Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323033353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a323033353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          mWaaL0IGeycP7js5uOPQR71zbngPRoFH/naUfGv3mO4=
Subject key identifier:   F9:65:DC:23:72:B2:65:85:D0:CD:BD:84:D6:03:E6:F7:1C:8C:B6:EF
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4AB0835EDC969E2653AC4ABDDF9F0D8F512807F1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323033353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 20:35:02 +0000
ROA not before:           Mon 31 Jan 2022 20:30:02 +0000
ROA not after:            Mon 30 Jan 2023 20:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:2035::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:b0:83:5e:dc:96:9e:26:53:ac:4a:bd:df:9f:0d:8f:51:28:07:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 20:30:02 2022 GMT
            Not After : Jan 30 20:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:4f:fa:43:a1:87:1f:df:9c:4d:73:70:f8:
                    49:2c:7c:97:72:ef:9d:b7:41:b5:72:07:04:ed:01:
                    2a:1a:95:72:dc:70:9a:c1:e9:7b:04:38:5b:31:77:
                    97:04:a1:77:72:3f:0b:3d:3d:f6:ea:dc:e3:21:2a:
                    9a:2a:d1:17:05:c3:50:83:f7:44:db:51:46:f4:be:
                    83:f1:97:34:a7:2f:b7:21:78:48:d8:d6:56:61:5a:
                    c5:73:d7:56:09:04:00:d1:7c:5a:6b:d6:f9:c7:6a:
                    99:b6:2c:d0:db:42:7e:c4:8a:71:06:26:5b:f0:7d:
                    19:2e:b1:13:92:6b:9c:f4:09:c2:1e:bd:3f:6b:48:
                    25:27:fe:14:b5:a0:4f:6c:e0:26:39:e1:da:a2:cd:
                    4f:8f:c5:ce:e0:48:cf:de:64:2c:08:77:9c:19:4f:
                    b8:c3:87:c8:ee:33:ab:2e:95:62:9f:f9:4d:d3:ef:
                    66:75:be:22:24:d5:04:0c:6a:c3:a1:f6:e6:c9:86:
                    36:bc:cd:19:7d:55:5b:0e:0f:2c:c4:74:b6:24:27:
                    10:85:53:b3:4f:00:77:70:e0:6b:15:30:e3:2f:6a:
                    fc:30:bd:de:ba:cc:dd:a7:22:a1:ea:73:ee:19:c4:
                    cc:50:9c:80:93:dc:3b:b8:a1:3b:2a:1f:ff:ff:60:
                    b0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:65:DC:23:72:B2:65:85:D0:CD:BD:84:D6:03:E6:F7:1C:8C:B6:EF
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323033353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:2035::/80

    Signature Algorithm: sha256WithRSAEncryption
         34:b0:20:77:b8:24:a5:fe:8f:9f:3f:b3:b9:83:d7:16:6c:46:
         6b:64:e2:66:b6:07:11:50:c0:e7:1c:54:f6:02:4c:82:a0:37:
         8f:a7:1b:d3:c9:24:39:17:52:2e:53:1e:a5:ed:02:47:6d:c6:
         87:a1:92:f2:d9:74:6e:b9:7a:7c:5f:0f:71:50:bf:a8:df:19:
