Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323031353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a323031353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          s42XPVYE7H20O0CEFNOkyifK/CUqFIplPzy0hmlxvGs=
Subject key identifier:   D2:26:75:71:E7:EC:94:1B:8D:92:E1:CE:38:C2:73:06:87:F1:AE:6D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       30E5EFD30346863ACAA1BD06727276B64E3F8AE6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323031353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 20:15:01 +0000
ROA not before:           Tue 01 Feb 2022 20:10:01 +0000
ROA not after:            Tue 31 Jan 2023 20:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:2015::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e5:ef:d3:03:46:86:3a:ca:a1:bd:06:72:72:76:b6:4e:3f:8a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 20:10:01 2022 GMT
            Not After : Jan 31 20:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:88:ad:4d:6c:0b:b5:65:a5:81:ae:14:a9:
                    91:84:42:eb:03:fa:1a:c9:4f:6c:6a:a2:ce:14:22:
                    27:d6:7c:67:42:f2:ea:99:57:25:43:dc:f8:7e:a2:
                    8a:84:35:c7:8d:bc:5a:64:b8:c5:61:e2:be:06:87:
                    64:62:f2:80:2a:0e:38:71:07:ad:6c:19:d7:03:3c:
                    86:d9:e2:50:6f:74:e1:3b:57:97:bf:d6:5b:7e:94:
                    b2:f1:63:bd:71:9b:8f:9c:b8:8b:b2:d9:ac:0b:8b:
                    fc:ae:52:59:de:ed:da:84:fe:d3:3c:c1:03:10:86:
                    10:4c:2c:5c:61:04:e9:08:e3:a4:c4:48:43:a2:d0:
                    b0:07:52:72:8e:ec:94:42:97:ea:0f:24:0e:1d:fd:
                    61:57:ea:b3:c8:e4:64:2a:5b:d0:3f:97:d9:82:f6:
                    87:8a:3e:dc:eb:9e:54:bf:a7:9c:07:f0:8d:09:25:
                    bd:19:2f:ef:ef:49:73:58:2a:14:f7:97:42:7e:22:
                    1d:e8:4c:ac:48:2f:69:57:bc:6d:c6:52:65:07:9d:
                    1d:91:f3:8d:00:03:fc:74:e4:46:28:64:b0:8f:3d:
                    f4:e1:d3:91:c1:c7:10:40:18:5a:07:fb:c1:d5:61:
                    12:9a:2a:c6:9b:b1:6c:00:60:02:59:82:8f:15:3b:
                    62:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:75:71:E7:EC:94:1B:8D:92:E1:CE:38:C2:73:06:87:F1:AE:6D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323031353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:2015::/80

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:6d:4a:6d:f3:b8:3f:8c:cc:80:ca:b1:dc:f9:ab:67:e3:
         e7:5c:31:36:27:00:61:b2:c1:f8:32:6a:12:6f:2b:13:ee:83:
         0a:74:4b:d8:4a:1d:ed:66:34:31:8d:18:e6:35:e5:d2:ef:cb:
         fd:de:e7:b4:40:bb:eb:c8:eb:6b:e3:b5:0f:6d:97:83:54:01:
         0a:0b:78:34:e1:0a:74:f8:b4:24:1a:d4:27:58:01:26:40:9f:
         63:b4:bf:c1:90:d7:03:7b:59:bf:e2:c6:ed:ca:76:d7:c0:fe:
         f9:9e:32:cf:55:f8:31:dd:ba:53:3f:fe:66:38:18:a3:24:04:
         7e:82:e6:82:51:9f:9d:a1:1e:6d:a3:33:c1:47:d1:af:a1:3e:
         df:e0:cc:98:20:95:47:c2:f8:7d:df:34:c1:af:38:eb:17:8a:
         cb:7a:d2:93:ff:ad:17:45:8f:a8:46:4e:6c:20:66:40:28:72:
         d3:78:3a:58:4b:43:7e:ea:26:e3:c2:df:a1:57:17:98:dd:30:
         14:c4:a4:b4:32:8e:3b:e0:48:10:0e:1d:d0:47:c8:a3:45:59:
         b6:4c:3f:72:cb:5b:b0:63:06:b3:20:43:04:48:d1:29:f1:d7:
         be:88:7b:7e:34:83:fc:8d:7b:b4:b8:f2:ae:7d:bd:e0:c3:13:
         b3:5f:9a:5e
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUMOXv0wNGhjrKob0GcnJ2tk4/iuYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAxMjAxMDAxWhcNMjMwMTMxMjAxNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMENFMkI4OEFE
NEQ2QzBCQjU2NUE1ODFBRTE0QTk5MTg0NDJFQjAzRkExQUM5NEY2QzZBQTJDRTE0
MjIyN0Q2N0M2NzQyRjJFQTk5NTcyNTQzRENGODdFQTI4QTg0MzVDNzhEQkM1QTY0
QjhDNTYxRTJCRTA2ODc2NDYyRjI4MDJBMEUzODcxMDdBRDZDMTlENzAzM0M4NkQ5
RTI1MDZGNzRFMTNCNTc5N0JGRDY1QjdFOTRCMkYxNjNCRDcxOUI4RjlDQjg4QkIy
RDlBQzBCOEJGQ0FFNTI1OURFRUREQTg0RkVEMzNDQzEwMzEwODYxMDRDMkM1QzYx
MDRFOTA4RTNBNEM0NDg0M0EyRDBCMDA3NTI3MjhFRUM5NDQyOTdFQTBGMjQwRTFE
RkQ2MTU3RUFCM0M4RTQ2NDJBNUJEMDNGOTdEOTgyRjY4NzhBM0VEQ0VCOUU1NEJG
QTc5QzA3RjA4RDA5MjVCRDE5MkZFRkVGNDk3MzU4MkExNEY3OTc0MjdFMjIxREU4
NENBQzQ4MkY2OTU3QkM2REM2NTI2NTA3OUQxRDkxRjM4RDAwMDNGQzc0RTQ0NjI4
NjRCMDhGM0RGNEUxRDM5MUMxQzcxMDQwMTg1QTA3RkJDMUQ1NjExMjlBMkFDNjlC
QjE2QzAwNjAwMjU5ODI4RjE1M0I2MjU3MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM4riK1NbAu1ZaWBrhSpkYRC6wP6GslPbGqizhQi
J9Z8Z0Ly6plXJUPc+H6iioQ1x428WmS4xWHivgaHZGLygCoOOHEHrWwZ1wM8htni
UG904TtXl7/WW36UsvFjvXGbj5y4i7LZrAuL/K5SWd7t2oT+0zzBAxCGEEwsXGEE
6QjjpMRIQ6LQsAdSco7slEKX6g8kDh39YVfqs8jkZCpb0D+X2YL2h4o+3OueVL+n
nAfwjQklvRkv7+9Jc1gqFPeXQn4iHehMrEgvaVe8bcZSZQedHZHzjQAD/HTkRihk
sI899OHTkcHHEEAYWgf7wdVhEpoqxpuxbABgAlmCjxU7YlcCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBTSJnVx5+yUG42S4c44wnMGh/GubTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzEzYTMyMzAzMTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAgEgFTANBgkqhkiG
9w0BAQsFAAOCAQEAIvdtSm3zuD+MzIDKsdz5q2fj51wxNicAYbLB+DJqEm8rE+6D
CnRL2Eod7WY0MY0Y5jXl0u/L/d7ntEC768jra+O1D22Xg1QBCgt4NOEKdPi0JBrU
J1gBJkCfY7S/wZDXA3tZv+LG7cp218D++Z4yz1X4Md26Uz/+ZjgYoyQEfoLmglGf
naEebaMzwUfRr6E+3+DMmCCVR8L4fd80wa846xeKy3rSk/+tF0WPqEZObCBmQChy
03g6WEtDfuom48LfoVcXmN0wFMSktDKOO+BIEA4d0EfIo0VZtkw/cstbsGMGsyBD
BEjRKfHXvoh7fjSD/I17tLjyrn294MMTs1+aXg==
-----END CERTIFICATE-----