Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323230353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3132393a323230353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          xbWufg8Zd04krQ9K3EDnC2BixiIt6b0jQ8Rz7Ec9ey4=
Subject key identifier:   42:28:7E:01:6A:62:AA:6C:E4:5B:3C:96:85:CE:BC:5C:C5:DF:15:4D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3920A48295F1146F40D945A8185FAC365DCA52B7
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323230353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 29 Jan 2022 22:05:01 +0000
ROA not before:           Sat 29 Jan 2022 22:00:01 +0000
ROA not after:            Sat 28 Jan 2023 22:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:129:2205::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:20:a4:82:95:f1:14:6f:40:d9:45:a8:18:5f:ac:36:5d:ca:52:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 29 22:00:01 2022 GMT
            Not After : Jan 28 22:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:82:b8:9a:be:51:4a:c3:80:6f:b0:57:7c:
                    66:37:d9:87:49:d6:c2:76:48:b6:86:8c:ee:ef:a5:
                    92:64:9f:59:bb:52:ce:46:16:7a:92:6e:92:2b:5d:
                    a0:a7:f0:70:b2:21:0c:e3:56:44:57:f7:71:ff:07:
                    6a:ea:7c:1c:72:37:1c:3b:34:eb:13:35:ce:de:0b:
                    a5:67:86:a8:b6:bf:a9:65:f6:c7:32:76:7d:99:70:
                    cd:31:df:9a:c5:83:1f:77:93:a7:80:4d:6f:de:d1:
                    72:a4:44:67:3c:98:f7:f6:05:db:a9:78:be:7c:d3:
                    1b:ca:70:50:c6:62:ba:ac:bf:1d:e2:e8:fc:c6:18:
                    64:a4:68:2f:db:ce:18:86:d4:1d:22:71:80:08:51:
                    94:ba:d9:90:ca:0c:9a:fe:4c:00:da:15:75:f7:bd:
                    97:f0:c7:a5:5f:80:b0:63:55:de:83:04:cc:31:a6:
                    83:7d:9a:46:48:c4:1a:80:95:a8:db:58:34:ed:ee:
                    88:0f:ff:27:61:90:e6:85:9d:d9:0b:8f:16:45:80:
                    cc:f5:c9:7d:77:ee:cb:e3:10:af:cc:f0:f0:2b:af:
                    0f:b3:21:8b:10:f1:88:a2:2a:c4:34:6f:39:7c:f2:
                    33:81:28:30:a6:06:3c:1d:1b:d9:92:c7:73:bf:a1:
                    d2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:28:7E:01:6A:62:AA:6C:E4:5B:3C:96:85:CE:BC:5C:C5:DF:15:4D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323230353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:129:2205::/80

    Signature Algorithm: sha256WithRSAEncryption
         65:32:56:f6:4c:ea:9b:2d:94:f3:64:e6:37:0b:c8:90:24:7d:
         74:98:9f:89:3e:5e:db:d2:e4:90:8f:d9:bc:b0:7d:64:3e:b1:
         be:35:fd:61:db:0b:f5:35:50:53:27:86:2f:45:99:f8:a7:41:
