Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313633353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a313633353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          38goWLfdWLMu68zS6fJgDf370DPhGRhuTMin32wkWLc=
Subject key identifier:   F7:93:28:69:8D:0A:17:F8:8C:C8:A7:0E:E1:A4:B4:87:49:16:34:00
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6056C2AE636966B0FB1CA7AFDC9E871E251C0B8C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313633353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 16:35:01 +0000
ROA not before:           Fri 11 Feb 2022 16:30:01 +0000
ROA not after:            Fri 10 Feb 2023 16:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:1635::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:56:c2:ae:63:69:66:b0:fb:1c:a7:af:dc:9e:87:1e:25:1c:0b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 16:30:01 2022 GMT
            Not After : Feb 10 16:35:01 2023 GMT
        Subject: CN=3082010A0282010100B83F0FBB54FF1CD35632EAB13C6183F528547605C49C3826432DD3E735F8AF896717E4BB8B55DB15E2084D1181A0B0FF3168FEC137819D10C2DE687282D968BB894B149F5A3D78FD5B8EE605B25352AA55511D333DC7CBF9C24E15ECB09BC503BF98C85A04D2079160FA0A8BE9B249CCFC999639DE4667FCA8159B7413AA3B76AC41D4BF7E0A5C86EB8015D7479467CBA8EBA03F03973A006D85284B23472F9378D20463D30D054303799A780BD3F587E7A08B0006D2380C0E2A224C78497D66EB9FB4400CBBD0F5C574BCBA6A309C9877BD7B9349EE9023859CAA0DD988DFBAB894563CBE5E1120800EC953D80972FCD931A7B413611276DA6560A06C4B7AFD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:0f:bb:54:ff:1c:d3:56:32:ea:b1:3c:61:
                    83:f5:28:54:76:05:c4:9c:38:26:43:2d:d3:e7:35:
                    f8:af:89:67:17:e4:bb:8b:55:db:15:e2:08:4d:11:
                    81:a0:b0:ff:31:68:fe:c1:37:81:9d:10:c2:de:68:
                    72:82:d9:68:bb:89:4b:14:9f:5a:3d:78:fd:5b:8e:
                    e6:05:b2:53:52:aa:55:51:1d:33:3d:c7:cb:f9:c2:
                    4e:15:ec:b0:9b:c5:03:bf:98:c8:5a:04:d2:07:91:
                    60:fa:0a:8b:e9:b2:49:cc:fc:99:96:39:de:46:67:
                    fc:a8:15:9b:74:13:aa:3b:76:ac:41:d4:bf:7e:0a:
                    5c:86:eb:80:15:d7:47:94:67:cb:a8:eb:a0:3f:03:
                    97:3a:00:6d:85:28:4b:23:47:2f:93:78:d2:04:63:
                    d3:0d:05:43:03:79:9a:78:0b:d3:f5:87:e7:a0:8b:
                    00:06:d2:38:0c:0e:2a:22:4c:78:49:7d:66:eb:9f:
                    b4:40:0c:bb:d0:f5:c5:74:bc:ba:6a:30:9c:98:77:
                    bd:7b:93:49:ee:90:23:85:9c:aa:0d:d9:88:df:ba:
                    b8:94:56:3c:be:5e:11:20:80:0e:c9:53:d8:09:72:
                    fc:d9:31:a7:b4:13:61:12:76:da:65:60:a0:6c:4b:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:93:28:69:8D:0A:17:F8:8C:C8:A7:0E:E1:A4:B4:87:49:16:34:00
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a313633353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:1635::/80

