Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313635353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a313635353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          rcxSudMsoL55MPyJ+wCMKUMyOJyJK27LYv8ojNmQ93U=
Subject key identifier:   6F:A6:3E:0E:E1:DC:14:B6:68:10:43:3D:DB:8B:1F:06:80:E2:9E:53
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       71677837126679A2B2974B48DF43206A351A49BF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313635353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 16:55:01 +0000
ROA not before:           Tue 08 Feb 2022 16:50:01 +0000
ROA not after:            Tue 07 Feb 2023 16:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:1655::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:67:78:37:12:66:79:a2:b2:97:4b:48:df:43:20:6a:35:1a:49:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 16:50:01 2022 GMT
            Not After : Feb  7 16:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:0a:23:8c:10:be:77:5a:23:70:28:d1:72:e9:
                    74:66:61:4f:eb:6a:0d:8b:89:5e:0e:b8:47:c8:aa:
                    2e:4e:d4:50:08:c2:e6:9a:fe:c9:f8:cd:1a:6c:fa:
                    80:55:bc:f4:d1:07:3d:f7:50:dc:07:2d:94:64:ee:
                    8e:6b:8e:cd:3d:c0:36:bb:12:e3:bd:75:20:8a:fb:
                    cd:64:44:62:f9:4f:74:05:f2:ff:d9:46:a5:4d:48:
                    ab:4b:56:11:7b:26:79:e5:da:39:ec:e9:76:a8:e0:
                    53:40:ca:da:9a:03:0e:1b:32:4f:f8:6e:e2:4a:8f:
                    6c:70:74:58:8e:5d:e1:13:98:20:b8:39:bc:d5:59:
                    30:a9:1c:c6:a4:ea:e0:dd:80:0f:a5:15:84:f4:62:
                    7e:04:c8:1c:a6:57:f3:47:65:e6:b6:ca:d3:58:0c:
                    0d:e5:68:fc:3c:5a:41:fb:93:49:53:e0:ef:72:57:
                    6f:ea:a5:9b:52:9d:fa:ed:d5:b7:c3:2b:57:24:27:
                    97:d5:9f:9f:72:53:1c:1e:13:63:cb:34:dc:1e:79:
                    81:4c:f6:bf:80:fa:3c:e7:50:79:7f:76:19:c3:26:
                    f5:bd:15:37:71:e1:c3:20:54:08:12:1c:e9:a4:9e:
                    74:d1:cf:a2:16:84:05:40:a2:2e:5c:08:ce:58:f2:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:3E:0E:E1:DC:14:B6:68:10:43:3D:DB:8B:1F:06:80:E2:9E:53
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313635353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:1655::/80

    Signature Algorithm: sha256WithRSAEncryption
         26:1f:71:6f:ec:62:0d:cf:80:7f:83:8b:5d:d2:3f:e3:2c:12:
         c2:cf:0b:8e:49:a1:be:3b:96:15:68:fa:91:d8:c8:49:33:56:
         77:23:94:b5:2f:fc:b5:4a:ca:a6:4f:26:b4:69:b5:70:fd:99:
         44:7b:0c:ca:a9:0d:c6:82:1d:1b:49:6b:2c:f4:d4:1a:ee:23:
         fc:02:ca:df:e8:30:d8:ec:39:ea:42:e6:5a:c3:3d:7e:07:bd:
         0e:39:d4:30:23:a8:24:ea:12:2e:df:c0:0f:9b:e7:30:b2:2f:
         df:b8:88:b1:c1:65:1f:a9:dd:ff:d9:85:06:f1:2b:b8:06:e6:
         ef:ba:5a:bf:b3:ee:ac:06:ef:de:18:d1:75:7e:33:ae:de:32:
         2c:eb:c3:14:c4:ee:9f:64:90:f5:97:34:82:5a:1e:06:e5:14:
         a5:fe:de:92:30:f5:53:97:39:90:ea:46:c4:bf:fb:8e:8c:9e:
         a1:0a:db:14:04:6c:39:ac:28:c1:f2:d1:84:3f:ce:be:1c:2d:
         78:f4:6a:1b:8a:a7:e8:39:92:70:8b:b9:65:36:b3:ef:f5:b9:
         f3:82:ce:5d:07:1c:ed:45:af:94:be:53:3e:d5:76:ae:87:e3:
         f3:31:b6:16:3d:d1:79:cd:1b:2b:9c:06:f7:be:e5:da:ee:57:
         70:bc:55:79
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUcWd4NxJmeaKyl0tI30MgajUaSb8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA4MTY1MDAxWhcNMjMwMjA3MTY1NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEZDMEEyMzhD
MTBCRTc3NUEyMzcwMjhEMTcyRTk3NDY2NjE0RkVCNkEwRDhCODk1RTBFQjg0N0M4
QUEyRTRFRDQ1MDA4QzJFNjlBRkVDOUY4Q0QxQTZDRkE4MDU1QkNGNEQxMDczREY3
NTBEQzA3MkQ5NDY0RUU4RTZCOEVDRDNEQzAzNkJCMTJFM0JENzUyMDhBRkJDRDY0
NDQ2MkY5NEY3NDA1RjJGRkQ5NDZBNTRENDhBQjRCNTYxMTdCMjY3OUU1REEzOUVD
RTk3NkE4RTA1MzQwQ0FEQTlBMDMwRTFCMzI0RkY4NkVFMjRBOEY2QzcwNzQ1ODhF
NURFMTEzOTgyMEI4MzlCQ0Q1NTkzMEE5MUNDNkE0RUFFMEREODAwRkE1MTU4NEY0
NjI3RTA0QzgxQ0E2NTdGMzQ3NjVFNkI2Q0FEMzU4MEMwREU1NjhGQzNDNUE0MUZC
OTM0OTUzRTBFRjcyNTc2RkVBQTU5QjUyOURGQUVERDVCN0MzMkI1NzI0Mjc5N0Q1
OUY5RjcyNTMxQzFFMTM2M0NCMzREQzFFNzk4MTRDRjZCRjgwRkEzQ0U3NTA3OTdG
NzYxOUMzMjZGNUJEMTUzNzcxRTFDMzIwNTQwODEyMUNFOUE0OUU3NEQxQ0ZBMjE2
ODQwNTQwQTIyRTVDMDhDRTU4RjI1MzFCMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPwKI4wQvndaI3Ao0XLpdGZhT+tqDYuJXg64R8iq
Lk7UUAjC5pr+yfjNGmz6gFW89NEHPfdQ3ActlGTujmuOzT3ANrsS4711IIr7zWRE
YvlPdAXy/9lGpU1Iq0tWEXsmeeXaOezpdqjgU0DK2poDDhsyT/hu4kqPbHB0WI5d
4ROYILg5vNVZMKkcxqTq4N2AD6UVhPRifgTIHKZX80dl5rbK01gMDeVo/DxaQfuT
SVPg73JXb+qlm1Kd+u3Vt8MrVyQnl9Wfn3JTHB4TY8s03B55gUz2v4D6POdQeX92
GcMm9b0VN3HhwyBUCBIc6aSedNHPohaEBUCiLlwIzljyUxsCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBRvpj4O4dwUtmgQQz3bix8GgOKeUzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzgzYTMxMzYzNTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAggWVTANBgkqhkiG
9w0BAQsFAAOCAQEAJh9xb+xiDc+Af4OLXdI/4ywSws8LjkmhvjuWFWj6kdjISTNW
dyOUtS/8tUrKpk8mtGm1cP2ZRHsMyqkNxoIdG0lrLPTUGu4j/ALK3+gw2Ow56kLm
WsM9fge9DjnUMCOoJOoSLt/AD5vnMLIv37iIscFlH6nd/9mFBvEruAbm77pav7Pu
rAbv3hjRdX4zrt4yLOvDFMTun2SQ9Zc0gloeBuUUpf7ekjD1U5c5kOpGxL/7joye
oQrbFARsOawowfLRhD/OvhwtePRqG4qn6DmScIu5ZTaz7/W584LOXQcc7UWvlL5T
PtV2rofj8zG2Fj3Rec0bK5wG977l2u5XcLxVeQ==
-----END CERTIFICATE-----