         5d:24:8d:83:bd:45:38:9b:3f:96:2d:07:70:e1:4f:89:29:d7:
         8f:2e:6b:12:bb:fb:6a:be:18:fd:90:08:19:25:2f:5a:c8:2c:
         6e:24:56:26:8f:41:d5:b7:ee:d8:80:fe:e3:77:23:d2:6b:0d:
         02:63:d0:6a:00:93:9c:33:eb:b0:aa:9c:1a:03:e6:33:2f:27:
         6c:60:95:ee:49:07:30:16:8e:49:5d:34:ac:54:12:7b:9c:2f:
         0d:4f:41:9c:24:8c:4e:83:7f:92:87:ff:4a:33:38:11:2e:16:
         83:6b:c0:76:2e:69:2f:1e:06:5f:d7:4c:f0:1a:dd:04:ba:d4:
         7d:14:b8:fd:82:36:c1:c9:bf:d4:6f:71:91:27:b6:95:02:61:
         45:51:72:50:8e:ea:3b:93:63:aa:29:30:7b:e1:bc:74:5e:f9:
         56:7d:86:c2:e0:e6:12:cb:69:0e:b7:7d:95:44:17:6b:4e:a2:
         b8:d7:ea:d9:17:36:05:37:c3:5e:75:92:44:c2:ab:50:ad:8c:
         10:73:e3:b6
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUOSCkgpXxFG9A2UWoGF+sNl3KUrcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTI5MjIwMDAxWhcNMjMwMTI4MjIwNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEQyRjg4MkI4
OUFCRTUxNEFDMzgwNkZCMDU3N0M2NjM3RDk4NzQ5RDZDMjc2NDhCNjg2OENFRUVG
QTU5MjY0OUY1OUJCNTJDRTQ2MTY3QTkyNkU5MjJCNURBMEE3RjA3MEIyMjEwQ0Uz
NTY0NDU3Rjc3MUZGMDc2QUVBN0MxQzcyMzcxQzNCMzRFQjEzMzVDRURFMEJBNTY3
ODZBOEI2QkZBOTY1RjZDNzMyNzY3RDk5NzBDRDMxREY5QUM1ODMxRjc3OTNBNzgw
NEQ2RkRFRDE3MkE0NDQ2NzNDOThGN0Y2MDVEQkE5NzhCRTdDRDMxQkNBNzA1MEM2
NjJCQUFDQkYxREUyRThGQ0M2MTg2NEE0NjgyRkRCQ0UxODg2RDQxRDIyNzE4MDA4
NTE5NEJBRDk5MENBMEM5QUZFNEMwMERBMTU3NUY3QkQ5N0YwQzdBNTVGODBCMDYz
NTVERTgzMDRDQzMxQTY4MzdEOUE0NjQ4QzQxQTgwOTVBOERCNTgzNEVERUU4ODBG
RkYyNzYxOTBFNjg1OUREOTBCOEYxNjQ1ODBDQ0Y1Qzk3RDc3RUVDQkUzMTBBRkND
RjBGMDJCQUYwRkIzMjE4QjEwRjE4OEEyMkFDNDM0NkYzOTdDRjIzMzgxMjgzMEE2
MDYzQzFEMUJEOTkyQzc3M0JGQTFEMjg1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANL4griavlFKw4BvsFd8ZjfZh0nWwnZItoaM7u+l
kmSfWbtSzkYWepJukitdoKfwcLIhDONWRFf3cf8Haup8HHI3HDs06xM1zt4LpWeG
qLa/qWX2xzJ2fZlwzTHfmsWDH3eTp4BNb97RcqREZzyY9/YF26l4vnzTG8pwUMZi
uqy/HeLo/MYYZKRoL9vOGIbUHSJxgAhRlLrZkMoMmv5MANoVdfe9l/DHpV+AsGNV
3oMEzDGmg32aRkjEGoCVqNtYNO3uiA//J2GQ5oWd2QuPFkWAzPXJfXfuy+MQr8zw
8CuvD7MhixDxiKIqxDRvOXzyM4EoMKYGPB0b2ZLHc7+h0oUCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBRCKH4BamKqbORbPJaFzrxcxd8VTTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMyMzkzYTMyMzIzMDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiASkiBTANBgkqhkiG
9w0BAQsFAAOCAQEAZTJW9kzqmy2U82TmNwvIkCR9dJifiT5e29LkkI/ZvLB9ZD6x
vjX9YdsL9TVQUyeGL0WZ+KdBXSSNg71FOJs/li0HcOFPiSnXjy5rErv7ar4Y/ZAI
GSUvWsgsbiRWJo9B1bfu2ID+43cj0msNAmPQagCTnDPrsKqcGgPmMy8nbGCV7kkH
MBaOSV00rFQSe5wvDU9BnCSMToN/kof/SjM4ES4Wg2vAdi5pLx4GX9dM8BrdBLrU
fRS4/YI2wcm/1G9xkSe2lQJhRVFyUI7qO5Njqikwe+G8dF75Vn2GwuDmEstpDrd9
lUQXa06iuNfq2Rc2BTfDXnWSRMKrUK2MEHPjtg==
-----END CERTIFICATE-----