Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313034353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a313034353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          42j7nVeHs5FVepbFnpJMCdkBU0o0LIwi+QwvAVQsHyg=
Subject key identifier:   1C:26:F7:C8:F6:C9:81:ED:6A:70:0C:05:32:11:1E:3C:EB:DC:39:F8
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       19745085776166B57F257E734E9A239CA90CCA60
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313034353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 10:45:02 +0000
ROA not before:           Tue 15 Feb 2022 10:40:02 +0000
ROA not after:            Tue 14 Feb 2023 10:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:1045::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:74:50:85:77:61:66:b5:7f:25:7e:73:4e:9a:23:9c:a9:0c:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 10:40:02 2022 GMT
            Not After : Feb 14 10:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:a4:7a:0f:59:f3:76:58:1f:16:8e:4d:c0:
                    27:c0:71:a0:fb:00:bc:72:e6:f1:1b:bf:80:2d:2e:
                    64:88:86:dd:83:3c:a1:58:14:e7:45:96:4c:e3:50:
                    39:e5:86:05:3d:46:64:a1:78:72:8f:ce:c3:96:56:
                    b5:f6:f4:a5:f2:c6:75:ba:3a:54:43:88:f0:b8:68:
                    67:28:b2:cd:2d:0a:14:ae:0b:b8:44:b8:8c:5c:13:
                    fe:0b:ff:4d:cd:41:4c:d1:86:c7:c1:72:a1:e4:19:
                    f8:1e:7b:8e:9a:81:1e:8a:df:21:e8:b6:7c:3a:78:
                    e5:51:66:a2:0b:49:29:f3:14:c6:79:84:dd:89:1d:
                    02:ff:f6:a4:02:be:d2:f8:fe:b6:0c:2f:68:c7:cf:
                    b2:e9:c4:61:8a:a2:33:c0:62:d4:f1:65:b6:38:40:
                    cc:55:ea:26:8d:11:39:70:fc:a6:bc:08:de:41:af:
                    30:21:1f:dd:9a:7b:fb:00:62:e3:63:d5:d3:72:55:
                    65:1c:cd:b8:60:ae:dd:72:03:03:dd:bc:ec:da:fd:
                    fd:9b:b5:04:f5:e7:c6:93:23:5e:a4:c2:14:11:7f:
                    ed:f5:e6:c4:0c:46:27:3f:e2:47:c2:ff:db:6c:d8:
                    53:70:a5:ef:79:61:32:e0:59:d5:88:42:b3:65:09:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:26:F7:C8:F6:C9:81:ED:6A:70:0C:05:32:11:1E:3C:EB:DC:39:F8
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313034353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:1045::/80

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:3e:68:0d:fc:b1:11:11:7c:66:2e:1b:aa:ed:46:df:ea:
         cb:c4:70:b9:15:8d:76:ac:9c:2f:a1:81:24:13:7a:75:ae:f7:
         60:8a:c4:6b:75:5b:cd:0b:ce:db:24:80:c1:a4:62:f8:61:ff:
         ae:e8:f4:d7:f7:0f:67:e9:f3:76:dc:8c:58:c6:ce:d2:e1:65:
         9f:cb:bd:75:bd:10:1b:59:29:c6:bc:ff:1f:9e:e8:67:be:25:
         57:91:e9:f1:27:b5:12:60:2a:c8:45:29:52:89:aa:e0:81:80:
         5d:c1:15:88:4f:c6:a1:b4:f2:62:a3:11:de:37:e4:42:56:a8:
         07:96:4e:09:4a:ed:ee:af:4c:74:19:16:78:95:3b:26:4a:08:
         dd:e5:7d:77:1a:4b:8c:8e:94:7a:59:6b:1d:bb:3f:52:b8:d8:
         89:4f:ff:9c:11:7d:fd:15:96:a8:6e:e7:20:05:fa:0f:0a:65:
         c5:78:d3:24:f7:c7:d9:7d:97:91:b3:4b:64:d9:d8:b5:19:b0:
         69:e1:03:5b:81:77:f1:4f:60:b3:d1:e8:8f:61:93:1f:29:3d:
         05:45:ed:a1:aa:3b:8e:bf:71:e9:7f:3f:8e:b3:59:fc:1c:6b:
         23:ee:fc:9b:2d:86:93:65:be:3a:83:f2:33:70:1d:6d:e7:e7:
         7c:df:25:08
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUGXRQhXdhZrV/JX5zTpojnKkMymAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE1MTA0MDAyWhcNMjMwMjE0MTA0NTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEMxMUJBNDdB
MEY1OUYzNzY1ODFGMTY4RTREQzAyN0MwNzFBMEZCMDBCQzcyRTZGMTFCQkY4MDJE
MkU2NDg4ODZERDgzM0NBMTU4MTRFNzQ1OTY0Q0UzNTAzOUU1ODYwNTNENDY2NEEx
Nzg3MjhGQ0VDMzk2NTZCNUY2RjRBNUYyQzY3NUJBM0E1NDQzODhGMEI4Njg2NzI4
QjJDRDJEMEExNEFFMEJCODQ0Qjg4QzVDMTNGRTBCRkY0RENENDE0Q0QxODZDN0Mx
NzJBMUU0MTlGODFFN0I4RTlBODExRThBREYyMUU4QjY3QzNBNzhFNTUxNjZBMjBC
NDkyOUYzMTRDNjc5ODRERDg5MUQwMkZGRjZBNDAyQkVEMkY4RkVCNjBDMkY2OEM3
Q0ZCMkU5QzQ2MThBQTIzM0MwNjJENEYxNjVCNjM4NDBDQzU1RUEyNjhEMTEzOTcw
RkNBNkJDMDhERTQxQUYzMDIxMUZERDlBN0JGQjAwNjJFMzYzRDVEMzcyNTU2NTFD
Q0RCODYwQUVERDcyMDMwM0REQkNFQ0RBRkRGRDlCQjUwNEY1RTdDNjkzMjM1RUE0
QzIxNDExN0ZFREY1RTZDNDBDNDYyNzNGRTI0N0MyRkZEQjZDRDg1MzcwQTVFRjc5
NjEzMkUwNTlENTg4NDJCMzY1MDk0MjUzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMEbpHoPWfN2WB8Wjk3AJ8BxoPsAvHLm8Ru/gC0u
ZIiG3YM8oVgU50WWTONQOeWGBT1GZKF4co/Ow5ZWtfb0pfLGdbo6VEOI8LhoZyiy
zS0KFK4LuES4jFwT/gv/Tc1BTNGGx8FyoeQZ+B57jpqBHorfIei2fDp45VFmogtJ
KfMUxnmE3YkdAv/2pAK+0vj+tgwvaMfPsunEYYqiM8Bi1PFltjhAzFXqJo0ROXD8
prwI3kGvMCEf3Zp7+wBi42PV03JVZRzNuGCu3XIDA9287Nr9/Zu1BPXnxpMjXqTC
FBF/7fXmxAxGJz/iR8L/22zYU3Cl73lhMuBZ1YhCs2UJQlMCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQcJvfI9smB7WpwDAUyER4869w5+DAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzUzYTMxMzAzNDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhUQRTANBgkqhkiG
9w0BAQsFAAOCAQEAeTs+aA38sRERfGYuG6rtRt/qy8RwuRWNdqycL6GBJBN6da73
YIrEa3VbzQvO2ySAwaRi+GH/ruj01/cPZ+nzdtyMWMbO0uFln8u9db0QG1kpxrz/
H57oZ74lV5Hp8Se1EmAqyEUpUomq4IGAXcEViE/GobTyYqMR3jfkQlaoB5ZOCUrt
7q9MdBkWeJU7JkoI3eV9dxpLjI6UellrHbs/UrjYiU//nBF9/RWWqG7nIAX6Dwpl
xXjTJPfH2X2XkbNLZNnYtRmwaeEDW4F38U9gs9Hoj2GTHyk9BUXtoao7jr9x6X8/
jrNZ/BxrI+78my2Gk2W+OoPyM3AdbefnfN8lCA==
-----END CERTIFICATE-----