Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3133353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a3133353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          cHTUxFRQQa8k7OOH+43hrj5alJbKHsnxtEZzta2Z8vM=
Subject key identifier:   DF:27:BF:CC:A4:4B:4B:31:D2:1F:53:CA:A4:B9:60:A5:3F:67:12:78
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4FAF67303350DBD2E99212388A811EBA2ED2639E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3133353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 01:35:01 +0000
ROA not before:           Thu 03 Feb 2022 01:30:01 +0000
ROA not after:            Thu 02 Feb 2023 01:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:135::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:af:67:30:33:50:db:d2:e9:92:12:38:8a:81:1e:ba:2e:d2:63:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 01:30:01 2022 GMT
            Not After : Feb  2 01:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:40:4e:fe:bf:23:30:77:8e:b2:5b:33:70:
                    b0:cc:c1:a2:de:97:29:66:00:15:fa:7d:e7:c4:2e:
                    4d:90:7e:7b:8f:85:39:ac:0b:38:6c:ac:d8:b7:ad:
                    f6:ab:44:11:6b:37:7f:4a:64:77:88:ae:d3:e0:90:
                    77:2f:b7:c0:b2:f4:a2:01:c2:9d:77:a8:bd:ac:52:
                    18:2b:63:a9:4a:23:08:97:b9:7b:97:8d:ec:f3:17:
                    94:b3:8b:86:81:ec:76:8f:1d:d9:73:f2:c0:ee:9b:
                    80:cf:82:cf:40:f6:60:09:21:3c:4c:46:3b:d5:c5:
                    db:e7:2d:50:5f:64:aa:ed:19:d0:c6:01:9f:a4:bc:
                    b5:f7:85:6e:f8:0e:4a:78:e7:01:fd:31:d8:ba:dd:
                    3d:bc:d0:2a:a9:0c:4b:ad:d0:29:db:07:69:47:8e:
                    16:07:fd:64:51:cd:cf:12:6f:22:24:90:89:0d:6c:
                    90:5d:82:2c:80:b4:88:a8:55:fa:c1:ec:bc:1f:11:
                    e5:c2:60:1c:b3:d6:4e:ee:19:74:96:ad:b3:c2:dc:
                    ca:df:12:25:35:13:64:67:a3:52:4c:47:59:f6:2e:
                    24:f1:f3:2c:30:07:e8:a0:4e:5d:94:54:14:63:42:
                    68:9e:d6:51:7c:c3:74:3c:8e:2b:df:f9:62:2d:05:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:27:BF:CC:A4:4B:4B:31:D2:1F:53:CA:A4:B9:60:A5:3F:67:12:78
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3133353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:135::/80

    Signature Algorithm: sha256WithRSAEncryption
         6f:d7:97:33:e8:85:19:ef:fb:30:27:36:19:bf:0f:05:4f:74:
         4e:23:26:2a:07:13:f9:7a:83:b0:8b:4a:ff:bc:71:57:6f:15:
         1e:39:25:fe:f2:7b:bf:1f:b4:b6:ce:08:81:f0:d4:21:c4:96:
         d3:5b:b4:bc:6d:ac:6d:09:66:cd:6c:5a:6c:36:41:77:34:49:
