Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3631353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a3631353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          vQ1x45DLDAqiZolr6NhKLZ4nq2GtL85ppEuG/1dnemc=
Subject key identifier:   B7:70:86:F3:A2:D2:B2:88:08:15:5F:8F:31:AD:BF:EA:82:F7:35:9D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4314B6DF2FE64921CA34DFC2FE7F23818117ABAF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3631353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 06:15:01 +0000
ROA not before:           Thu 03 Feb 2022 06:10:01 +0000
ROA not after:            Thu 02 Feb 2023 06:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:615::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:14:b6:df:2f:e6:49:21:ca:34:df:c2:fe:7f:23:81:81:17:ab:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 06:10:01 2022 GMT
            Not After : Feb  2 06:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:bf:50:82:68:63:f2:7a:d6:bf:58:60:83:
                    28:d1:a6:89:e8:cd:c0:e3:67:37:58:61:8e:97:9c:
                    ad:e8:aa:89:c4:3b:a1:09:32:55:66:21:6a:4d:ac:
                    a2:3a:e2:14:cf:c6:0f:62:85:f5:d1:36:2c:ef:25:
                    66:3b:e9:a7:f5:17:ed:c4:b4:bc:f0:3a:51:e5:54:
                    9a:0e:50:a7:11:67:dc:53:4a:27:42:05:e5:59:ad:
                    96:1f:fe:4c:e3:3d:54:22:ac:3e:46:07:9a:5b:02:
                    b9:c4:e9:98:9b:97:bf:5f:4e:40:8e:d0:f8:6b:ff:
                    d3:93:28:16:4f:f0:52:80:ab:84:73:7d:87:93:cd:
                    7c:a2:2a:18:fc:65:e1:01:3f:46:da:4c:c9:1a:55:
                    f3:35:f1:8b:07:65:bd:b1:61:34:31:fd:ed:ae:ed:
                    4b:7e:f8:0a:7d:1b:77:77:23:df:04:29:2a:ca:78:
                    e6:27:62:f6:34:c7:17:cb:8c:53:30:6b:96:32:d2:
                    11:f3:7d:25:db:44:ec:61:d3:64:4c:b1:54:56:e9:
                    fd:65:7c:75:ff:bd:94:d7:7d:b6:49:9f:64:24:f0:
                    10:df:c2:4d:0b:94:cf:1c:35:0a:87:23:c9:00:f5:
                    2a:5d:df:5a:a5:a1:93:12:2f:a8:c3:a6:8b:e0:19:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:70:86:F3:A2:D2:B2:88:08:15:5F:8F:31:AD:BF:EA:82:F7:35:9D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3631353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:615::/80

    Signature Algorithm: sha256WithRSAEncryption
         59:59:9f:64:89:db:1c:d9:7d:ea:77:63:65:f8:b5:2c:4e:61:
         16:8c:eb:a5:e0:6c:dd:6d:e8:59:10:29:7d:29:3d:82:64:48:
         e9:e5:c9:73:67:c9:69:db:68:04:b7:93:ee:73:fd:81:41:32:
         23:73:61:7d:72:22:58:61:a6:2f:62:ee:b4:40:3c:40:e9:4e:
         cd:e8:6a:ce:ba:89:f0:00:b6:5b:47:a7:fa:e0:62:b3:7f:db:
         5b:e5:5d:f9:a4:5a:92:b7:eb:00:ad:a5:03:6f:aa:9b:83:97:
         aa:8f:d2:3b:14:e8:9e:7a:bf:48:a6:24:2b:d1:72:60:2d:a8:
         9f:2c:81:db:c8:a0:3b:16:ce:0f:4c:ea:57:6c:8a:c1:d5:da:
         e0:d2:3c:c0:d3:a3:a9:59:3a:8f:12:5e:97:0b:a8:6e:3b:82:
         84:3e:ed:5a:ed:e1:36:c5:c5:bf:1f:b8:d1:d4:90:d7:e5:06:
         0b:62:af:fb:b5:47:a4:fb:7c:0a:81:a6:a3:a6:c6:98:3d:04:
         48:3c:1c:36:df:dc:9f:d2:1f:42:44:35:be:fb:68:42:bb:cb:
         51:02:61:96:0a:91:97:c4:40:cf:69:c9:ac:5c:47:29:0a:a3:
         10:ff:13:fc:5f:e2:d4:3e:b2:19:d9:3c:61:52:6b:df:51:c6:
         74:fb:48:42
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUQxS23y/mSSHKNN/C/n8jgYEXq68wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAzMDYxMDAxWhcNMjMwMjAyMDYxNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMENFM0RCRjUw
ODI2ODYzRjI3QUQ2QkY1ODYwODMyOEQxQTY4OUU4Q0RDMEUzNjczNzU4NjE4RTk3
OUNBREU4QUE4OUM0M0JBMTA5MzI1NTY2MjE2QTREQUNBMjNBRTIxNENGQzYwRjYy
ODVGNUQxMzYyQ0VGMjU2NjNCRTlBN0Y1MTdFREM0QjRCQ0YwM0E1MUU1NTQ5QTBF
NTBBNzExNjdEQzUzNEEyNzQyMDVFNTU5QUQ5NjFGRkU0Q0UzM0Q1NDIyQUMzRTQ2
MDc5QTVCMDJCOUM0RTk5ODlCOTdCRjVGNEU0MDhFRDBGODZCRkZEMzkzMjgxNjRG
RjA1MjgwQUI4NDczN0Q4NzkzQ0Q3Q0EyMkExOEZDNjVFMTAxM0Y0NkRBNENDOTFB
NTVGMzM1RjE4QjA3NjVCREIxNjEzNDMxRkRFREFFRUQ0QjdFRjgwQTdEMUI3Nzc3
MjNERjA0MjkyQUNBNzhFNjI3NjJGNjM0QzcxN0NCOEM1MzMwNkI5NjMyRDIxMUYz
N0QyNURCNDRFQzYxRDM2NDRDQjE1NDU2RTlGRDY1N0M3NUZGQkQ5NEQ3N0RCNjQ5
OUY2NDI0RjAxMERGQzI0RDBCOTRDRjFDMzUwQTg3MjNDOTAwRjUyQTVEREY1QUE1
QTE5MzEyMkZBOEMzQTY4QkUwMTk5QTE1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM49v1CCaGPyeta/WGCDKNGmiejNwONnN1hhjpec
reiqicQ7oQkyVWYhak2sojriFM/GD2KF9dE2LO8lZjvpp/UX7cS0vPA6UeVUmg5Q
pxFn3FNKJ0IF5Vmtlh/+TOM9VCKsPkYHmlsCucTpmJuXv19OQI7Q+Gv/05MoFk/w
UoCrhHN9h5PNfKIqGPxl4QE/RtpMyRpV8zXxiwdlvbFhNDH97a7tS374Cn0bd3cj
3wQpKsp45idi9jTHF8uMUzBrljLSEfN9JdtE7GHTZEyxVFbp/WV8df+9lNd9tkmf
ZCTwEN/CTQuUzxw1CocjyQD1Kl3fWqWhkxIvqMOmi+AZmhUCAwEAAaOCApowggKW
MB0GA1UdDgQWBBS3cIbzotKyiAgVX48xrb/qgvc1nTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzMzYTM2MzEzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIDBhUwDQYJKoZIhvcN
AQELBQADggEBAFlZn2SJ2xzZfep3Y2X4tSxOYRaM66XgbN1t6FkQKX0pPYJkSOnl
yXNnyWnbaAS3k+5z/YFBMiNzYX1yIlhhpi9i7rRAPEDpTs3oas66ifAAtltHp/rg
YrN/21vlXfmkWpK36wCtpQNvqpuDl6qP0jsU6J56v0imJCvRcmAtqJ8sgdvIoDsW
zg9M6ldsisHV2uDSPMDTo6lZOo8SXpcLqG47goQ+7Vrt4TbFxb8fuNHUkNflBgti
r/u1R6T7fAqBpqOmxpg9BEg8HDbf3J/SH0JENb77aEK7y1ECYZYKkZfEQM9pyaxc
RykKoxD/E/xf4tQ+shnZPGFSa99RxnT7SEI=
-----END CERTIFICATE-----