         8c:c8:81:ae:e0:27:02:6b:8e:e4:bc:7e:e2:9c:cc:8b:fe:b3:
         68:a5:96:8d:42:8a:7b:43:84:db:02:47:b9:3f:5a:f8:c4:14:
         40:e9:c7:a1:c3:1d:9b:7a:1f:5c:69:7d:a3:a1:3d:1e:12:da:
         46:96:db:1c:17:cd:b6:5e:8e:49:bd:8e:01:cf:61:5d:39:fd:
         e9:da:4e:cf:e4:37:51:57:85:8d:9a:99:b9:a7:a9:12:56:e2:
         d1:c0:e9:ba:70:ea:32:28:0d:41:48:a0:a2:b9:37:2c:13:41:
         42:36:e2:97:9c:92:42:79:0b:d2:1f:14:82:f2:00:1c:00:01:
         32:fa:21:39:35:b9:3a:55:0e:d8:21:22:44:27:70:41:38:0b:
         aa:5f:41:43:f4:9e:24:02:9a:67:5d:96:a4:e1:22:11:4e:c8:
         13:eb:8b:ff:9e:bc:a8:a3:0c:7f:1a:7f:24:18:51:b8:49:3f:
         14:14:26:c3
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUSrCDXtyWniZTrEq9358Nj1EoB/EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTMxMjAzMDAyWhcNMjMwMTMwMjAzNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEMyQjg0RkZB
NDNBMTg3MUZERjlDNEQ3MzcwRjg0OTJDN0M5NzcyRUY5REI3NDFCNTcyMDcwNEVE
MDEyQTFBOTU3MkRDNzA5QUMxRTk3QjA0Mzg1QjMxNzc5NzA0QTE3NzcyM0YwQjNE
M0RGNkVBRENFMzIxMkE5QTJBRDExNzA1QzM1MDgzRjc0NERCNTE0NkY0QkU4M0Yx
OTczNEE3MkZCNzIxNzg0OEQ4RDY1NjYxNUFDNTczRDc1NjA5MDQwMEQxN0M1QTZC
RDZGOUM3NkE5OUI2MkNEMERCNDI3RUM0OEE3MTA2MjY1QkYwN0QxOTJFQjExMzky
NkI5Q0Y0MDlDMjFFQkQzRjZCNDgyNTI3RkUxNEI1QTA0RjZDRTAyNjM5RTFEQUEy
Q0Q0RjhGQzVDRUUwNDhDRkRFNjQyQzA4Nzc5QzE5NEZCOEMzODdDOEVFMzNBQjJF
OTU2MjlGRjk0REQzRUY2Njc1QkUyMjI0RDUwNDBDNkFDM0ExRjZFNkM5ODYzNkJD
Q0QxOTdENTU1QjBFMEYyQ0M0NzRCNjI0MjcxMDg1NTNCMzRGMDA3NzcwRTA2QjE1
MzBFMzJGNkFGQzMwQkRERUJBQ0NEREE3MjJBMUVBNzNFRTE5QzRDQzUwOUM4MDkz
REMzQkI4QTEzQjJBMUZGRkZGNjBCMDc1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMK4T/pDoYcf35xNc3D4SSx8l3LvnbdBtXIHBO0B
KhqVctxwmsHpewQ4WzF3lwShd3I/Cz099urc4yEqmirRFwXDUIP3RNtRRvS+g/GX
NKcvtyF4SNjWVmFaxXPXVgkEANF8WmvW+cdqmbYs0NtCfsSKcQYmW/B9GS6xE5Jr
nPQJwh69P2tIJSf+FLWgT2zgJjnh2qLNT4/FzuBIz95kLAh3nBlPuMOHyO4zqy6V
Yp/5TdPvZnW+IiTVBAxqw6H25smGNrzNGX1VWw4PLMR0tiQnEIVTs08Ad3DgaxUw
4y9q/DC93rrM3acioepz7hnEzFCcgJPcO7ihOyof//9gsHUCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBT5ZdwjcrJlhdDNvYTWA+b3HIy27zAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMzMzEzYTMyMzAzMzM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiATEgNTANBgkqhkiG
9w0BAQsFAAOCAQEANLAgd7gkpf6Pnz+zuYPXFmxGa2TiZrYHEVDA5xxU9gJMgqA3
j6cb08kkORdSLlMepe0CR23Gh6GS8tl0brl6fF8PcVC/qN8ZjMiBruAnAmuO5Lx+
4pzMi/6zaKWWjUKKe0OE2wJHuT9a+MQUQOnHocMdm3ofXGl9o6E9HhLaRpbbHBfN
tl6OSb2OAc9hXTn96dpOz+Q3UVeFjZqZuaepElbi0cDpunDqMigNQUigork3LBNB
Qjbil5ySQnkL0h8UgvIAHAABMvohOTW5OlUO2CEiRCdwQTgLql9BQ/SeJAKaZ12W
pOEiEU7IE+uL/568qKMMfxp/JBhRuEk/FBQmww==
-----END CERTIFICATE-----