         d0:d8:ee:32:38:d2:a6:32:88:2e:ef:df:de:75:73:45:75:9e:
         63:f7:19:d9:8f:c0:09:87:9b:7b:21:26:9e:5d:4f:c5:d2:6a:
         c7:a8:92:39:0d:a3:41:1d:64:f7:89:76:34:38:4c:a5:57:af:
         a4:1e:06:20:6d:d3:82:e7:93:85:be:17:46:e3:4c:04:64:a8:
         13:76:72:60:c5:00:8b:7e:15:b4:6b:00:dc:16:d1:82:49:ff:
         38:61:05:c9:d9:e7:f9:a4:d5:09:d9:52:96:97:75:9f:0f:5f:
         c2:3e:6e:33:d8:a2:80:94:58:88:a4:41:57:46:66:e1:bc:4e:
         8d:af:90:92:1c:27:96:e2:ec:81:d3:9d:a5:74:0e:ac:d9:86:
         05:e2:88:8f:84:eb:00:54:12:18:04:a8:88:fb:80:a1:07:42:
         b8:a3:1b:62:35:e3:18:e1:38:35:57:f0:f1:af:d7:38:e6:bd:
         c1:55:12:c0
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUT69nMDNQ29LpkhI4ioEeui7SY54wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAzMDEzMDAxWhcNMjMwMjAyMDEzNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEJEQ0Y0MDRF
RkVCRjIzMzA3NzhFQjI1QjMzNzBCMENDQzFBMkRFOTcyOTY2MDAxNUZBN0RFN0M0
MkU0RDkwN0U3QjhGODUzOUFDMEIzODZDQUNEOEI3QURGNkFCNDQxMTZCMzc3RjRB
NjQ3Nzg4QUVEM0UwOTA3NzJGQjdDMEIyRjRBMjAxQzI5RDc3QThCREFDNTIxODJC
NjNBOTRBMjMwODk3Qjk3Qjk3OERFQ0YzMTc5NEIzOEI4NjgxRUM3NjhGMUREOTcz
RjJDMEVFOUI4MENGODJDRjQwRjY2MDA5MjEzQzRDNDYzQkQ1QzVEQkU3MkQ1MDVG
NjRBQUVEMTlEMEM2MDE5RkE0QkNCNUY3ODU2RUY4MEU0QTc4RTcwMUZEMzFEOEJB
REQzREJDRDAyQUE5MEM0QkFERDAyOURCMDc2OTQ3OEUxNjA3RkQ2NDUxQ0RDRjEy
NkYyMjI0OTA4OTBENkM5MDVEODIyQzgwQjQ4OEE4NTVGQUMxRUNCQzFGMTFFNUMy
NjAxQ0IzRDY0RUVFMTk3NDk2QURCM0MyRENDQURGMTIyNTM1MTM2NDY3QTM1MjRD
NDc1OUY2MkUyNEYxRjMyQzMwMDdFOEEwNEU1RDk0NTQxNDYzNDI2ODlFRDY1MTdD
QzM3NDNDOEUyQkRGRjk2MjJEMDU2MzA5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL3PQE7+vyMwd46yWzNwsMzBot6XKWYAFfp958Qu
TZB+e4+FOawLOGys2Let9qtEEWs3f0pkd4iu0+CQdy+3wLL0ogHCnXeovaxSGCtj
qUojCJe5e5eN7PMXlLOLhoHsdo8d2XPywO6bgM+Cz0D2YAkhPExGO9XF2+ctUF9k
qu0Z0MYBn6S8tfeFbvgOSnjnAf0x2LrdPbzQKqkMS63QKdsHaUeOFgf9ZFHNzxJv
IiSQiQ1skF2CLIC0iKhV+sHsvB8R5cJgHLPWTu4ZdJats8Lcyt8SJTUTZGejUkxH
WfYuJPHzLDAH6KBOXZRUFGNCaJ7WUXzDdDyOK9/5Yi0FYwkCAwEAAaOCApowggKW
MB0GA1UdDgQWBBTfJ7/MpEtLMdIfU8qkuWClP2cSeDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzMzYTMxMzMzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIDATUwDQYJKoZIhvcN
AQELBQADggEBAG/XlzPohRnv+zAnNhm/DwVPdE4jJioHE/l6g7CLSv+8cVdvFR45
Jf7ye78ftLbOCIHw1CHEltNbtLxtrG0JZs1sWmw2QXc0SdDY7jI40qYyiC7v3951
c0V1nmP3GdmPwAmHm3shJp5dT8XSaseokjkNo0EdZPeJdjQ4TKVXr6QeBiBt04Ln
k4W+F0bjTARkqBN2cmDFAIt+FbRrANwW0YJJ/zhhBcnZ5/mk1QnZUpaXdZ8PX8I+
bjPYooCUWIikQVdGZuG8To2vkJIcJ5bi7IHTnaV0DqzZhgXiiI+E6wBUEhgEqIj7
gKEHQrijG2I14xjhODVX8PGv1zjmvcFVEsA=
-----END CERTIFICATE-----