Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313630353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230343a313630353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          GCCtm/eedcZalfU4MYZARXNAg8Gup5tzJs+smBTgG/8=
Subject key identifier:   25:C8:75:C3:F5:42:5E:B4:78:0C:A0:76:04:05:46:4F:AA:DD:98:BC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2C4C17854197B9553C5290D6AEC4B10C2106B6C1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313630353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 04 Feb 2022 16:05:01 +0000
ROA not before:           Fri 04 Feb 2022 16:00:01 +0000
ROA not after:            Fri 03 Feb 2023 16:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:204:1605::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:17:85:41:97:b9:55:3c:52:90:d6:ae:c4:b1:0c:21:06:b6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  4 16:00:01 2022 GMT
            Not After : Feb  3 16:05:01 2023 GMT
        Subject: CN=3082010A0282010100B18409D45BC1CA823DB288DB297DDD37E3A04BB139F3F04DA07E0C6FCDB23D2A7768E220BCA527FAB5AD55CC69BD6996A11A12214AABF9359CAF768F70CD2BC549E351DEC5A8B5157F93C8916C3844AF0677A10468DBAF282539AEA9D8409753326F386A62848EF4DC659B3F14C0BC066843C2FABDED05B533AE81D742F5105F1B00BF44FBAD1C53839C26D868E8D0793BA0615E2FDE9999F0609865B7456746FFFF34847A1CE54C1E040A79221776D9105CE19D1892E77B4B1BE73BFBD7F2AEA191858334144ED986C084DC7826C454B9287717B8E19BA123E51C105D710FC04B5A0886168827D502116E5000D413D2C434A6E8467230A9323859D32B83EFB90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:09:d4:5b:c1:ca:82:3d:b2:88:db:29:7d:
                    dd:37:e3:a0:4b:b1:39:f3:f0:4d:a0:7e:0c:6f:cd:
                    b2:3d:2a:77:68:e2:20:bc:a5:27:fa:b5:ad:55:cc:
                    69:bd:69:96:a1:1a:12:21:4a:ab:f9:35:9c:af:76:
                    8f:70:cd:2b:c5:49:e3:51:de:c5:a8:b5:15:7f:93:
                    c8:91:6c:38:44:af:06:77:a1:04:68:db:af:28:25:
                    39:ae:a9:d8:40:97:53:32:6f:38:6a:62:84:8e:f4:
                    dc:65:9b:3f:14:c0:bc:06:68:43:c2:fa:bd:ed:05:
                    b5:33:ae:81:d7:42:f5:10:5f:1b:00:bf:44:fb:ad:
                    1c:53:83:9c:26:d8:68:e8:d0:79:3b:a0:61:5e:2f:
                    de:99:99:f0:60:98:65:b7:45:67:46:ff:ff:34:84:
                    7a:1c:e5:4c:1e:04:0a:79:22:17:76:d9:10:5c:e1:
                    9d:18:92:e7:7b:4b:1b:e7:3b:fb:d7:f2:ae:a1:91:
                    85:83:34:14:4e:d9:86:c0:84:dc:78:26:c4:54:b9:
                    28:77:17:b8:e1:9b:a1:23:e5:1c:10:5d:71:0f:c0:
                    4b:5a:08:86:16:88:27:d5:02:11:6e:50:00:d4:13:
                    d2:c4:34:a6:e8:46:72:30:a9:32:38:59:d3:2b:83:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:75:C3:F5:42:5E:B4:78:0C:A0:76:04:05:46:4F:AA:DD:98:BC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230343a313630353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:204:1605::/80

