Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a323131353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a323131353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          WLbKo9Oe64bxKXsuL8OFMdSthaOGGtj6SBGYdhW1e1c=
Subject key identifier:   D3:73:BB:78:FD:CD:5F:BC:2B:F9:FF:00:71:BA:DB:C8:12:A9:CD:5F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       40F40E50AFAD992058BF5C2858EBD27DDC423760
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a323131353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 21:15:01 +0000
ROA not before:           Tue 08 Feb 2022 21:10:01 +0000
ROA not after:            Tue 07 Feb 2023 21:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:2115::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f4:0e:50:af:ad:99:20:58:bf:5c:28:58:eb:d2:7d:dc:42:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 21:10:01 2022 GMT
            Not After : Feb  7 21:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:31:1c:5a:58:0c:aa:90:68:87:59:6e:1d:fb:
                    2e:a2:98:76:6b:ff:bc:f5:92:5b:cb:0e:20:57:c6:
                    6b:eb:81:a2:52:95:21:cd:80:43:22:34:a7:2b:df:
                    57:da:8d:5a:4d:0e:b2:7f:47:a1:3e:49:85:75:f4:
                    16:60:33:78:30:b6:ad:ac:6a:fb:45:2f:cf:8e:e5:
                    a4:ac:b2:84:eb:15:26:f2:18:c7:f7:52:52:d9:02:
                    73:a4:a2:b6:a6:fd:41:52:f2:56:8f:2b:94:a8:99:
                    60:c2:55:e3:64:75:c9:e0:d0:76:90:c7:69:c9:c6:
                    19:0d:fc:d8:36:d5:3e:46:82:a7:43:c5:46:80:66:
                    5b:40:fa:33:af:32:6e:51:03:88:bc:d3:25:11:b7:
                    f7:08:09:a3:5c:1c:d3:83:49:dc:06:e9:c2:6f:28:
                    b7:d3:26:19:ee:1a:ce:fa:e6:9b:a2:e3:7f:34:bc:
                    1a:53:51:2d:a2:f8:d3:da:dc:55:71:a0:0d:4f:17:
                    a1:f7:13:3d:39:5b:21:32:e1:f7:23:c7:63:0b:74:
                    33:95:3f:0a:6e:3b:37:de:b6:32:5e:f2:22:57:94:
                    40:c8:b1:17:95:95:65:b6:9e:d5:fc:3e:99:99:31:
                    63:6e:ee:f1:57:de:29:34:47:fd:4f:a4:85:45:e0:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:73:BB:78:FD:CD:5F:BC:2B:F9:FF:00:71:BA:DB:C8:12:A9:CD:5F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a323131353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:2115::/80

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:bd:69:49:7b:1c:15:42:b6:dd:c5:90:c7:81:2b:ba:f8:
         97:a1:2f:db:f5:67:90:ef:45:2a:6a:9b:20:32:4a:e9:7f:6b:
         db:ed:a2:56:92:72:2a:12:56:26:be:14:70:c9:05:ca:43:3f:
         cb:5f:e5:86:03:b5:bb:5d:56:4d:ae:e1:d4:51:fe:9a:c3:8e:
         b7:2d:f0:cc:28:92:0c:ba:c9:f8:10:82:42:db:7f:17:b2:07:
         a5:bf:54:ef:a3:ed:fe:18:41:58:2a:ba:05:a5:67:b2:c0:aa:
         f1:8d:04:e8:a4:00:d4:f5:eb:d0:e3:19:30:82:6d:0d:6e:f9:
         af:00:6e:c8:a3:dc:f6:7b:8c:ac:ac:fd:ff:4f:e3:89:07:8c:
         ce:18:13:9e:b6:e3:aa:b4:7a:b3:39:8e:a3:9c:55:ec:e2:f8:
         49:69:bb:6d:5c:ce:a7:3a:c1:f1:07:fc:d1:5f:ba:dc:11:b4:
         1b:b6:67:c8:87:01:07:e6:24:b7:52:48:ff:e8:3b:a1:b4:c3:
         aa:d9:6d:a7:f8:d2:7a:63:34:9b:ee:a8:e5:57:c0:8d:76:cf:
         35:72:c7:53:1b:39:69:01:92:30:f7:27:91:4b:aa:72:6c:db:
         b5:a8:c8:bb:2c:2e:f4:2f:a5:dc:af:3b:66:5b:7d:c7:9d:b3:
         ce:1a:2b:15
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUQPQOUK+tmSBYv1woWOvSfdxCN2AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA4MjExMDAxWhcNMjMwMjA3MjExNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEQ2MzExQzVB
NTgwQ0FBOTA2ODg3NTk2RTFERkIyRUEyOTg3NjZCRkZCQ0Y1OTI1QkNCMEUyMDU3
QzY2QkVCODFBMjUyOTUyMUNEODA0MzIyMzRBNzJCREY1N0RBOEQ1QTREMEVCMjdG
NDdBMTNFNDk4NTc1RjQxNjYwMzM3ODMwQjZBREFDNkFGQjQ1MkZDRjhFRTVBNEFD
QjI4NEVCMTUyNkYyMThDN0Y3NTI1MkQ5MDI3M0E0QTJCNkE2RkQ0MTUyRjI1NjhG
MkI5NEE4OTk2MEMyNTVFMzY0NzVDOUUwRDA3NjkwQzc2OUM5QzYxOTBERkNEODM2
RDUzRTQ2ODJBNzQzQzU0NjgwNjY1QjQwRkEzM0FGMzI2RTUxMDM4OEJDRDMyNTEx
QjdGNzA4MDlBMzVDMUNEMzgzNDlEQzA2RTlDMjZGMjhCN0QzMjYxOUVFMUFDRUZB
RTY5QkEyRTM3RjM0QkMxQTUzNTEyREEyRjhEM0RBREM1NTcxQTAwRDRGMTdBMUY3
MTMzRDM5NUIyMTMyRTFGNzIzQzc2MzBCNzQzMzk1M0YwQTZFM0IzN0RFQjYzMjVF
RjIyMjU3OTQ0MEM4QjExNzk1OTU2NUI2OUVENUZDM0U5OTk5MzE2MzZFRUVGMTU3
REUyOTM0NDdGRDRGQTQ4NTQ1RTBGMDAzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANYxHFpYDKqQaIdZbh37LqKYdmv/vPWSW8sOIFfG
a+uBolKVIc2AQyI0pyvfV9qNWk0Osn9HoT5JhXX0FmAzeDC2raxq+0Uvz47lpKyy
hOsVJvIYx/dSUtkCc6Sitqb9QVLyVo8rlKiZYMJV42R1yeDQdpDHacnGGQ382DbV
PkaCp0PFRoBmW0D6M68yblEDiLzTJRG39wgJo1wc04NJ3Abpwm8ot9MmGe4azvrm
m6LjfzS8GlNRLaL409rcVXGgDU8XofcTPTlbITLh9yPHYwt0M5U/Cm47N962Ml7y
IleUQMixF5WVZbae1fw+mZkxY27u8VfeKTRH/U+khUXg8AMCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBTTc7t4/c1fvCv5/wBxutvIEqnNXzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzgzYTMyMzEzMTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAgghFTANBgkqhkiG
9w0BAQsFAAOCAQEAam+9aUl7HBVCtt3FkMeBK7r4l6Ev2/VnkO9FKmqbIDJK6X9r
2+2iVpJyKhJWJr4UcMkFykM/y1/lhgO1u11WTa7h1FH+msOOty3wzCiSDLrJ+BCC
Qtt/F7IHpb9U76Pt/hhBWCq6BaVnssCq8Y0E6KQA1PXr0OMZMIJtDW75rwBuyKPc
9nuMrKz9/0/jiQeMzhgTnrbjqrR6szmOo5xV7OL4SWm7bVzOpzrB8Qf80V+63BG0
G7ZnyIcBB+Ykt1JI/+g7obTDqtltp/jSemM0m+6o5VfAjXbPNXLHUxs5aQGSMPcn
kUuqcmzbtajIuywu9C+l3K87Zlt9x52zzhorFQ==
-----END CERTIFICATE-----