Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3732303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230323a3732303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          qDMDgslSAegN8mwyKxi//PImdG8cFNcRly7rOy/Or/c=
Subject key identifier:   B0:D5:0E:9E:0E:83:E1:C6:36:34:2C:C6:6A:61:B5:A6:BE:85:BD:29
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       75266BF0DBFAF67963029BEBD79736E5AFB1A282
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3732303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 02 Feb 2022 07:20:02 +0000
ROA not before:           Wed 02 Feb 2022 07:15:02 +0000
ROA not after:            Wed 01 Feb 2023 07:20:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:202:720::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:26:6b:f0:db:fa:f6:79:63:02:9b:eb:d7:97:36:e5:af:b1:a2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  2 07:15:02 2022 GMT
            Not After : Feb  1 07:20:02 2023 GMT
        Subject: CN=3082010A0282010100BEFCADB707E7CFCB96669CF5192D4A90D44AF37CAB6708DC7F455E526643B6F18A6733ED82A99FD33F5BFC98F7F3D30E4CD265CCCD63D7067B78C8220E53A0A3C03B43E4F31430A18A048FB5ED70E1DDCF2C306DEF5ABD3499803A1F4413645F37663BF756B6D80CF54CB5D8AC684DE3B07B43D2278E8B7FF9FF2CAFE5348B049EC77BFF729F90B44DBC1E0A43E592950F9DCA78F9ED01D6009532B9FEB57343652ADC79CD5613BDE060BE7BCFED7C0AC05B15751083D04D1335529F3CF5624048AF312F98F2D33E935B1FAA689191BDC6275B8205AE62D5EEFA72475624A721D2A3CEAAD254E26056F785625DA86DBF57CF71FDDC53AA16A7D033C71D03E7590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:ad:b7:07:e7:cf:cb:96:66:9c:f5:19:2d:
                    4a:90:d4:4a:f3:7c:ab:67:08:dc:7f:45:5e:52:66:
                    43:b6:f1:8a:67:33:ed:82:a9:9f:d3:3f:5b:fc:98:
                    f7:f3:d3:0e:4c:d2:65:cc:cd:63:d7:06:7b:78:c8:
                    22:0e:53:a0:a3:c0:3b:43:e4:f3:14:30:a1:8a:04:
                    8f:b5:ed:70:e1:dd:cf:2c:30:6d:ef:5a:bd:34:99:
                    80:3a:1f:44:13:64:5f:37:66:3b:f7:56:b6:d8:0c:
                    f5:4c:b5:d8:ac:68:4d:e3:b0:7b:43:d2:27:8e:8b:
                    7f:f9:ff:2c:af:e5:34:8b:04:9e:c7:7b:ff:72:9f:
                    90:b4:4d:bc:1e:0a:43:e5:92:95:0f:9d:ca:78:f9:
                    ed:01:d6:00:95:32:b9:fe:b5:73:43:65:2a:dc:79:
                    cd:56:13:bd:e0:60:be:7b:cf:ed:7c:0a:c0:5b:15:
                    75:10:83:d0:4d:13:35:52:9f:3c:f5:62:40:48:af:
                    31:2f:98:f2:d3:3e:93:5b:1f:aa:68:91:91:bd:c6:
                    27:5b:82:05:ae:62:d5:ee:fa:72:47:56:24:a7:21:
                    d2:a3:ce:aa:d2:54:e2:60:56:f7:85:62:5d:a8:6d:
                    bf:57:cf:71:fd:dc:53:aa:16:a7:d0:33:c7:1d:03:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D5:0E:9E:0E:83:E1:C6:36:34:2C:C6:6A:61:B5:A6:BE:85:BD:29
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3732303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:202:720::/80