    Signature Algorithm: sha256WithRSAEncryption
         b9:a8:04:d6:65:64:d7:2a:66:fa:b0:61:eb:d7:fc:3f:dd:c1:
         86:60:80:de:39:37:06:38:7d:c8:99:8d:65:4f:59:c4:07:4a:
         53:3c:62:c1:6d:fd:60:8f:76:34:88:1a:36:43:b8:56:47:1b:
         27:db:b2:46:88:26:20:6f:c1:4c:ed:ab:a7:09:bc:a1:a3:e6:
         fe:95:0f:67:8e:a4:e8:ac:f4:a2:61:b5:4a:7c:cf:90:e4:82:
         74:a7:bf:ff:31:69:c0:37:91:d7:e5:1d:a3:31:07:42:aa:ea:
         12:66:af:72:6b:e9:a3:06:28:d9:36:1a:07:ea:66:95:d0:07:
         ed:f5:66:94:5a:68:64:74:ab:95:a0:e7:44:27:50:1d:21:b8:
         30:20:cc:53:d0:05:1e:4b:d2:46:1d:38:ea:32:7d:35:51:d6:
         c3:5f:ad:38:b5:30:de:05:7f:39:a2:97:c4:75:ef:20:43:c7:
         2a:26:9a:16:be:95:cd:a9:12:a3:21:9b:91:90:5e:a7:c2:11:
         82:bf:3d:70:02:2a:20:db:7b:dc:5d:68:d5:10:f4:c6:e6:10:
         9e:78:aa:c3:18:6f:91:1b:44:30:f9:e5:e8:32:67:dc:be:a8:
         1d:ee:ec:f6:f7:81:c5:c4:6f:6c:21:17:9d:22:53:15:c6:1f:
         7d:98:9f:32
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIULEwXhUGXuVU8UpDWrsSxDCEGtsEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA0MTYwMDAxWhcNMjMwMjAzMTYwNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEIxODQwOUQ0
NUJDMUNBODIzREIyODhEQjI5N0RERDM3RTNBMDRCQjEzOUYzRjA0REEwN0UwQzZG
Q0RCMjNEMkE3NzY4RTIyMEJDQTUyN0ZBQjVBRDU1Q0M2OUJENjk5NkExMUExMjIx
NEFBQkY5MzU5Q0FGNzY4RjcwQ0QyQkM1NDlFMzUxREVDNUE4QjUxNTdGOTNDODkx
NkMzODQ0QUYwNjc3QTEwNDY4REJBRjI4MjUzOUFFQTlEODQwOTc1MzMyNkYzODZB
NjI4NDhFRjREQzY1OUIzRjE0QzBCQzA2Njg0M0MyRkFCREVEMDVCNTMzQUU4MUQ3
NDJGNTEwNUYxQjAwQkY0NEZCQUQxQzUzODM5QzI2RDg2OEU4RDA3OTNCQTA2MTVF
MkZERTk5OTlGMDYwOTg2NUI3NDU2NzQ2RkZGRjM0ODQ3QTFDRTU0QzFFMDQwQTc5
MjIxNzc2RDkxMDVDRTE5RDE4OTJFNzdCNEIxQkU3M0JGQkQ3RjJBRUExOTE4NTgz
MzQxNDRFRDk4NkMwODREQzc4MjZDNDU0QjkyODc3MTdCOEUxOUJBMTIzRTUxQzEw
NUQ3MTBGQzA0QjVBMDg4NjE2ODgyN0Q1MDIxMTZFNTAwMEQ0MTNEMkM0MzRBNkU4
NDY3MjMwQTkzMjM4NTlEMzJCODNFRkI5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALGECdRbwcqCPbKI2yl93TfjoEuxOfPwTaB+DG/N
sj0qd2jiILylJ/q1rVXMab1plqEaEiFKq/k1nK92j3DNK8VJ41Hexai1FX+TyJFs
OESvBnehBGjbryglOa6p2ECXUzJvOGpihI703GWbPxTAvAZoQ8L6ve0FtTOugddC
9RBfGwC/RPutHFODnCbYaOjQeTugYV4v3pmZ8GCYZbdFZ0b//zSEehzlTB4ECnki
F3bZEFzhnRiS53tLG+c7+9fyrqGRhYM0FE7ZhsCE3HgmxFS5KHcXuOGboSPlHBBd
cQ/AS1oIhhaIJ9UCEW5QANQT0sQ0puhGcjCpMjhZ0yuD77kCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQlyHXD9UJetHgMoHYEBUZPqt2YvDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzQzYTMxMzYzMDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAgQWBTANBgkqhkiG
9w0BAQsFAAOCAQEAuagE1mVk1ypm+rBh69f8P93BhmCA3jk3Bjh9yJmNZU9ZxAdK
UzxiwW39YI92NIgaNkO4VkcbJ9uyRogmIG/BTO2rpwm8oaPm/pUPZ46k6Kz0omG1
SnzPkOSCdKe//zFpwDeR1+UdozEHQqrqEmavcmvpowYo2TYaB+pmldAH7fVmlFpo
ZHSrlaDnRCdQHSG4MCDMU9AFHkvSRh046jJ9NVHWw1+tOLUw3gV/OaKXxHXvIEPH
KiaaFr6VzakSoyGbkZBep8IRgr89cAIqINt73F1o1RD0xuYQnniqwxhvkRtEMPnl
6DJn3L6oHe7s9veBxcRvbCEXnSJTFcYffZifMg==
-----END CERTIFICATE-----