Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3431303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231313a3431303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          SY+nGHOL1HSGuONpRTxhMuCJVOZc13RqbifgeDINfXs=
Subject key identifier:   96:50:6E:29:A3:41:36:A8:BD:84:0E:63:44:F6:2C:F4:9D:A3:B8:06
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       418598CA8DF42BE014A48D88E74BCCC7AD2AB697
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3431303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 11 Feb 2022 04:10:02 +0000
ROA not before:           Fri 11 Feb 2022 04:05:02 +0000
ROA not after:            Fri 10 Feb 2023 04:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:211:410::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:85:98:ca:8d:f4:2b:e0:14:a4:8d:88:e7:4b:cc:c7:ad:2a:b6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 11 04:05:02 2022 GMT
            Not After : Feb 10 04:10:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:49:3b:58:14:58:ed:71:5e:8a:75:08:4c:
                    52:a2:5f:96:8e:b8:28:b4:b5:77:a2:eb:e2:6f:f3:
                    3f:da:25:57:0c:c7:7e:04:70:20:88:8a:7b:00:de:
                    9e:82:d8:56:fb:98:6f:b5:d4:b8:cc:89:33:ac:d3:
                    55:21:3b:66:26:92:90:5d:8c:78:7d:5f:36:eb:e5:
                    83:07:a6:08:e2:33:38:ce:86:8a:e9:44:f0:97:2a:
                    fb:be:1f:ab:2e:a4:2c:f7:4d:66:ea:40:86:4e:8c:
                    85:e5:10:ec:c3:9f:42:b1:ae:1a:96:6d:f2:57:db:
                    e8:ef:f8:39:36:a5:bc:76:ec:7d:27:36:34:98:fa:
                    99:aa:90:4d:32:76:44:29:fd:83:65:17:21:3b:bb:
                    b9:c4:cc:3e:8a:88:4c:cb:34:e8:03:18:35:8a:b7:
                    f1:51:05:c2:e3:06:ff:b2:82:2a:24:5c:55:7a:bf:
                    dc:bb:c0:1a:98:b0:2d:53:f8:0c:4a:76:1d:81:1d:
                    60:dc:29:1e:59:c8:66:f5:9e:8b:61:fe:20:d1:4f:
                    8c:42:e0:cf:a9:9c:75:2e:44:70:0d:96:63:33:ea:
                    ea:80:c8:e8:ec:d0:54:c6:62:bd:44:82:28:22:c0:
                    84:7a:76:1e:da:86:86:0e:31:4d:15:24:16:30:28:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:50:6E:29:A3:41:36:A8:BD:84:0E:63:44:F6:2C:F4:9D:A3:B8:06
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231313a3431303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:211:410::/80

    Signature Algorithm: sha256WithRSAEncryption
         16:91:92:ae:ab:ae:2e:1a:b7:d9:6d:33:3a:34:e4:90:ef:a7:
         6c:0e:d1:9c:43:cc:48:80:55:29:fa:82:eb:e7:38:9a:ff:10:
         d3:81:25:e9:b0:52:16:75:66:13:67:5c:55:eb:f7:c5:bf:db:
         0c:6f:50:17:5d:83:a4:71:68:64:bb:36:b8:0d:3f:07:53:28:
         37:df:ed:f6:49:ae:9c:82:dd:59:14:6d:32:d7:96:9f:ea:07:
         3a:40:8b:de:6e:5b:13:75:4d:cd:ce:9d:ad:7b:77:0f:d1:40:
         0f:19:40:08:35:2a:11:38:c8:b3:69:3d:ab:06:08:50:11:6e:
         7b:a7:d9:bd:bd:31:2e:98:fa:d2:70:fd:df:9f:b0:91:53:82:
         ec:0e:db:f5:0f:7c:2d:78:f5:f0:da:9e:18:95:05:fe:96:c5:
         f3:32:e0:b6:93:24:cf:38:3c:df:72:e1:da:42:b0:3f:a5:46:
         6d:d5:e2:7d:e9:d1:b0:9b:27:c4:c3:fe:8d:e0:da:c9:d9:e2:
         4c:42:7d:e8:ff:a3:12:f5:3a:e1:2b:3f:3e:f2:9f:a2:1e:10:
         69:29:dc:6e:c7:0a:86:1d:25:07:c0:0b:29:0d:aa:7a:f2:e8:
         4f:b4:43:2e:41:5a:be:45:76:3b:68:91:38:50:a4:c3:1a:fe:
         53:94:8b:a4
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUQYWYyo30K+AUpI2I50vMx60qtpcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjExMDQwNTAyWhcNMjMwMjEwMDQxMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEExNzE0OTNC
NTgxNDU4RUQ3MTVFOEE3NTA4NEM1MkEyNUY5NjhFQjgyOEI0QjU3N0EyRUJFMjZG
RjMzRkRBMjU1NzBDQzc3RTA0NzAyMDg4OEE3QjAwREU5RTgyRDg1NkZCOTg2RkI1
RDRCOENDODkzM0FDRDM1NTIxM0I2NjI2OTI5MDVEOEM3ODdENUYzNkVCRTU4MzA3
QTYwOEUyMzMzOENFODY4QUU5NDRGMDk3MkFGQkJFMUZBQjJFQTQyQ0Y3NEQ2NkVB
NDA4NjRFOEM4NUU1MTBFQ0MzOUY0MkIxQUUxQTk2NkRGMjU3REJFOEVGRjgzOTM2
QTVCQzc2RUM3RDI3MzYzNDk4RkE5OUFBOTA0RDMyNzY0NDI5RkQ4MzY1MTcyMTNC
QkJCOUM0Q0MzRThBODg0Q0NCMzRFODAzMTgzNThBQjdGMTUxMDVDMkUzMDZGRkIy
ODIyQTI0NUM1NTdBQkZEQ0JCQzAxQTk4QjAyRDUzRjgwQzRBNzYxRDgxMUQ2MERD
MjkxRTU5Qzg2NkY1OUU4QjYxRkUyMEQxNEY4QzQyRTBDRkE5OUM3NTJFNDQ3MDBE
OTY2MzMzRUFFQTgwQzhFOEVDRDA1NEM2NjJCRDQ0ODIyODIyQzA4NDdBNzYxRURB
ODY4NjBFMzE0RDE1MjQxNjMwMjg3NENGMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKFxSTtYFFjtcV6KdQhMUqJflo64KLS1d6Lr4m/z
P9olVwzHfgRwIIiKewDenoLYVvuYb7XUuMyJM6zTVSE7ZiaSkF2MeH1fNuvlgwem
COIzOM6GiulE8Jcq+74fqy6kLPdNZupAhk6MheUQ7MOfQrGuGpZt8lfb6O/4OTal
vHbsfSc2NJj6maqQTTJ2RCn9g2UXITu7ucTMPoqITMs06AMYNYq38VEFwuMG/7KC
KiRcVXq/3LvAGpiwLVP4DEp2HYEdYNwpHlnIZvWei2H+INFPjELgz6mcdS5EcA2W
YzPq6oDI6OzQVMZivUSCKCLAhHp2HtqGhg4xTRUkFjAodM8CAwEAAaOCApowggKW
MB0GA1UdDgQWBBSWUG4po0E2qL2EDmNE9iz0naO4BjAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzEzYTM0MzEzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIRBBAwDQYJKoZIhvcN
AQELBQADggEBABaRkq6rri4at9ltMzo05JDvp2wO0ZxDzEiAVSn6guvnOJr/ENOB
JemwUhZ1ZhNnXFXr98W/2wxvUBddg6RxaGS7NrgNPwdTKDff7fZJrpyC3VkUbTLX
lp/qBzpAi95uWxN1Tc3Ona17dw/RQA8ZQAg1KhE4yLNpPasGCFARbnun2b29MS6Y
+tJw/d+fsJFTguwO2/UPfC149fDanhiVBf6WxfMy4LaTJM84PN9y4dpCsD+lRm3V
4n3p0bCbJ8TD/o3g2snZ4kxCfej/oxL1OuErPz7yn6IeEGkp3G7HCoYdJQfACykN
qnry6E+0Qy5BWr5FdjtokThQpMMa/lOUi6Q=
-----END CERTIFICATE-----