Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3430303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a3430303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          dLghFtro6RexWgtmsTqHAfVNAW7gZujZL4zxd9KjB9g=
Subject key identifier:   39:61:2E:91:08:DC:00:DA:C5:07:49:BF:B3:6C:C2:20:64:98:22:03
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4105C7BB38DBD241C5CC2DB9DE394BF6997E0425
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3430303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 04:00:01 +0000
ROA not before:           Tue 08 Feb 2022 03:55:01 +0000
ROA not after:            Tue 07 Feb 2023 04:00:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:400::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:c7:bb:38:db:d2:41:c5:cc:2d:b9:de:39:4b:f6:99:7e:04:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 03:55:01 2022 GMT
            Not After : Feb  7 04:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:15:15:20:62:2d:98:e6:c9:c0:de:dd:a9:
                    9a:0a:9b:db:22:79:9d:5d:e3:93:86:d0:9e:af:60:
                    74:9e:9f:d9:be:0a:89:5b:56:b2:4b:e5:f0:41:b8:
                    a0:11:91:47:9d:75:6f:1d:86:9e:4a:dd:f1:ad:31:
                    82:21:2c:de:eb:04:39:2a:dc:a3:0b:2c:ba:ce:58:
                    1e:45:d6:65:a8:ca:99:ce:41:84:56:6d:39:f7:92:
                    00:26:21:a8:42:38:0c:49:48:74:17:88:86:22:f9:
                    3e:c6:78:33:1a:16:34:fb:f9:f0:64:04:bd:41:48:
                    70:68:58:f4:cf:53:bb:82:40:47:5f:9f:a9:52:2d:
                    45:fa:bc:ee:37:f3:b2:83:34:d3:c4:34:1d:fb:b9:
                    55:8e:06:e5:62:f1:7f:b0:10:12:ea:5c:80:dc:47:
                    5c:d8:5e:b3:79:b0:71:6e:c9:18:60:81:f7:e1:4f:
                    05:71:8e:6d:00:c7:a3:a2:19:f7:0b:85:da:53:c8:
                    94:6f:ea:3c:59:b7:5b:af:a0:fa:d6:9a:08:51:80:
                    a4:78:b5:85:fd:31:ec:29:08:ba:14:b5:07:bf:37:
                    8b:3f:36:d7:3d:8a:ba:cf:e2:f8:25:96:24:52:d9:
                    04:7b:7d:55:ce:46:fb:81:f0:fd:78:f0:5e:f5:13:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:61:2E:91:08:DC:00:DA:C5:07:49:BF:B3:6C:C2:20:64:98:22:03
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3430303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:400::/80

    Signature Algorithm: sha256WithRSAEncryption
         44:b0:80:f3:6c:86:71:2f:06:0a:97:5b:f4:14:e9:77:4b:b2:
         43:93:38:14:56:bf:6e:2a:ef:38:ae:64:09:7a:16:6f:40:c2:
         1f:e5:48:5c:78:22:e0:75:9c:68:dd:b8:11:86:ee:37:ad:25:
         61:44:2a:36:bf:25:a9:cb:4c:8f:54:e5:4c:7a:ea:a8:8f:62:
         5a:57:c3:21:fd:ad:b7:64:61:04:e5:86:25:6e:2c:5f:86:09:
         2a:86:be:8d:f3:e5:f1:74:d5:34:b6:6d:61:53:5b:d0:31:51:
         cc:3d:48:15:23:43:f2:c8:51:0a:6d:79:5f:e9:b5:55:c7:b1:
         6c:36:14:21:ad:65:82:87:91:c8:47:b7:40:79:70:b3:5d:09:
         a5:78:e7:be:12:fe:ad:d8:8d:da:5c:14:86:35:dc:4b:65:87:
         78:01:96:85:a0:d4:1a:81:42:4c:fc:e3:44:98:ab:8b:95:c5:
         1b:87:3f:42:a0:cc:ad:57:94:ef:a2:82:de:8b:cc:da:d0:91:
         38:9c:cf:1b:31:76:88:22:93:b7:65:40:43:a8:b0:b7:a8:fc:
         30:7d:c2:63:b6:e7:0f:c0:39:28:7b:65:3f:b6:ac:6e:b6:2c:
         a5:3d:ce:0e:ec:70:26:49:2c:a4:0c:47:0d:b3:7e:2f:54:ba:
         6b:36:14:87
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUQQXHuzjb0kHFzC253jlL9pl+BCUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA4MDM1NTAxWhcNMjMwMjA3MDQwMDAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMENERTUxNTE1
MjA2MjJEOThFNkM5QzBERUREQTk5QTBBOUJEQjIyNzk5RDVERTM5Mzg2RDA5RUFG
NjA3NDlFOUZEOUJFMEE4OTVCNTZCMjRCRTVGMDQxQjhBMDExOTE0NzlENzU2RjFE
ODY5RTRBRERGMUFEMzE4MjIxMkNERUVCMDQzOTJBRENBMzBCMkNCQUNFNTgxRTQ1
RDY2NUE4Q0E5OUNFNDE4NDU2NkQzOUY3OTIwMDI2MjFBODQyMzgwQzQ5NDg3NDE3
ODg4NjIyRjkzRUM2NzgzMzFBMTYzNEZCRjlGMDY0MDRCRDQxNDg3MDY4NThGNENG
NTNCQjgyNDA0NzVGOUZBOTUyMkQ0NUZBQkNFRTM3RjNCMjgzMzREM0M0MzQxREZC
Qjk1NThFMDZFNTYyRjE3RkIwMTAxMkVBNUM4MERDNDc1Q0Q4NUVCMzc5QjA3MTZF
QzkxODYwODFGN0UxNEYwNTcxOEU2RDAwQzdBM0EyMTlGNzBCODVEQTUzQzg5NDZG
RUEzQzU5Qjc1QkFGQTBGQUQ2OUEwODUxODBBNDc4QjU4NUZEMzFFQzI5MDhCQTE0
QjUwN0JGMzc4QjNGMzZENzNEOEFCQUNGRTJGODI1OTYyNDUyRDkwNDdCN0Q1NUNF
NDZGQjgxRjBGRDc4RjA1RUY1MTMyNUU5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM3lFRUgYi2Y5snA3t2pmgqb2yJ5nV3jk4bQnq9g
dJ6f2b4KiVtWskvl8EG4oBGRR511bx2Gnkrd8a0xgiEs3usEOSrcowssus5YHkXW
ZajKmc5BhFZtOfeSACYhqEI4DElIdBeIhiL5PsZ4MxoWNPv58GQEvUFIcGhY9M9T
u4JAR1+fqVItRfq87jfzsoM008Q0Hfu5VY4G5WLxf7AQEupcgNxHXNhes3mwcW7J
GGCB9+FPBXGObQDHo6IZ9wuF2lPIlG/qPFm3W6+g+taaCFGApHi1hf0x7CkIuhS1
B783iz821z2Kus/i+CWWJFLZBHt9Vc5G+4Hw/XjwXvUTJekCAwEAAaOCApowggKW
MB0GA1UdDgQWBBQ5YS6RCNwA2sUHSb+zbMIgZJgiAzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzgzYTM0MzAzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIIBAAwDQYJKoZIhvcN
AQELBQADggEBAESwgPNshnEvBgqXW/QU6XdLskOTOBRWv24q7ziuZAl6Fm9Awh/l
SFx4IuB1nGjduBGG7jetJWFEKja/JanLTI9U5Ux66qiPYlpXwyH9rbdkYQTlhiVu
LF+GCSqGvo3z5fF01TS2bWFTW9AxUcw9SBUjQ/LIUQpteV/ptVXHsWw2FCGtZYKH
kchHt0B5cLNdCaV4574S/q3YjdpcFIY13Etlh3gBloWg1BqBQkz840SYq4uVxRuH
P0KgzK1XlO+igt6LzNrQkTiczxsxdogik7dlQEOosLeo/DB9wmO25w/AOSh7ZT+2
rG62LKU9zg7scCZJLKQMRw2zfi9Uums2FIc=
-----END CERTIFICATE-----