Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313533303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a313533303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          9JuEqrXr2vU3rD5d5rCkQCorOTgrfBrNVYHpaXDOI3o=
Subject key identifier:   7E:6C:BC:76:9E:19:33:11:A3:A3:97:1F:AF:76:E3:FF:06:F0:BC:B0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       079F389FC776B32DA5A58FCFFCBFEBF3D608AB44
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313533303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 15:30:02 +0000
ROA not before:           Sat 05 Feb 2022 15:25:02 +0000
ROA not after:            Sat 04 Feb 2023 15:30:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:1530::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:38:9f:c7:76:b3:2d:a5:a5:8f:cf:fc:bf:eb:f3:d6:08:ab:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 15:25:02 2022 GMT
            Not After : Feb  4 15:30:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:15:5c:16:10:3e:96:c4:80:d8:da:5a:68:
                    f0:dd:d1:a6:05:9f:e7:e0:c9:52:9e:ad:6c:92:86:
                    82:47:13:71:dd:aa:9a:9f:2f:92:97:81:9d:bd:af:
                    fd:ed:8d:18:05:0f:ba:5e:92:29:4b:50:60:9a:e4:
                    57:be:25:a6:56:ae:12:72:21:f9:ef:9e:fc:05:d8:
                    cd:eb:6d:8b:01:3f:fe:a9:1d:ca:43:cb:fb:f7:1e:
                    cf:aa:16:5a:f1:b8:ec:8a:03:6f:80:43:0e:c3:5d:
                    52:94:29:d8:c0:ea:0b:7d:4b:e9:18:d2:29:15:22:
                    5a:bb:6c:de:04:6b:3e:17:dc:2c:ac:24:a5:98:29:
                    b6:9f:d8:35:ad:49:61:9b:f6:be:5c:8e:83:db:35:
                    2b:79:4b:20:23:a6:ae:f7:65:cc:c6:78:bf:f7:75:
                    43:38:4d:0a:4a:2b:e7:d4:ad:52:d7:8c:41:05:da:
                    65:a4:c9:c7:ac:7a:c2:eb:22:13:98:ce:57:5b:a7:
                    a0:54:c7:9e:6f:e6:76:2c:9e:58:c6:62:cf:82:a2:
                    ad:95:d5:80:2a:2f:b2:5c:1e:36:55:cc:dc:43:52:
                    3c:73:33:73:f0:52:52:3c:d4:c0:46:c2:13:3a:f3:
                    41:22:c2:ef:14:13:36:49:b3:fb:86:fd:02:f8:38:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6C:BC:76:9E:19:33:11:A3:A3:97:1F:AF:76:E3:FF:06:F0:BC:B0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a313533303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:1530::/80

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:4c:1e:36:75:70:3f:01:6f:d9:d4:73:b9:e6:63:33:e9:
         8f:5a:a4:79:55:b2:08:c3:7d:35:43:b2:49:e7:fb:3e:2f:f0:
         a0:0b:2c:3d:c8:df:f4:cf:f6:4f:66:10:95:62:3e:a1:cc:75:
         b0:83:51:f7:24:6e:ab:0a:96:97:e7:03:0c:db:9b:72:3d:ef:
         f8:1b:ec:9f:0c:22:cd:39:56:77:18:bd:e9:1e:0e:26:1c:64:
         4c:07:f0:81:4a:a3:bf:1a:1e:8a:41:d0:ff:92:b8:b0:37:7d:
         91:c2:41:68:bd:a9:db:e1:4e:6c:68:28:ef:fc:d3:48:a8:f8:
         46:75:28:5e:2d:cb:dd:cc:89:ae:7b:fb:fb:35:bc:ea:81:f3:
         c7:0e:33:e2:eb:45:d1:d2:0e:4b:4c:96:ee:9f:e1:2c:4f:23:
         0f:5f:d7:eb:80:13:aa:13:87:9f:b5:9f:20:54:f7:77:ed:e3:
         b7:6d:4f:1e:fd:55:d7:ac:6c:cc:8a:80:dc:b0:fb:c4:c4:06:
         68:8f:b5:5d:40:be:a0:84:ab:da:cb:ed:dd:d1:1c:a9:02:c6:
         43:f8:81:36:a3:f1:a9:cb:d9:1d:02:e9:24:5d:57:07:1d:d5:
         ec:2b:a8:2b:ea:97:15:30:f1:4d:c2:47:7c:91:ac:bd:c9:45:
         ad:74:26:b6
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUB584n8d2sy2lpY/P/L/r89YIq0QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA1MTUyNTAyWhcNMjMwMjA0MTUzMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI2MUMxNTVD
MTYxMDNFOTZDNDgwRDhEQTVBNjhGMERERDFBNjA1OUZFN0UwQzk1MjlFQUQ2Qzky
ODY4MjQ3MTM3MUREQUE5QTlGMkY5Mjk3ODE5REJEQUZGREVEOEQxODA1MEZCQTVF
OTIyOTRCNTA2MDlBRTQ1N0JFMjVBNjU2QUUxMjcyMjFGOUVGOUVGQzA1RDhDREVC
NkQ4QjAxM0ZGRUE5MURDQTQzQ0JGQkY3MUVDRkFBMTY1QUYxQjhFQzhBMDM2Rjgw
NDMwRUMzNUQ1Mjk0MjlEOEMwRUEwQjdENEJFOTE4RDIyOTE1MjI1QUJCNkNERTA0
NkIzRTE3REMyQ0FDMjRBNTk4MjlCNjlGRDgzNUFENDk2MTlCRjZCRTVDOEU4M0RC
MzUyQjc5NEIyMDIzQTZBRUY3NjVDQ0M2NzhCRkY3NzU0MzM4NEQwQTRBMkJFN0Q0
QUQ1MkQ3OEM0MTA1REE2NUE0QzlDN0FDN0FDMkVCMjIxMzk4Q0U1NzVCQTdBMDU0
Qzc5RTZGRTY3NjJDOUU1OEM2NjJDRjgyQTJBRDk1RDU4MDJBMkZCMjVDMUUzNjU1
Q0NEQzQzNTIzQzczMzM3M0YwNTI1MjNDRDRDMDQ2QzIxMzNBRjM0MTIyQzJFRjE0
MTMzNjQ5QjNGQjg2RkQwMkY4MzhFQjNEMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALYcFVwWED6WxIDY2lpo8N3RpgWf5+DJUp6tbJKG
gkcTcd2qmp8vkpeBnb2v/e2NGAUPul6SKUtQYJrkV74lplauEnIh+e+e/AXYzett
iwE//qkdykPL+/cez6oWWvG47IoDb4BDDsNdUpQp2MDqC31L6RjSKRUiWrts3gRr
PhfcLKwkpZgptp/YNa1JYZv2vlyOg9s1K3lLICOmrvdlzMZ4v/d1QzhNCkor59St
UteMQQXaZaTJx6x6wusiE5jOV1unoFTHnm/mdiyeWMZiz4KirZXVgCovslweNlXM
3ENSPHMzc/BSUjzUwEbCEzrzQSLC7xQTNkmz+4b9Avg46z0CAwEAAaOCApwwggKY
MB0GA1UdDgQWBBR+bLx2nhkzEaOjlx+vduP/BvC8sDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzUzYTMxMzUzMzMwM2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAgUVMDANBgkqhkiG
9w0BAQsFAAOCAQEADJBMHjZ1cD8Bb9nUc7nmYzPpj1qkeVWyCMN9NUOySef7Pi/w
oAssPcjf9M/2T2YQlWI+ocx1sINR9yRuqwqWl+cDDNubcj3v+BvsnwwizTlWdxi9
6R4OJhxkTAfwgUqjvxoeikHQ/5K4sDd9kcJBaL2p2+FObGgo7/zTSKj4RnUoXi3L
3cyJrnv7+zW86oHzxw4z4utF0dIOS0yW7p/hLE8jD1/X64ATqhOHn7WfIFT3d+3j
t21PHv1V16xszIqA3LD7xMQGaI+1XUC+oISr2svt3dEcqQLGQ/iBNqPxqcvZHQLp
JF1XBx3V7CuoK+qXFTDxTcJHfJGsvclFrXQmtg==
-----END CERTIFICATE-----