Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3931353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a3931353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          2cVWK8eZWmERbdazHLaIiz2/a14dltPTUxEmm2h1DdI=
Subject key identifier:   59:07:A9:0E:39:8F:E1:80:1F:D8:CC:34:47:1B:86:94:7B:BA:51:F6
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6339CC8D7A4C2BC46D86B5F8575A980751321048
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3931353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 09:15:01 +0000
ROA not before:           Sat 12 Feb 2022 09:10:01 +0000
ROA not after:            Sat 11 Feb 2023 09:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:915::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:39:cc:8d:7a:4c:2b:c4:6d:86:b5:f8:57:5a:98:07:51:32:10:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 09:10:01 2022 GMT
            Not After : Feb 11 09:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:b4:69:ab:d5:a3:c9:b5:ab:f6:ae:60:ef:
                    8e:41:70:da:43:3b:30:fc:12:d7:c5:c6:03:31:8b:
                    80:7e:7c:fe:ff:ae:22:1f:53:96:2d:b0:71:5b:9a:
                    bb:2d:c3:cd:9f:45:47:6f:d1:e0:74:8f:74:c2:dd:
                    69:90:ed:85:b6:08:11:78:54:53:bf:30:a5:cd:03:
                    0f:b7:a2:34:71:c0:69:c3:c1:b2:e6:1f:08:a9:cc:
                    8f:0e:0a:93:01:d9:04:69:88:cf:6f:5d:5e:24:f5:
                    4b:5c:56:20:c4:05:d3:ee:fb:fc:71:8b:16:0a:3e:
                    92:bc:43:56:af:71:c8:a7:1a:c7:41:06:78:e0:70:
                    9d:7c:b8:73:61:74:ad:fa:e5:59:ab:d0:ea:b3:75:
                    d7:84:75:7e:c8:dd:78:54:38:76:aa:34:b7:2f:f3:
                    e6:37:5f:f0:65:bb:60:bb:bd:60:c3:fa:0c:ed:bc:
                    c9:0d:45:af:06:df:21:56:48:29:ba:7b:8f:1e:ba:
                    af:81:88:61:1e:f4:0d:ee:84:24:69:8a:87:76:72:
                    00:6f:aa:b1:22:ce:2f:85:36:b9:16:42:d4:c2:c1:
                    65:6d:6a:1f:77:fc:2e:da:2a:ed:af:26:97:ea:6f:
                    b6:8e:f4:09:17:03:e9:2c:4f:f2:96:c5:54:f2:3b:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:07:A9:0E:39:8F:E1:80:1F:D8:CC:34:47:1B:86:94:7B:BA:51:F6
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a3931353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:915::/80

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:65:2b:2a:d8:fa:83:5f:2e:b1:e7:2a:ba:26:fd:32:7f:
         7d:35:d8:5b:12:91:8f:54:69:e8:6b:ef:35:de:4c:c9:6d:bf:
         7d:57:03:e4:a4:27:b9:5d:35:b6:6b:e7:04:b0:6d:ad:47:f9:
         70:c8:d8:39:66:d1:42:14:f1:ba:32:05:d4:84:f4:8b:43:b5:
         83:24:3b:98:41:26:c9:d3:5b:d0:95:2f:1c:a5:46:34:e7:2c:
         fa:e0:e3:23:2c:3f:52:ca:f4:ec:6e:bf:c4:87:4b:a6:67:49:
         41:5b:8c:2e:f8:79:05:1c:be:fe:ac:33:28:11:a8:1e:bf:6b:
         cf:2d:38:da:28:49:a3:4e:3e:ea:d8:84:c9:3c:20:f2:b5:f1:
         62:2f:30:ef:6f:4a:61:41:c8:d0:ca:46:45:94:5a:52:61:fd:
         e1:25:1f:74:2f:9c:47:5a:92:3a:56:cd:75:68:cd:f4:dd:7c:
         9f:4e:49:5f:d9:2a:1c:98:0a:87:84:2d:42:fa:51:09:a2:15:
         f2:3b:2d:37:b3:71:12:02:35:54:e7:e4:c3:ab:95:36:9b:57:
         64:88:1b:93:bf:54:0e:42:13:d5:da:ac:fa:9a:33:ee:6d:19:
         ff:89:e4:31:3c:ca:7d:0d:a8:c7:89:a8:e5:fa:92:3f:1d:29:
         bb:db:73:cd
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUYznMjXpMK8RthrX4V1qYB1EyEEgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjEyMDkxMDAxWhcNMjMwMjExMDkxNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEM0M0JCNDY5
QUJENUEzQzlCNUFCRjZBRTYwRUY4RTQxNzBEQTQzM0IzMEZDMTJEN0M1QzYwMzMx
OEI4MDdFN0NGRUZGQUUyMjFGNTM5NjJEQjA3MTVCOUFCQjJEQzNDRDlGNDU0NzZG
RDFFMDc0OEY3NEMyREQ2OTkwRUQ4NUI2MDgxMTc4NTQ1M0JGMzBBNUNEMDMwRkI3
QTIzNDcxQzA2OUMzQzFCMkU2MUYwOEE5Q0M4RjBFMEE5MzAxRDkwNDY5ODhDRjZG
NUQ1RTI0RjU0QjVDNTYyMEM0MDVEM0VFRkJGQzcxOEIxNjBBM0U5MkJDNDM1NkFG
NzFDOEE3MUFDNzQxMDY3OEUwNzA5RDdDQjg3MzYxNzRBREZBRTU1OUFCRDBFQUIz
NzVENzg0NzU3RUM4REQ3ODU0Mzg3NkFBMzRCNzJGRjNFNjM3NUZGMDY1QkI2MEJC
QkQ2MEMzRkEwQ0VEQkNDOTBENDVBRjA2REYyMTU2NDgyOUJBN0I4RjFFQkFBRjgx
ODg2MTFFRjQwREVFODQyNDY5OEE4Nzc2NzIwMDZGQUFCMTIyQ0UyRjg1MzZCOTE2
NDJENEMyQzE2NTZENkExRjc3RkMyRURBMkFFREFGMjY5N0VBNkZCNjhFRjQwOTE3
MDNFOTJDNEZGMjk2QzU1NEYyM0I3OEQxMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMQ7tGmr1aPJtav2rmDvjkFw2kM7MPwS18XGAzGL
gH58/v+uIh9Tli2wcVuauy3DzZ9FR2/R4HSPdMLdaZDthbYIEXhUU78wpc0DD7ei
NHHAacPBsuYfCKnMjw4KkwHZBGmIz29dXiT1S1xWIMQF0+77/HGLFgo+krxDVq9x
yKcax0EGeOBwnXy4c2F0rfrlWavQ6rN114R1fsjdeFQ4dqo0ty/z5jdf8GW7YLu9
YMP6DO28yQ1FrwbfIVZIKbp7jx66r4GIYR70De6EJGmKh3ZyAG+qsSLOL4U2uRZC
1MLBZW1qH3f8Ltoq7a8ml+pvto70CRcD6SxP8pbFVPI7eNECAwEAAaOCApowggKW
MB0GA1UdDgQWBBRZB6kOOY/hgB/YzDRHG4aUe7pR9jAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzIzYTM5MzEzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgISCRUwDQYJKoZIhvcN
AQELBQADggEBADbxZSsq2PqDXy6x5yq6Jv0yf3012FsSkY9Uaehr7zXeTMltv31X
A+SkJ7ldNbZr5wSwba1H+XDI2Dlm0UIU8boyBdSE9ItDtYMkO5hBJsnTW9CVLxyl
RjTnLPrg4yMsP1LK9Oxuv8SHS6ZnSUFbjC74eQUcvv6sMygRqB6/a88tONooSaNO
PurYhMk8IPK18WIvMO9vSmFByNDKRkWUWlJh/eElH3QvnEdakjpWzXVozfTdfJ9O
SV/ZKhyYCoeELUL6UQmiFfI7LTezcRICNVTn5MOrlTabV2SIG5O/VA5CE9XarPqa
M+5tGf+J5DE8yn0NqMeJqOX6kj8dKbvbc80=
-----END CERTIFICATE-----