    Signature Algorithm: sha256WithRSAEncryption
         18:ca:ca:83:c2:a1:c1:68:c3:3c:4b:03:7d:ce:15:26:a8:4a:
         d9:1a:89:8a:95:4a:5b:61:e3:b7:eb:b7:b6:4e:8c:cb:6d:db:
         d8:78:58:ad:0d:30:c7:c7:cc:28:5d:88:8a:ba:77:ea:ca:62:
         47:91:df:01:2b:a7:41:13:d7:dc:2d:82:77:89:06:e4:26:27:
         15:4a:c5:73:0f:0e:6b:2f:52:1e:bb:e3:97:42:e7:e9:53:24:
         ef:6b:6a:fa:92:a0:20:ef:ad:f7:0e:7d:64:0b:50:ed:13:37:
         0b:1f:1b:2f:46:07:1f:29:14:3f:2a:6a:11:25:43:9e:a3:75:
         37:ef:40:fa:44:53:39:cc:54:a1:ef:90:32:85:4c:16:9c:68:
         c9:6b:cf:b8:06:0e:c7:91:ac:84:36:63:e6:f7:98:30:9d:9b:
         6a:6a:9f:4e:1d:6b:c7:e1:a9:7a:53:71:40:a1:fe:56:f4:57:
         fe:a2:87:87:97:59:40:e3:84:20:c7:13:fe:56:a7:a6:f8:8c:
         75:17:6a:9d:d5:66:57:d2:8c:c0:7f:48:4c:c6:d7:49:0d:05:
         29:02:b2:cc:3e:c5:6b:7f:38:de:82:a5:60:fb:53:8c:e5:bd:
         48:69:81:1b:24:d0:98:7e:5a:9f:90:d3:ff:c5:91:04:43:a7:
         e5:0a:29:00
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUdSZr8Nv69nljApvr15c25a+xooIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAyMDcxNTAyWhcNMjMwMjAxMDcyMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEJFRkNBREI3
MDdFN0NGQ0I5NjY2OUNGNTE5MkQ0QTkwRDQ0QUYzN0NBQjY3MDhEQzdGNDU1RTUy
NjY0M0I2RjE4QTY3MzNFRDgyQTk5RkQzM0Y1QkZDOThGN0YzRDMwRTRDRDI2NUND
Q0Q2M0Q3MDY3Qjc4QzgyMjBFNTNBMEEzQzAzQjQzRTRGMzE0MzBBMThBMDQ4RkI1
RUQ3MEUxRERDRjJDMzA2REVGNUFCRDM0OTk4MDNBMUY0NDEzNjQ1RjM3NjYzQkY3
NTZCNkQ4MENGNTRDQjVEOEFDNjg0REUzQjA3QjQzRDIyNzhFOEI3RkY5RkYyQ0FG
RTUzNDhCMDQ5RUM3N0JGRjcyOUY5MEI0NERCQzFFMEE0M0U1OTI5NTBGOURDQTc4
RjlFRDAxRDYwMDk1MzJCOUZFQjU3MzQzNjUyQURDNzlDRDU2MTNCREUwNjBCRTdC
Q0ZFRDdDMEFDMDVCMTU3NTEwODNEMDREMTMzNTUyOUYzQ0Y1NjI0MDQ4QUYzMTJG
OThGMkQzM0U5MzVCMUZBQTY4OTE5MUJEQzYyNzVCODIwNUFFNjJENUVFRkE3MjQ3
NTYyNEE3MjFEMkEzQ0VBQUQyNTRFMjYwNTZGNzg1NjI1REE4NkRCRjU3Q0Y3MUZE
REM1M0FBMTZBN0QwMzNDNzFEMDNFNzU5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL78rbcH58/Llmac9RktSpDUSvN8q2cI3H9FXlJm
Q7bximcz7YKpn9M/W/yY9/PTDkzSZczNY9cGe3jIIg5ToKPAO0Pk8xQwoYoEj7Xt
cOHdzywwbe9avTSZgDofRBNkXzdmO/dWttgM9Uy12KxoTeOwe0PSJ46Lf/n/LK/l
NIsEnsd7/3KfkLRNvB4KQ+WSlQ+dynj57QHWAJUyuf61c0NlKtx5zVYTveBgvnvP
7XwKwFsVdRCD0E0TNVKfPPViQEivMS+Y8tM+k1sfqmiRkb3GJ1uCBa5i1e76ckdW
JKch0qPOqtJU4mBW94ViXahtv1fPcf3cU6oWp9Azxx0D51kCAwEAAaOCApowggKW
MB0GA1UdDgQWBBSw1Q6eDoPhxjY0LMZqYbWmvoW9KTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzIzYTM3MzIzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgICByAwDQYJKoZIhvcN
AQELBQADggEBABjKyoPCocFowzxLA33OFSaoStkaiYqVSlth47frt7ZOjMtt29h4
WK0NMMfHzChdiIq6d+rKYkeR3wErp0ET19wtgneJBuQmJxVKxXMPDmsvUh6745dC
5+lTJO9ravqSoCDvrfcOfWQLUO0TNwsfGy9GBx8pFD8qahElQ56jdTfvQPpEUznM
VKHvkDKFTBacaMlrz7gGDseRrIQ2Y+b3mDCdm2pqn04da8fhqXpTcUCh/lb0V/6i
h4eXWUDjhCDHE/5Wp6b4jHUXap3VZlfSjMB/SEzG10kNBSkCssw+xWt/ON6CpWD7
U4zlvUhpgRsk0Jh+Wp+Q0//FkQRDp+UKKQA=
-----END CERTIFICATE-----