Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a323131353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230323a323131353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          o9yABUIiEgHN0c5VorgJZTHQE/WpdSmg9eBqVtGOYak=
Subject key identifier:   67:15:8A:F0:42:A2:2C:B9:B6:5A:6D:57:72:19:26:31:9A:60:84:5C
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3CD568D12ADE9946B002328FA22AC85251C996CF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a323131353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 02 Feb 2022 21:15:01 +0000
ROA not before:           Wed 02 Feb 2022 21:10:01 +0000
ROA not after:            Wed 01 Feb 2023 21:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:202:2115::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d5:68:d1:2a:de:99:46:b0:02:32:8f:a2:2a:c8:52:51:c9:96:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  2 21:10:01 2022 GMT
            Not After : Feb  1 21:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:f1:76:5a:45:42:6e:83:5c:22:1c:38:1d:
                    83:3f:11:0d:db:44:d2:c8:13:27:23:b8:82:b3:d6:
                    0a:f9:34:6e:bf:d0:cc:b1:1d:af:ad:48:65:97:f8:
                    b6:1e:5e:8d:07:02:72:b6:64:4e:74:34:ae:8f:3b:
                    a8:0f:45:7f:f1:16:e3:ec:69:53:98:74:99:7f:c9:
                    6e:23:75:72:39:bc:fc:98:d4:c0:f5:ad:77:b9:95:
                    bc:d9:84:af:50:98:77:69:f0:57:44:5f:93:02:bf:
                    7e:a3:4c:d0:7b:a1:1c:4a:9f:1b:90:af:48:9c:ab:
                    e9:b7:5d:87:cd:0f:70:b3:df:00:86:5c:9d:5e:2b:
                    ed:84:cf:ee:5a:19:96:4e:6e:27:64:3a:ab:4c:3d:
                    9f:c9:f2:49:3c:72:90:84:69:84:42:84:0f:eb:07:
                    1b:1e:86:c6:68:9c:cb:60:d2:1f:3a:50:3d:99:31:
                    68:71:d6:ce:b2:b5:61:ee:05:4f:73:2e:b8:07:c7:
                    5d:02:90:81:91:f9:e4:f2:e4:3b:08:10:6c:67:25:
                    8b:69:27:96:89:74:21:83:c3:0f:d1:d0:1c:9c:c2:
                    16:3c:ec:f4:8f:fb:da:0a:f7:03:fa:a4:78:a4:69:
                    c1:89:f9:e4:8f:b8:a5:11:aa:e9:09:8b:15:23:08:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:15:8A:F0:42:A2:2C:B9:B6:5A:6D:57:72:19:26:31:9A:60:84:5C
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a323131353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:202:2115::/80

    Signature Algorithm: sha256WithRSAEncryption
         b0:7a:4b:d8:eb:e5:48:09:78:27:4f:36:21:21:37:8c:5b:f8:
         18:0f:61:0a:47:62:fa:63:6f:53:04:c5:ec:82:18:19:65:47:
         c6:87:35:aa:1a:66:31:68:38:e8:f7:71:4e:d9:6e:90:2c:5b:
         d8:6e:3f:87:8e:8c:d8:44:69:a1:90:3c:76:4b:81:56:23:f0:
         fb:67:f4:26:59:dd:91:80:d2:0c:fd:ba:ac:f9:c2:0c:ce:96:
         3e:de:56:c3:0d:8f:3b:57:8f:ec:ed:0d:dc:70:11:68:bc:7f:
         a0:d3:d6:b5:36:4c:aa:7d:71:85:64:3e:f5:dd:c3:63:48:d2:
         a4:96:4d:21:5d:aa:8d:bd:11:ce:b2:18:4f:1d:82:d7:55:ae:
         dc:76:fd:3d:a1:0b:de:53:2c:7a:4a:99:0a:a6:36:67:2b:e3:
         76:ff:4f:ff:04:0b:e7:3f:b2:ea:e9:16:e8:fb:bb:fa:fa:78:
         b0:ee:da:ae:70:ae:4b:32:b2:25:76:5a:ae:86:de:78:98:82:
         18:6d:12:9d:00:cf:51:42:47:2e:28:4c:0b:81:7e:a4:e7:c5:
         28:f3:38:30:e7:ba:c2:e2:20:70:2f:28:86:9d:6b:67:63:40:
         10:db:16:68:a0:3b:d8:c1:d9:90:73:e1:56:fd:a7:1b:ea:4f:
         fc:a3:71:5e
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUPNVo0SremUawAjKPoirIUlHJls8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAyMjExMDAxWhcNMjMwMjAxMjExNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEIzNUNGMTc2
NUE0NTQyNkU4MzVDMjIxQzM4MUQ4MzNGMTEwRERCNDREMkM4MTMyNzIzQjg4MkIz
RDYwQUY5MzQ2RUJGRDBDQ0IxMURBRkFENDg2NTk3RjhCNjFFNUU4RDA3MDI3MkI2
NjQ0RTc0MzRBRThGM0JBODBGNDU3RkYxMTZFM0VDNjk1Mzk4NzQ5OTdGQzk2RTIz
NzU3MjM5QkNGQzk4RDRDMEY1QUQ3N0I5OTVCQ0Q5ODRBRjUwOTg3NzY5RjA1NzQ0
NUY5MzAyQkY3RUEzNENEMDdCQTExQzRBOUYxQjkwQUY0ODlDQUJFOUI3NUQ4N0NE
MEY3MEIzREYwMDg2NUM5RDVFMkJFRDg0Q0ZFRTVBMTk5NjRFNkUyNzY0M0FBQjRD
M0Q5RkM5RjI0OTNDNzI5MDg0Njk4NDQyODQwRkVCMDcxQjFFODZDNjY4OUNDQjYw
RDIxRjNBNTAzRDk5MzE2ODcxRDZDRUIyQjU2MUVFMDU0RjczMkVCODA3Qzc1RDAy
OTA4MTkxRjlFNEYyRTQzQjA4MTA2QzY3MjU4QjY5Mjc5Njg5NzQyMTgzQzMwRkQx
RDAxQzlDQzIxNjNDRUNGNDhGRkJEQTBBRjcwM0ZBQTQ3OEE0NjlDMTg5RjlFNDhG
QjhBNTExQUFFOTA5OEIxNTIzMDgyM0IzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALNc8XZaRUJug1wiHDgdgz8RDdtE0sgTJyO4grPW
Cvk0br/QzLEdr61IZZf4th5ejQcCcrZkTnQ0ro87qA9Ff/EW4+xpU5h0mX/JbiN1
cjm8/JjUwPWtd7mVvNmEr1CYd2nwV0RfkwK/fqNM0HuhHEqfG5CvSJyr6bddh80P
cLPfAIZcnV4r7YTP7loZlk5uJ2Q6q0w9n8nySTxykIRphEKED+sHGx6Gxmicy2DS
HzpQPZkxaHHWzrK1Ye4FT3MuuAfHXQKQgZH55PLkOwgQbGcli2knlol0IYPDD9HQ
HJzCFjzs9I/72gr3A/qkeKRpwYn55I+4pRGq6QmLFSMII7MCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBRnFYrwQqIsubZabVdyGSYxmmCEXDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzIzYTMyMzEzMTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAgIhFTANBgkqhkiG
9w0BAQsFAAOCAQEAsHpL2OvlSAl4J082ISE3jFv4GA9hCkdi+mNvUwTF7IIYGWVH
xoc1qhpmMWg46PdxTtlukCxb2G4/h46M2ERpoZA8dkuBViPw+2f0JlndkYDSDP26
rPnCDM6WPt5Www2PO1eP7O0N3HARaLx/oNPWtTZMqn1xhWQ+9d3DY0jSpJZNIV2q
jb0RzrIYTx2C11Wu3Hb9PaEL3lMsekqZCqY2Zyvjdv9P/wQL5z+y6ukW6Pu7+vp4
sO7arnCuSzKyJXZarobeeJiCGG0SnQDPUUJHLihMC4F+pOfFKPM4MOe6wuIgcC8o
hp1rZ2NAENsWaKA72MHZkHPhVv2nG+pP/KNxXg==
-----END CERTIFICATE-----