Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3632303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a3632303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Krpte1jW6IN4LJ4Vf3qkUWWXVKUgnkbeplOZa2h3Se0=
Subject key identifier:   FD:BF:FD:31:F4:70:14:06:2F:57:0F:7F:99:22:7B:20:EF:69:11:F9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       482DF25CEEE5196CC476D3843C478EC3BD3FE7EB
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3632303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 06:20:02 +0000
ROA not before:           Thu 03 Feb 2022 06:15:02 +0000
ROA not after:            Thu 02 Feb 2023 06:20:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:620::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2d:f2:5c:ee:e5:19:6c:c4:76:d3:84:3c:47:8e:c3:bd:3f:e7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 06:15:02 2022 GMT
            Not After : Feb  2 06:20:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:8c:6c:e5:3e:45:1a:80:80:d5:3a:f8:55:
                    f7:8f:89:4b:52:ad:19:5a:6d:e8:27:a4:9c:65:67:
                    49:c4:dc:7b:90:6a:ba:c2:62:80:83:b4:91:46:50:
                    68:b1:69:f1:cb:b7:53:d7:06:41:23:a6:d4:6d:4c:
                    3c:b7:73:42:b7:d7:df:37:2d:34:5d:fb:6c:f9:98:
                    2c:9c:2d:d7:db:07:ed:e8:e0:bb:c3:54:b7:e8:9b:
                    21:28:95:db:53:a2:0b:d3:ae:84:b9:78:7a:3c:5e:
                    28:7b:54:01:b6:a7:13:77:d8:05:f0:49:ee:dd:78:
                    28:b4:99:78:b9:35:f1:61:c1:24:37:43:2f:a9:35:
                    a3:42:5c:18:16:cd:65:80:c8:2e:23:22:75:8c:0b:
                    6e:e0:5e:c9:27:7d:ab:2d:8c:da:72:37:ae:7e:a3:
                    d7:8e:ab:37:84:d3:45:f4:9a:0a:97:aa:60:99:cc:
                    86:73:65:ea:4d:fa:64:0b:e4:06:32:76:54:2a:41:
                    be:91:2a:4e:e4:d5:29:fb:ff:58:21:ae:ac:9e:78:
                    e1:5a:d4:84:c4:21:c9:dc:97:c6:15:7a:12:0f:2a:
                    d4:02:8f:29:0b:4d:0b:5c:1e:f4:51:30:e9:c9:ec:
                    88:25:64:b1:f0:c6:f3:88:0e:35:18:d1:b9:bc:d4:
                    6c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BF:FD:31:F4:70:14:06:2F:57:0F:7F:99:22:7B:20:EF:69:11:F9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a3632303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:620::/80

    Signature Algorithm: sha256WithRSAEncryption
         30:a9:d9:e6:32:dd:f1:02:48:f4:34:e5:ea:34:89:e7:8c:fd:
         df:6f:52:9f:5e:02:33:ed:21:b1:a3:a4:9c:d5:08:fc:71:2c:
         a3:eb:75:bb:d4:e9:e1:e8:b7:c8:b7:5a:1e:82:d6:96:72:9b:
         80:7f:b7:e4:13:c3:b5:0e:85:9f:b9:b2:f3:9e:03:e5:dc:cb:
         35:88:d6:7f:64:9f:54:e1:f7:96:cd:8f:39:0a:65:56:50:01:
         4b:e8:d3:78:51:28:5c:3b:fe:e1:63:bf:33:d5:36:46:4b:68:
         5f:c6:31:53:41:10:25:60:a5:fb:18:61:95:f2:55:87:7e:25:
         6e:7d:16:d9:fb:67:45:c0:f3:f4:67:12:6a:93:a1:94:59:df:
         60:98:42:8a:7f:f6:f4:1a:cd:5e:43:47:dc:37:73:d2:49:b3:
         59:91:69:a0:fa:4d:0d:23:a3:fa:01:b5:fb:45:c9:76:9d:ed:
         56:8a:cd:2a:5f:80:9b:17:ad:72:f2:98:78:65:7a:4e:15:49:
         8f:38:3b:5d:01:ff:30:f9:81:d8:7b:01:5e:7e:7a:f7:9e:75:
         ab:65:22:be:96:7d:fc:4e:d6:68:19:d2:24:59:b5:1c:4d:7b:
         72:5a:a6:d6:74:50:e5:a9:cc:b4:5c:75:5b:35:b0:a7:ff:d4:
         e1:42:a8:eb
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUSC3yXO7lGWzEdtOEPEeOw70/5+swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAzMDYxNTAyWhcNMjMwMjAyMDYyMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMERFNEM4QzZD
RTUzRTQ1MUE4MDgwRDUzQUY4NTVGNzhGODk0QjUyQUQxOTVBNkRFODI3QTQ5QzY1
Njc0OUM0REM3QjkwNkFCQUMyNjI4MDgzQjQ5MTQ2NTA2OEIxNjlGMUNCQjc1M0Q3
MDY0MTIzQTZENDZENEMzQ0I3NzM0MkI3RDdERjM3MkQzNDVERkI2Q0Y5OTgyQzlD
MkREN0RCMDdFREU4RTBCQkMzNTRCN0U4OUIyMTI4OTVEQjUzQTIwQkQzQUU4NEI5
Nzg3QTNDNUUyODdCNTQwMUI2QTcxMzc3RDgwNUYwNDlFRURENzgyOEI0OTk3OEI5
MzVGMTYxQzEyNDM3NDMyRkE5MzVBMzQyNUMxODE2Q0Q2NTgwQzgyRTIzMjI3NThD
MEI2RUUwNUVDOTI3N0RBQjJEOENEQTcyMzdBRTdFQTNENzhFQUIzNzg0RDM0NUY0
OUEwQTk3QUE2MDk5Q0M4NjczNjVFQTRERkE2NDBCRTQwNjMyNzY1NDJBNDFCRTkx
MkE0RUU0RDUyOUZCRkY1ODIxQUVBQzlFNzhFMTVBRDQ4NEM0MjFDOURDOTdDNjE1
N0ExMjBGMkFENDAyOEYyOTBCNEQwQjVDMUVGNDUxMzBFOUM5RUM4ODI1NjRCMUYw
QzZGMzg4MEUzNTE4RDFCOUJDRDQ2QzhEMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAN5MjGzlPkUagIDVOvhV94+JS1KtGVpt6CeknGVn
ScTce5BqusJigIO0kUZQaLFp8cu3U9cGQSOm1G1MPLdzQrfX3zctNF37bPmYLJwt
19sH7ejgu8NUt+ibISiV21OiC9OuhLl4ejxeKHtUAbanE3fYBfBJ7t14KLSZeLk1
8WHBJDdDL6k1o0JcGBbNZYDILiMidYwLbuBeySd9qy2M2nI3rn6j146rN4TTRfSa
CpeqYJnMhnNl6k36ZAvkBjJ2VCpBvpEqTuTVKfv/WCGurJ544VrUhMQhydyXxhV6
Eg8q1AKPKQtNC1we9FEw6cnsiCVksfDG84gONRjRubzUbI0CAwEAAaOCApowggKW
MB0GA1UdDgQWBBT9v/0x9HAUBi9XD3+ZInsg72kR+TAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzMzYTM2MzIzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIDBiAwDQYJKoZIhvcN
AQELBQADggEBADCp2eYy3fECSPQ05eo0ieeM/d9vUp9eAjPtIbGjpJzVCPxxLKPr
dbvU6eHot8i3Wh6C1pZym4B/t+QTw7UOhZ+5svOeA+XcyzWI1n9kn1Th95bNjzkK
ZVZQAUvo03hRKFw7/uFjvzPVNkZLaF/GMVNBECVgpfsYYZXyVYd+JW59Ftn7Z0XA
8/RnEmqToZRZ32CYQop/9vQazV5DR9w3c9JJs1mRaaD6TQ0jo/oBtftFyXad7VaK
zSpfgJsXrXLymHhlek4VSY84O10B/zD5gdh7AV5+eveedatlIr6WffxO1mgZ0iRZ
tRxNe3JaptZ0UOWpzLRcdVs1sKf/1OFCqOs=
-----END CERTIFICATE-----