Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313531353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a313531353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          rff0jp7Y5s/nC4oVgL44r9aMgCo+tRWLXbjsHpHXqHg=
Subject key identifier:   EC:6F:E9:0B:00:14:13:B4:08:4D:2E:E2:3A:71:EB:76:6D:1E:E4:27
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3E186706FD054EF52DB8DEF1475140FD17E14F9A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313531353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 15:15:02 +0000
ROA not before:           Mon 31 Jan 2022 15:10:02 +0000
ROA not after:            Mon 30 Jan 2023 15:15:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:1515::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:18:67:06:fd:05:4e:f5:2d:b8:de:f1:47:51:40:fd:17:e1:4f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 15:10:02 2022 GMT
            Not After : Jan 30 15:15:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:d3:6c:04:53:bf:d6:3f:b0:de:63:95:35:
                    97:f1:b4:fb:7d:a7:44:f7:4d:6c:85:38:59:5c:87:
                    d1:bf:c8:63:5f:c2:8d:5a:8a:e2:93:55:b3:eb:4a:
                    59:98:67:42:4e:f6:80:69:b9:e7:51:d7:b6:f8:a3:
                    e5:0a:5f:f2:30:ad:53:02:a6:fd:cb:c4:c9:47:58:
                    c8:d4:ee:fb:e9:42:40:83:8c:93:3d:63:df:7e:d6:
                    9d:ad:3a:73:79:75:9d:40:54:32:c1:b3:b6:3a:43:
                    39:27:6a:6a:54:9a:3e:b9:b7:1c:e1:29:f6:82:14:
                    c2:59:ec:09:66:c7:45:6f:ec:31:53:56:b4:77:12:
                    c3:0d:61:bb:a5:90:4a:8a:25:f4:77:a0:13:d0:dc:
                    51:31:1f:7f:17:9a:db:a3:45:be:51:fc:0a:5b:3d:
                    21:22:24:cf:f6:ca:d5:db:52:14:45:11:c5:88:81:
                    5d:5b:36:7c:3e:3b:56:9a:b2:0c:c4:ac:40:97:f8:
                    4a:ca:e0:86:3b:73:6f:91:ca:17:78:3c:e5:17:61:
                    11:00:03:c0:5d:99:b8:3e:62:02:66:a0:37:1b:7a:
                    5a:eb:13:9c:1e:68:01:af:7b:93:46:8a:43:41:98:
                    b1:55:da:99:ff:61:b2:f5:84:78:4d:da:43:8c:8c:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:E9:0B:00:14:13:B4:08:4D:2E:E2:3A:71:EB:76:6D:1E:E4:27
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313531353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:1515::/80

    Signature Algorithm: sha256WithRSAEncryption
         3f:2f:61:9f:39:66:01:20:72:a2:8a:99:d6:ea:d6:d2:15:6f:
         e8:e4:b3:2e:af:ce:c2:1d:a8:20:d4:31:77:4e:c0:3b:6f:46:
         c2:2a:85:f5:4c:02:71:44:ca:aa:ae:96:26:d5:e0:81:ca:4b:
         e2:eb:1d:b5:b0:d0:28:6c:0d:63:48:3f:0b:98:66:40:9a:b6:
         32:8a:c6:1e:8f:8b:bf:1b:cc:25:3a:da:f9:68:51:35:6a:2c:
         ac:18:0d:81:d5:b3:67:62:d7:a1:d1:7e:71:38:f7:2c:a5:a6:
         1f:bc:26:b5:17:51:91:e2:b6:f5:86:79:b4:96:ee:44:65:3f:
         b1:e7:f5:03:7f:75:5d:48:02:59:1c:6f:32:73:fb:88:02:03:
         07:69:1c:5a:7a:06:ec:41:1d:5c:d2:5f:f9:b7:c7:42:c5:f4:
         58:64:9f:86:b1:78:16:3f:ef:19:37:10:96:f3:a2:64:fa:79:
         fa:9e:d3:80:3b:62:eb:4f:a5:ac:09:32:50:e6:91:a5:eb:bf:
         50:52:28:bf:8a:81:2b:7f:0e:6f:03:e3:85:41:7b:45:da:5a:
         63:29:87:0e:84:a4:72:c3:16:a6:7e:60:5d:72:c4:68:fa:e3:
         5a:c8:b3:ba:62:2c:8e:e2:4f:bc:96:f8:ab:85:0f:a6:a5:a1:
         38:99:54:f5
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUPhhnBv0FTvUtuN7xR1FA/RfhT5owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTMxMTUxMDAyWhcNMjMwMTMwMTUxNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEM5MzNEMzZD
MDQ1M0JGRDYzRkIwREU2Mzk1MzU5N0YxQjRGQjdEQTc0NEY3NEQ2Qzg1Mzg1OTVD
ODdEMUJGQzg2MzVGQzI4RDVBOEFFMjkzNTVCM0VCNEE1OTk4Njc0MjRFRjY4MDY5
QjlFNzUxRDdCNkY4QTNFNTBBNUZGMjMwQUQ1MzAyQTZGRENCQzRDOTQ3NThDOEQ0
RUVGQkU5NDI0MDgzOEM5MzNENjNERjdFRDY5REFEM0E3Mzc5NzU5RDQwNTQzMkMx
QjNCNjNBNDMzOTI3NkE2QTU0OUEzRUI5QjcxQ0UxMjlGNjgyMTRDMjU5RUMwOTY2
Qzc0NTZGRUMzMTUzNTZCNDc3MTJDMzBENjFCQkE1OTA0QThBMjVGNDc3QTAxM0Qw
REM1MTMxMUY3RjE3OUFEQkEzNDVCRTUxRkMwQTVCM0QyMTIyMjRDRkY2Q0FENURC
NTIxNDQ1MTFDNTg4ODE1RDVCMzY3QzNFM0I1NjlBQjIwQ0M0QUM0MDk3Rjg0QUNB
RTA4NjNCNzM2RjkxQ0ExNzc4M0NFNTE3NjExMTAwMDNDMDVEOTlCODNFNjIwMjY2
QTAzNzFCN0E1QUVCMTM5QzFFNjgwMUFGN0I5MzQ2OEE0MzQxOThCMTU1REE5OUZG
NjFCMkY1ODQ3ODREREE0MzhDOEM2RDYzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMkz02wEU7/WP7DeY5U1l/G0+32nRPdNbIU4WVyH
0b/IY1/CjVqK4pNVs+tKWZhnQk72gGm551HXtvij5Qpf8jCtUwKm/cvEyUdYyNTu
++lCQIOMkz1j337Wna06c3l1nUBUMsGztjpDOSdqalSaPrm3HOEp9oIUwlnsCWbH
RW/sMVNWtHcSww1hu6WQSool9HegE9DcUTEffxea26NFvlH8Cls9ISIkz/bK1dtS
FEURxYiBXVs2fD47VpqyDMSsQJf4Ssrghjtzb5HKF3g85RdhEQADwF2ZuD5iAmag
Nxt6WusTnB5oAa97k0aKQ0GYsVXamf9hsvWEeE3aQ4yMbWMCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBTsb+kLABQTtAhNLuI6cet2bR7kJzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMzMzEzYTMxMzUzMTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiATEVFTANBgkqhkiG
9w0BAQsFAAOCAQEAPy9hnzlmASByooqZ1urW0hVv6OSzLq/Owh2oINQxd07AO29G
wiqF9UwCcUTKqq6WJtXggcpL4usdtbDQKGwNY0g/C5hmQJq2MorGHo+LvxvMJTra
+WhRNWosrBgNgdWzZ2LXodF+cTj3LKWmH7wmtRdRkeK29YZ5tJbuRGU/sef1A391
XUgCWRxvMnP7iAIDB2kcWnoG7EEdXNJf+bfHQsX0WGSfhrF4Fj/vGTcQlvOiZPp5
+p7TgDti60+lrAkyUOaRpeu/UFIov4qBK38ObwPjhUF7RdpaYymHDoSkcsMWpn5g
XXLEaPrjWsizumIsjuJPvJb4q4UPpqWhOJlU9Q==
-----END CERTIFICATE-----