Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313532303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a313532303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          +VxfQLAd549Y+YNUPA1B7/NQVj/VfNOMV+YD+oP+MLA=
Subject key identifier:   1E:3A:D9:93:4C:71:CB:8A:2F:1E:64:6A:AE:3E:B1:34:53:A9:8C:CB
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       783B8C2A75BEA8C486D3EB913E8BB15E30AA913D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313532303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 15:20:02 +0000
ROA not before:           Sun 13 Feb 2022 15:15:02 +0000
ROA not after:            Sun 12 Feb 2023 15:20:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:1520::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3b:8c:2a:75:be:a8:c4:86:d3:eb:91:3e:8b:b1:5e:30:aa:91:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 15:15:02 2022 GMT
            Not After : Feb 12 15:20:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:7f:c7:31:e3:39:84:34:7a:95:61:74:ab:
                    04:c2:08:b8:c5:db:6b:13:35:2f:26:45:0e:01:4b:
                    df:2e:97:a0:c7:50:1f:8f:b1:ec:bd:14:2d:f4:d6:
                    16:c1:81:f8:2f:21:9a:f8:45:11:d0:68:18:87:e7:
                    52:75:42:63:62:8b:0a:0d:82:e8:88:8d:34:c7:b0:
                    5e:60:02:23:06:a3:bb:0b:39:79:0b:74:23:04:98:
                    dd:3c:6f:a6:06:67:a4:52:be:3d:a0:ee:12:5a:5e:
                    23:fc:a4:1b:6b:71:8e:9e:33:64:11:32:bc:0c:b3:
                    3e:26:43:9d:c9:18:6b:87:44:94:11:ae:5f:85:ed:
                    a3:6c:ae:7a:dd:e5:3a:c6:07:f0:aa:31:e5:82:46:
                    88:6d:7c:8e:5c:f2:7a:3f:3b:1c:1c:95:88:8c:7d:
                    02:57:0c:cf:a7:51:43:b5:2d:c4:83:a9:12:60:72:
                    84:a7:3b:16:c9:b0:eb:88:c8:dd:b1:b3:4e:fa:ce:
                    76:cb:9d:4b:43:19:a5:51:a9:45:c0:ec:1e:0f:a8:
                    8f:63:81:23:1a:d7:10:5e:04:56:33:a1:d7:02:6a:
                    0d:ee:1f:63:77:a3:25:2d:b8:a0:74:99:fc:2c:b8:
                    bd:8b:c6:88:d1:b0:28:8c:ea:8d:74:ac:f8:b5:13:
                    dc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3A:D9:93:4C:71:CB:8A:2F:1E:64:6A:AE:3E:B1:34:53:A9:8C:CB
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a313532303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:1520::/80

    Signature Algorithm: sha256WithRSAEncryption
         40:98:67:1b:41:a9:40:3e:ff:a5:99:ae:0a:25:10:27:b0:80:
         11:3c:92:42:b2:14:c7:46:60:ee:f3:72:7d:9a:e9:83:53:e3:
         a5:c2:c1:1e:e8:b4:21:b0:86:37:19:7d:44:bd:c6:01:4c:42:
         b6:d4:23:41:20:28:f0:2b:1a:07:57:c0:ce:35:7b:05:ac:fd:
         0e:da:60:12:d7:c1:1e:f7:ba:7c:5a:1f:74:07:25:48:c5:38:
         7b:85:82:c8:56:79:a3:da:15:4a:55:62:0a:36:56:5a:4f:62:
         2c:73:64:7d:ff:40:f3:05:0d:84:57:1f:f1:18:a8:06:6a:45:
         a1:fc:db:07:d3:c7:51:67:d0:53:7e:cc:8f:73:b8:24:6d:f3:
         dc:3c:b5:a7:9d:3b:32:87:3f:f1:1e:20:7b:ff:24:8c:89:5e:
         83:d2:01:9e:38:ac:ee:77:46:14:c7:16:d2:9f:c5:80:05:04:
         06:14:b0:55:db:7d:c6:c5:b4:6d:39:d1:47:97:23:d6:1e:fb:
         07:e5:ff:f2:0a:80:e4:33:2c:b6:ee:84:b6:e3:ea:8f:f1:ae:
         d2:43:26:2e:9a:05:29:21:30:e3:01:60:f9:36:3b:29:ff:b4:
         5d:a9:96:e8:3d:7d:ce:c7:15:b0:8d:4c:ed:aa:ba:c9:ab:57:
         5a:04:21:34
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUeDuMKnW+qMSG0+uRPouxXjCqkT0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjEzMTUxNTAyWhcNMjMwMjEyMTUyMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEQ2QUQ3RkM3
MzFFMzM5ODQzNDdBOTU2MTc0QUIwNEMyMDhCOEM1REI2QjEzMzUyRjI2NDUwRTAx
NEJERjJFOTdBMEM3NTAxRjhGQjFFQ0JEMTQyREY0RDYxNkMxODFGODJGMjE5QUY4
NDUxMUQwNjgxODg3RTc1Mjc1NDI2MzYyOEIwQTBEODJFODg4OEQzNEM3QjA1RTYw
MDIyMzA2QTNCQjBCMzk3OTBCNzQyMzA0OThERDNDNkZBNjA2NjdBNDUyQkUzREEw
RUUxMjVBNUUyM0ZDQTQxQjZCNzE4RTlFMzM2NDExMzJCQzBDQjMzRTI2NDM5REM5
MTg2Qjg3NDQ5NDExQUU1Rjg1RURBMzZDQUU3QURERTUzQUM2MDdGMEFBMzFFNTgy
NDY4ODZEN0M4RTVDRjI3QTNGM0IxQzFDOTU4ODhDN0QwMjU3MENDRkE3NTE0M0I1
MkRDNDgzQTkxMjYwNzI4NEE3M0IxNkM5QjBFQjg4QzhEREIxQjM0RUZBQ0U3NkNC
OUQ0QjQzMTlBNTUxQTk0NUMwRUMxRTBGQTg4RjYzODEyMzFBRDcxMDVFMDQ1NjMz
QTFENzAyNkEwREVFMUY2Mzc3QTMyNTJEQjhBMDc0OTlGQzJDQjhCRDhCQzY4OEQx
QjAyODhDRUE4RDc0QUNGOEI1MTNEQzg5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANatf8cx4zmENHqVYXSrBMIIuMXbaxM1LyZFDgFL
3y6XoMdQH4+x7L0ULfTWFsGB+C8hmvhFEdBoGIfnUnVCY2KLCg2C6IiNNMewXmAC
Iwajuws5eQt0IwSY3TxvpgZnpFK+PaDuElpeI/ykG2txjp4zZBEyvAyzPiZDnckY
a4dElBGuX4Xto2yuet3lOsYH8Kox5YJGiG18jlzyej87HByViIx9AlcMz6dRQ7Ut
xIOpEmByhKc7Fsmw64jI3bGzTvrOdsudS0MZpVGpRcDsHg+oj2OBIxrXEF4EVjOh
1wJqDe4fY3ejJS24oHSZ/Cy4vYvGiNGwKIzqjXSs+LUT3IkCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQeOtmTTHHLii8eZGquPrE0U6mMyzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzMzYTMxMzUzMjMwM2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhMVIDANBgkqhkiG
9w0BAQsFAAOCAQEAQJhnG0GpQD7/pZmuCiUQJ7CAETySQrIUx0Zg7vNyfZrpg1Pj
pcLBHui0IbCGNxl9RL3GAUxCttQjQSAo8CsaB1fAzjV7Baz9DtpgEtfBHve6fFof
dAclSMU4e4WCyFZ5o9oVSlViCjZWWk9iLHNkff9A8wUNhFcf8RioBmpFofzbB9PH
UWfQU37Mj3O4JG3z3Dy1p507Moc/8R4ge/8kjIleg9IBnjis7ndGFMcW0p/FgAUE
BhSwVdt9xsW0bTnRR5cj1h77B+X/8gqA5DMstu6EtuPqj/Gu0kMmLpoFKSEw4wFg
+TY7Kf+0XamW6D19zscVsI1M7aq6yatXWgQhNA==
-----END CERTIFICATE-----