Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3732353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231333a3732353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          qZ+ogOR+7c13kDvC0VVBM3bw1IdVOWmp7nFGOerhlcE=
Subject key identifier:   6E:82:DC:90:05:41:A7:09:D5:E9:F9:28:E5:50:98:77:6F:2B:2F:2D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       11F7BCCB77750E197C65710825E0878B52B84175
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3732353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 13 Feb 2022 07:25:01 +0000
ROA not before:           Sun 13 Feb 2022 07:20:01 +0000
ROA not after:            Sun 12 Feb 2023 07:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:213:725::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f7:bc:cb:77:75:0e:19:7c:65:71:08:25:e0:87:8b:52:b8:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 13 07:20:01 2022 GMT
            Not After : Feb 12 07:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:89:df:06:79:95:1e:ed:1c:ad:a2:f3:d6:
                    88:6f:2b:8b:7f:6c:1d:cf:ec:ed:5b:57:a0:33:52:
                    0f:ff:bd:ce:1d:40:ca:57:20:64:fd:8b:67:e7:8a:
                    ef:4d:73:e8:e8:72:f6:73:c4:a1:77:b9:7e:e6:8b:
                    18:94:93:90:b3:75:77:b7:e1:db:0d:ce:c5:09:75:
                    15:6c:22:4d:a1:05:af:d4:60:32:65:dd:80:7b:b0:
                    13:f7:10:3b:1f:b3:a3:68:e0:4d:1f:64:05:70:7b:
                    ae:ae:1a:dd:d8:c0:d6:ca:07:3e:f7:2b:1e:3e:97:
                    ce:16:1b:fe:88:41:de:24:c0:7e:2e:da:c7:13:12:
                    fe:d3:8c:6f:82:b6:d7:70:43:14:7c:d7:58:78:b0:
                    0d:8f:d5:f6:47:3a:2e:5a:9d:11:60:9f:5a:cf:88:
                    9f:14:c2:86:f0:f3:a4:3a:86:bb:e3:40:4e:4d:79:
                    84:4b:b0:e8:b1:ca:18:90:8c:90:25:62:3b:b4:36:
                    df:da:c2:5a:2b:4c:45:0c:59:e2:61:3a:d4:67:83:
                    55:46:97:2f:78:2b:fd:45:69:dd:32:64:76:68:ad:
                    6c:75:e5:03:0b:65:7f:eb:0d:e6:18:71:bc:31:c2:
                    f6:1e:39:99:12:4a:64:b2:1b:e6:da:e3:71:e2:ab:
                    7c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:DC:90:05:41:A7:09:D5:E9:F9:28:E5:50:98:77:6F:2B:2F:2D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231333a3732353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:213:725::/80

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:a5:0e:f8:70:ba:08:8a:cd:37:bb:2a:fa:71:61:9b:0c:
         c6:d3:6d:6c:20:4e:50:ad:d0:94:ce:cd:dd:80:95:05:bb:4a:
         65:8e:e4:1b:fe:77:68:5b:ad:56:08:bf:76:53:fc:24:7a:6b:
         ac:13:f1:8d:77:8c:9d:62:fa:b2:d1:42:98:72:2d:45:50:66:
         8f:a4:0a:cf:9b:74:f0:d9:e0:ae:a6:6e:eb:3c:41:78:18:4c:
         76:0e:70:f2:15:a8:48:85:7c:aa:b3:c4:25:50:0b:86:78:2c:
         77:33:96:33:1d:cb:0c:58:52:e9:1b:4d:e6:df:b3:3b:62:66:
         c4:5b:33:cb:3b:7b:dd:58:f4:57:7a:a1:8b:be:2d:38:83:fb:
         d2:0f:f3:f4:b6:b7:c5:59:69:e5:b1:ef:45:00:72:c4:70:85:
         69:95:6d:9b:6c:d5:84:ce:0a:93:e1:18:91:75:75:8e:64:a4:
         74:b2:35:16:8e:a0:72:ea:25:f8:f3:75:6f:0e:4b:1c:fb:08:
         07:c8:fd:22:15:76:db:0c:65:1d:84:39:f8:b9:b2:fa:7e:04:
         83:0d:0a:a1:16:93:58:cf:5f:f0:11:bb:59:bd:ee:39:ec:4b:
         ea:6f:5e:b1:c5:61:35:c5:89:2e:7e:8c:db:14:1a:ac:39:d1:
         ae:d4:ff:1b
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUEfe8y3d1Dhl8ZXEIJeCHi1K4QXUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjEzMDcyMDAxWhcNMjMwMjEyMDcyNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMENEOUU4OURG
MDY3OTk1MUVFRDFDQURBMkYzRDY4ODZGMkI4QjdGNkMxRENGRUNFRDVCNTdBMDMz
NTIwRkZGQkRDRTFENDBDQTU3MjA2NEZEOEI2N0U3OEFFRjRENzNFOEU4NzJGNjcz
QzRBMTc3Qjk3RUU2OEIxODk0OTM5MEIzNzU3N0I3RTFEQjBEQ0VDNTA5NzUxNTZD
MjI0REExMDVBRkQ0NjAzMjY1REQ4MDdCQjAxM0Y3MTAzQjFGQjNBMzY4RTA0RDFG
NjQwNTcwN0JBRUFFMUFEREQ4QzBENkNBMDczRUY3MkIxRTNFOTdDRTE2MUJGRTg4
NDFERTI0QzA3RTJFREFDNzEzMTJGRUQzOEM2RjgyQjZENzcwNDMxNDdDRDc1ODc4
QjAwRDhGRDVGNjQ3M0EyRTVBOUQxMTYwOUY1QUNGODg5RjE0QzI4NkYwRjNBNDNB
ODZCQkUzNDA0RTRENzk4NDRCQjBFOEIxQ0ExODkwOEM5MDI1NjIzQkI0MzZERkRB
QzI1QTJCNEM0NTBDNTlFMjYxM0FENDY3ODM1NTQ2OTcyRjc4MkJGRDQ1NjlERDMy
NjQ3NjY4QUQ2Qzc1RTUwMzBCNjU3RkVCMERFNjE4NzFCQzMxQzJGNjFFMzk5OTEy
NEE2NEIyMUJFNkRBRTM3MUUyQUI3QzMzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM2eid8GeZUe7RytovPWiG8ri39sHc/s7VtXoDNS
D/+9zh1AylcgZP2LZ+eK701z6Ohy9nPEoXe5fuaLGJSTkLN1d7fh2w3OxQl1FWwi
TaEFr9RgMmXdgHuwE/cQOx+zo2jgTR9kBXB7rq4a3djA1soHPvcrHj6XzhYb/ohB
3iTAfi7axxMS/tOMb4K213BDFHzXWHiwDY/V9kc6LlqdEWCfWs+InxTChvDzpDqG
u+NATk15hEuw6LHKGJCMkCViO7Q239rCWitMRQxZ4mE61GeDVUaXL3gr/UVp3TJk
dmitbHXlAwtlf+sN5hhxvDHC9h45mRJKZLIb5trjceKrfDMCAwEAAaOCApowggKW
MB0GA1UdDgQWBBRugtyQBUGnCdXp+SjlUJh3bysvLTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzMzYTM3MzIzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgITByUwDQYJKoZIhvcN
AQELBQADggEBAIO9pQ74cLoIis03uyr6cWGbDMbTbWwgTlCt0JTOzd2AlQW7SmWO
5Bv+d2hbrVYIv3ZT/CR6a6wT8Y13jJ1i+rLRQphyLUVQZo+kCs+bdPDZ4K6mbus8
QXgYTHYOcPIVqEiFfKqzxCVQC4Z4LHczljMdywxYUukbTebfsztiZsRbM8s7e91Y
9Fd6oYu+LTiD+9IP8/S2t8VZaeWx70UAcsRwhWmVbZts1YTOCpPhGJF1dY5kpHSy
NRaOoHLqJfjzdW8OSxz7CAfI/SIVdtsMZR2EOfi5svp+BIMNCqEWk1jPX/ARu1m9
7jnsS+pvXrHFYTXFiS5+jNsUGqw50a7U/xs=
-----END CERTIFICATE-----