Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323331353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3132393a323331353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          BnDozRLJmetsS7+aU2EopN8B6jMM9Insw5OQ2heimmY=
Subject key identifier:   9E:A0:DC:7F:E6:0F:2C:DE:99:BF:EC:08:58:58:93:C3:CA:8F:1D:C4
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0A4F69F47DB491AB22870AD55BA20D3C0025E7DC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323331353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 29 Jan 2022 23:15:02 +0000
ROA not before:           Sat 29 Jan 2022 23:10:02 +0000
ROA not after:            Sat 28 Jan 2023 23:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:129:2315::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4f:69:f4:7d:b4:91:ab:22:87:0a:d5:5b:a2:0d:3c:00:25:e7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 29 23:10:02 2022 GMT
            Not After : Jan 28 23:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:8c:76:67:7a:cd:f0:30:16:7f:f3:21:fc:
                    cb:2b:b4:c1:46:0d:09:41:0b:28:41:f4:f0:24:07:
                    14:4d:86:54:0f:b8:38:5d:fc:f9:9d:71:ee:73:6a:
                    af:ff:e4:b2:43:cc:cc:09:7d:26:12:9a:7d:32:47:
                    5f:03:6b:1d:9a:34:a0:c9:66:4c:a9:ed:5b:22:e5:
                    c7:2d:21:d4:b4:67:07:de:6a:5a:e1:62:31:33:d2:
                    90:16:8d:f3:10:d8:dd:92:9f:01:b5:48:d5:85:c0:
                    ce:f9:e9:8e:91:fc:ba:e7:14:31:fa:8d:4d:46:e3:
                    f2:1b:ac:43:1b:fe:6b:2f:1e:31:fb:9b:c7:4b:2f:
                    6a:5a:58:f3:e4:47:6d:02:96:2c:86:3b:73:5d:2c:
                    e2:35:c2:63:f7:cd:9b:fe:6a:12:5a:8c:60:21:0e:
                    56:7e:0c:62:ae:c1:42:ef:c3:c7:1e:d8:f1:81:97:
                    21:b7:ec:15:2f:52:ad:5b:d5:7d:59:27:80:f7:3a:
                    89:59:98:3c:6d:29:1e:b9:43:9c:c1:41:78:8b:57:
                    2f:ab:21:3c:66:d2:30:24:90:11:88:dc:d5:75:4c:
                    36:2f:38:be:ea:8a:fe:53:4c:39:40:3d:02:82:25:
                    04:2a:36:fd:35:cc:a6:ce:e3:46:33:2e:39:fa:cc:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A0:DC:7F:E6:0F:2C:DE:99:BF:EC:08:58:58:93:C3:CA:8F:1D:C4
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a323331353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:129:2315::/80

    Signature Algorithm: sha256WithRSAEncryption
         cf:cd:08:57:3c:db:f8:ed:2c:94:b1:52:50:fe:17:4b:4e:be:
         0f:d7:87:62:38:95:47:41:9a:fa:c8:88:e8:46:3c:83:79:39:
         1f:00:ce:9b:1c:4e:6a:9f:96:42:22:bc:00:bc:34:60:e5:c0:
         e3:39:e0:9f:e5:e4:86:9e:0b:0d:8f:8d:ae:02:ec:65:91:3d:
         19:cb:df:c4:7f:c4:b4:ec:aa:8a:29:92:34:44:c1:a8:fb:da:
         70:7e:39:bd:57:fe:a7:e6:b8:44:62:a7:ec:d3:06:da:88:c4:
         22:62:3f:96:b5:c0:e3:9d:ee:99:2a:63:b2:89:ae:b1:14:d4:
         69:af:c1:0c:d1:e5:1e:a8:25:61:2e:d5:38:ae:0c:de:7f:6e:
         6f:4d:0b:23:5b:ca:38:56:81:63:fd:e8:81:23:7e:56:c2:f7:
         ef:91:79:59:95:b5:50:3c:55:b4:1a:ae:f9:d0:a8:c7:15:ed:
         61:fb:8c:bf:62:dd:29:65:31:74:84:56:05:42:ed:3f:c8:7d:
         f4:02:db:dd:bf:95:98:f7:f6:02:66:04:d9:4f:d9:31:c6:94:
         02:b7:b5:0a:2b:f0:d7:d1:a6:60:83:0d:be:54:32:30:43:88:
         e3:a5:df:ba:c8:d2:1c:2f:8a:ae:32:04:bf:de:1a:fd:8b:f5:
         4d:1c:26:30
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUCk9p9H20kasihwrVW6INPAAl59wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTI5MjMxMDAyWhcNMjMwMTI4MjMxNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMDkzOEQ4Qzc2
Njc3QUNERjAzMDE2N0ZGMzIxRkNDQjJCQjRDMTQ2MEQwOTQxMEIyODQxRjRGMDI0
MDcxNDREODY1NDBGQjgzODVERkNGOTlENzFFRTczNkFBRkZGRTRCMjQzQ0NDQzA5
N0QyNjEyOUE3RDMyNDc1RjAzNkIxRDlBMzRBMEM5NjY0Q0E5RUQ1QjIyRTVDNzJE
MjFENEI0NjcwN0RFNkE1QUUxNjIzMTMzRDI5MDE2OERGMzEwRDhERDkyOUYwMUI1
NDhENTg1QzBDRUY5RTk4RTkxRkNCQUU3MTQzMUZBOEQ0RDQ2RTNGMjFCQUM0MzFC
RkU2QjJGMUUzMUZCOUJDNzRCMkY2QTVBNThGM0U0NDc2RDAyOTYyQzg2M0I3MzVE
MkNFMjM1QzI2M0Y3Q0Q5QkZFNkExMjVBOEM2MDIxMEU1NjdFMEM2MkFFQzE0MkVG
QzNDNzFFRDhGMTgxOTcyMUI3RUMxNTJGNTJBRDVCRDU3RDU5Mjc4MEY3M0E4OTU5
OTgzQzZEMjkxRUI5NDM5Q0MxNDE3ODhCNTcyRkFCMjEzQzY2RDIzMDI0OTAxMTg4
RENENTc1NEMzNjJGMzhCRUVBOEFGRTUzNEMzOTQwM0QwMjgyMjUwNDJBMzZGRDM1
Q0NBNkNFRTM0NjMzMkUzOUZBQ0MwQkRCMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJONjHZnes3wMBZ/8yH8yyu0wUYNCUELKEH08CQH
FE2GVA+4OF38+Z1x7nNqr//kskPMzAl9JhKafTJHXwNrHZo0oMlmTKntWyLlxy0h
1LRnB95qWuFiMTPSkBaN8xDY3ZKfAbVI1YXAzvnpjpH8uucUMfqNTUbj8husQxv+
ay8eMfubx0svalpY8+RHbQKWLIY7c10s4jXCY/fNm/5qElqMYCEOVn4MYq7BQu/D
xx7Y8YGXIbfsFS9SrVvVfVkngPc6iVmYPG0pHrlDnMFBeItXL6shPGbSMCSQEYjc
1XVMNi84vuqK/lNMOUA9AoIlBCo2/TXMps7jRjMuOfrMC9sCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBSeoNx/5g8s3pm/7AhYWJPDyo8dxDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMyMzkzYTMyMzMzMTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiASkjFTANBgkqhkiG
9w0BAQsFAAOCAQEAz80IVzzb+O0slLFSUP4XS06+D9eHYjiVR0Ga+siI6EY8g3k5
HwDOmxxOap+WQiK8ALw0YOXA4zngn+Xkhp4LDY+NrgLsZZE9GcvfxH/EtOyqiimS
NETBqPvacH45vVf+p+a4RGKn7NMG2ojEImI/lrXA453umSpjsomusRTUaa/BDNHl
HqglYS7VOK4M3n9ub00LI1vKOFaBY/3ogSN+VsL375F5WZW1UDxVtBqu+dCoxxXt
YfuMv2LdKWUxdIRWBULtP8h99ALb3b+VmPf2AmYE2U/ZMcaUAre1Civw19GmYIMN
vlQyMEOI46XfusjSHC+KrjIEv94a/Yv1TRwmMA==
-----END CERTIFICATE-----