl3Az/WWvP3UZ1IIa7G67AldR98HNxPt0oZ1JKKWJ8
kcP7J1U7W/FJeWH9WU+zKheoUi6dmGZB3SkjNHUbBp5i5poEiDbKrklBhAXHS1mP
xI9lW/YpDm9QSDCguq+Q35Dtpfwxb8Cs+8abdhvFl9qjZy5L7AwB9PjvHl16bQhP
2qm3nLVC/NzlAfEpk7xRfM4wyRFOL/HM/F1uctSokVXeSKmjNmtn1lFQ53kgcpus
oTiYfeYpxyxUID7U4HVU9jcJoaIYuho90ZK3Zw==
-----END CERTIFICATE-----