Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3231303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a3231303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          aZODR9Dbnry98k9h5B2Mbvigr31SffsFnVCdcgFs+Fo=
Subject key identifier:   F0:14:43:81:B8:55:66:EA:BC:E1:5B:FB:FD:25:7C:39:30:06:3E:0B
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7FA8723ACB23A09533587123552A267865E4A2AD
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3231303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 02:10:01 +0000
ROA not before:           Fri 11 Feb 2022 02:05:01 +0000
ROA not after:            Fri 10 Feb 2023 02:10:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:210::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a8:72:3a:cb:23:a0:95:33:58:71:23:55:2a:26:78:65:e4:a2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 02:05:01 2022 GMT
            Not After : Feb 10 02:10:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:a9:97:f7:44:8b:4c:a1:97:2f:7d:13:c8:
                    56:7e:68:d8:7e:f4:a4:d8:97:6b:34:b6:67:cf:a4:
                    b2:d9:fc:b4:e7:82:ce:67:63:1e:e2:c6:d1:81:a5:
                    62:74:49:ca:e2:2d:b0:5c:f8:85:96:9b:20:25:67:
                    e8:2e:9c:c6:5a:07:81:c6:09:ba:f9:81:82:4d:ed:
                    1e:c2:b4:05:f6:e1:c9:0d:75:b1:33:3b:40:ec:97:
                    37:06:d2:7a:e9:6a:d6:c1:7d:55:b4:3a:99:9e:b4:
                    bc:16:30:61:1e:bc:a0:0e:2d:cc:c1:64:35:37:28:
                    d4:24:6e:36:58:b6:96:b6:ea:cb:b8:80:48:9b:55:
                    90:51:3f:7c:5c:e7:df:78:5d:5d:94:c7:6b:51:44:
                    15:6d:d8:da:74:bc:e4:95:ca:8f:01:45:1c:35:1e:
                    00:72:1a:12:c5:72:a2:b4:29:a7:ff:98:cc:c0:06:
                    9c:95:fe:5b:b9:f0:87:f7:19:14:07:9b:f4:44:3e:
                    08:dd:8f:4f:4e:18:0e:4b:ab:36:02:73:56:e8:53:
                    02:1d:48:e5:b7:06:b5:53:ba:e7:fb:a1:f5:03:54:
                    02:06:6d:5f:6c:c1:1a:97:81:5f:0c:87:82:8e:37:
                    15:47:bd:92:69:94:cb:2f:d0:30:49:b0:de:a5:84:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:14:43:81:B8:55:66:EA:BC:E1:5B:FB:FD:25:7C:39:30:06:3E:0B
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3231303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:210::/80

    Signature Algorithm: sha256WithRSAEncryption
         14:58:a6:e0:f9:6b:38:37:6a:3b:d4:13:55:f0:3c:43:9a:a3:
         49:c1:bf:b1:05:f7:bb:a3:34:c2:d9:29:b1:79:6f:b7:ec:3a:
         27:f1:36:19:a9:94:6e:ea:05:cb:97:17:d3:79:c7:39:39:73:
         59:a4:9c:e9:ce:bb:9a:c5:2a:8b:df:a3:4d:52:24:55:62:e9:
         d0:67:29:d3:f8:5c:1d:59:21:0c:c8:e1:52:ec:c0:71:bc:84:
         f1:b3:2f:56:1e:32:fe:0b:0e:fa:48:92:20:56:36:e7:60:80:
         62:3b:12:ff:1f:c8:88:2b:e9:ad:f9:b4:a0:54:4d:94:47:d3:
         a3:3e:5b:c2:eb:b5:4d:ee:41:40:9b:64:8b:71:0d:c9:78:a0:
         07:b8:88:16:52:8c:40:c7:f3:0d:77:58:4b:7b:31:6d:c0:ad:
         ed:55:06:7b:c1:bd:2b:f5:02:0f:7c:ff:46:92:37:49:df:66:
         a2:2c:44:fe:72:6b:f2:6f:df:80:f8:47:2a:49:db:24:52:06:
         1d:f0:91:2b:c1:fe:6b:7a:cc:13:7a:ff:9e:b7:15:8f:99:7d:
         c4:ab:49:b7:1d:96:57:48:52:43:52:31:84:1f:8f:35:9d:ee:
         62:87:07:e1:76:09:46:ea:31:a1:d4:6f:65:f8:c1:f2:5c:7b:
         fe:db:a7:07
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUf6hyOssjoJUzWHEjVSomeGXkoq0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjExMDIwNTAxWhcNMjMwMjEwMDIxMDAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI5RUJBOTk3
Rjc0NDhCNENBMTk3MkY3RDEzQzg1NjdFNjhEODdFRjRBNEQ4OTc2QjM0QjY2N0NG
QTRCMkQ5RkNCNEU3ODJDRTY3NjMxRUUyQzZEMTgxQTU2Mjc0NDlDQUUyMkRCMDVD
Rjg4NTk2OUIyMDI1NjdFODJFOUNDNjVBMDc4MUM2MDlCQUY5ODE4MjRERUQxRUMy
QjQwNUY2RTFDOTBENzVCMTMzM0I0MEVDOTczNzA2RDI3QUU5NkFENkMxN0Q1NUI0
M0E5OTlFQjRCQzE2MzA2MTFFQkNBMDBFMkRDQ0MxNjQzNTM3MjhENDI0NkUzNjU4
QjY5NkI2RUFDQkI4ODA0ODlCNTU5MDUxM0Y3QzVDRTdERjc4NUQ1RDk0Qzc2QjUx
NDQxNTZERDhEQTc0QkNFNDk1Q0E4RjAxNDUxQzM1MUUwMDcyMUExMkM1NzJBMkI0
MjlBN0ZGOThDQ0MwMDY5Qzk1RkU1QkI5RjA4N0Y3MTkxNDA3OUJGNDQ0M0UwOERE
OEY0RjRFMTgwRTRCQUIzNjAyNzM1NkU4NTMwMjFENDhFNUI3MDZCNTUzQkFFN0ZC
QTFGNTAzNTQwMjA2NkQ1RjZDQzExQTk3ODE1RjBDODc4MjhFMzcxNTQ3QkQ5MjY5
OTRDQjJGRDAzMDQ5QjBERUE1ODQzODYxMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALnrqZf3RItMoZcvfRPIVn5o2H70pNiXazS2Z8+k
stn8tOeCzmdjHuLG0YGlYnRJyuItsFz4hZabICVn6C6cxloHgcYJuvmBgk3tHsK0
BfbhyQ11sTM7QOyXNwbSeulq1sF9VbQ6mZ60vBYwYR68oA4tzMFkNTco1CRuNli2
lrbqy7iASJtVkFE/fFzn33hdXZTHa1FEFW3Y2nS85JXKjwFFHDUeAHIaEsVyorQp
p/+YzMAGnJX+W7nwh/cZFAeb9EQ+CN2PT04YDkurNgJzVuhTAh1I5bcGtVO65/uh
9QNUAgZtX2zBGpeBXwyHgo43FUe9kmmUyy/QMEmw3qWEOGECAwEAAaOCApowggKW
MB0GA1UdDgQWBBTwFEOBuFVm6rzhW/v9JXw5MAY+CzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzEzYTMyMzEzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIRAhAwDQYJKoZIhvcN
AQELBQADggEBABRYpuD5azg3ajvUE1XwPEOao0nBv7EF97ujNMLZKbF5b7fsOifx
NhmplG7qBcuXF9N5xzk5c1mknOnOu5rFKovfo01SJFVi6dBnKdP4XB1ZIQzI4VLs
wHG8hPGzL1YeMv4LDvpIkiBWNudggGI7Ev8fyIgr6a35tKBUTZRH06M+W8LrtU3u
QUCbZItxDcl4oAe4iBZSjEDH8w13WEt7MW3Are1VBnvBvSv1Ag98/0aSN0nfZqIs
RP5ya/Jv34D4RypJ2yRSBh3wkSvB/mt6zBN6/563FY+ZfcSrSbcdlldIUkNSMYQf
jzWd7mKHB+F2CUbqMaHUb2X4wfJce/7bpwc=
-----END CERTIFICATE-----