    Signature Algorithm: sha256WithRSAEncryption
         99:b7:08:19:db:f9:0a:c5:83:61:55:d0:90:ee:2b:8f:9e:74:
         71:01:bb:31:2d:e9:38:fa:c0:52:21:0f:e7:c0:f6:30:fc:0f:
         2b:a8:1e:55:f7:70:ea:c3:b8:eb:5d:a6:69:fb:73:b4:ec:32:
         81:53:eb:1e:d8:ca:d7:c3:9a:c9:3f:0e:df:d1:1d:26:36:cb:
         cf:e5:14:ac:b1:a0:44:63:c5:b8:26:55:54:25:d1:d4:04:ac:
         23:9f:75:d5:3f:c3:1a:d3:ce:e5:c1:4a:26:ea:13:18:b7:3e:
         b0:04:2e:90:e7:1e:44:e0:69:66:37:e5:db:52:8c:9e:6f:b6:
         98:3d:05:6c:96:e4:ce:2c:63:14:e7:49:15:73:f4:21:b2:f2:
         a1:e3:3d:77:3d:1f:06:80:51:40:52:79:7c:47:4b:dc:e1:ef:
         fe:56:5b:bb:15:cb:94:90:08:0f:b0:9a:8b:81:da:6e:0b:f0:
         46:d2:60:c9:7c:18:1a:f1:ad:bd:6d:f0:fe:0d:6b:f7:1b:1e:
         eb:48:75:52:ff:50:3b:bc:fd:ee:78:a1:9d:3b:07:ec:11:43:
         bb:f5:6c:e9:1b:7d:42:df:b2:01:8f:5b:e3:30:3f:e3:6a:7a:
         2c:e4:42:c9:64:ee:e1:23:38:6d:8c:42:04:a0:e8:e0:4e:80:
         a5:81:37:99
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUYFbCrmNpZrD7HKev3J6HHiUcC4wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjExMTYzMDAxWhcNMjMwMjEwMTYzNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI4M0YwRkJC
NTRGRjFDRDM1NjMyRUFCMTNDNjE4M0Y1Mjg1NDc2MDVDNDlDMzgyNjQzMkREM0U3
MzVGOEFGODk2NzE3RTRCQjhCNTVEQjE1RTIwODREMTE4MUEwQjBGRjMxNjhGRUMx
Mzc4MTlEMTBDMkRFNjg3MjgyRDk2OEJCODk0QjE0OUY1QTNENzhGRDVCOEVFNjA1
QjI1MzUyQUE1NTUxMUQzMzNEQzdDQkY5QzI0RTE1RUNCMDlCQzUwM0JGOThDODVB
MDREMjA3OTE2MEZBMEE4QkU5QjI0OUNDRkM5OTk2MzlERTQ2NjdGQ0E4MTU5Qjc0
MTNBQTNCNzZBQzQxRDRCRjdFMEE1Qzg2RUI4MDE1RDc0Nzk0NjdDQkE4RUJBMDNG
MDM5NzNBMDA2RDg1Mjg0QjIzNDcyRjkzNzhEMjA0NjNEMzBEMDU0MzAzNzk5QTc4
MEJEM0Y1ODdFN0EwOEIwMDA2RDIzODBDMEUyQTIyNEM3ODQ5N0Q2NkVCOUZCNDQw
MENCQkQwRjVDNTc0QkNCQTZBMzA5Qzk4NzdCRDdCOTM0OUVFOTAyMzg1OUNBQTBE
RDk4OERGQkFCODk0NTYzQ0JFNUUxMTIwODAwRUM5NTNEODA5NzJGQ0Q5MzFBN0I0
MTM2MTEyNzZEQTY1NjBBMDZDNEI3QUZEMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALg/D7tU/xzTVjLqsTxhg/UoVHYFxJw4JkMt0+c1
+K+JZxfku4tV2xXiCE0RgaCw/zFo/sE3gZ0Qwt5ocoLZaLuJSxSfWj14/VuO5gWy
U1KqVVEdMz3Hy/nCThXssJvFA7+YyFoE0geRYPoKi+myScz8mZY53kZn/KgVm3QT
qjt2rEHUv34KXIbrgBXXR5Rny6jroD8DlzoAbYUoSyNHL5N40gRj0w0FQwN5mngL
0/WH56CLAAbSOAwOKiJMeEl9ZuuftEAMu9D1xXS8umownJh3vXuTSe6QI4Wcqg3Z
iN+6uJRWPL5eESCADslT2Aly/Nkxp7QTYRJ22mVgoGxLev0CAwEAAaOCApwwggKY
MB0GA1UdDgQWBBT3kyhpjQoX+IzIpw7hpLSHSRY0ADAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzEzYTMxMzYzMzM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhEWNTANBgkqhkiG
9w0BAQsFAAOCAQEAmbcIGdv5CsWDYVXQkO4rj550cQG7MS3pOPrAUiEP58D2MPwP
K6geVfdw6sO4612maftztOwygVPrHtjK18OayT8O39EdJjbLz+UUrLGgRGPFuCZV
VCXR1ASsI5911T/DGtPO5cFKJuoTGLc+sAQukOceROBpZjfl21KMnm+2mD0FbJbk
zixjFOdJFXP0IbLyoeM9dz0fBoBRQFJ5fEdL3OHv/lZbuxXLlJAID7Cai4Habgvw
RtJgyXwYGvGtvW3w/g1r9xse60h1Uv9QO7z97nihnTsH7BFDu/Vs6Rt9Qt+yAY9b
4zA/42p6LORCyWTu4SM4bYxCBKDo4E6ApYE3mQ==
-----END CERTIFICATE-----