Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313730303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231353a313730303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          hiaggs1+xKw2p2D7vxlGcUwikb3s0ZPpn0J6C98/OI8=
Subject key identifier:   39:4B:5B:71:D1:F1:9F:C8:70:EF:77:19:FE:9C:BD:72:88:A4:B3:01
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7EAF1873DC702A6757ECC10287B9B6BB6C1C8A10
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313730303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 15 Feb 2022 17:00:02 +0000
ROA not before:           Tue 15 Feb 2022 16:55:02 +0000
ROA not after:            Tue 14 Feb 2023 17:00:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:215:1700::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:af:18:73:dc:70:2a:67:57:ec:c1:02:87:b9:b6:bb:6c:1c:8a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 15 16:55:02 2022 GMT
            Not After : Feb 14 17:00:02 2023 GMT
        Subject: CN=3082010A0282010100C51F1DBB2D3B5D7B01E9171AA81A7519B4CE9FC982B267688B80FA601E3874B64133DEC358386FC49A74DCFEA80D22E4AC137A1D8B30B0DAFACB6D9A1F11BAD9A57F147717AE79B32D411BB2B65EF120CB1D3120505EBC42B03FD28745A69DE3124504C7747DFCC039DF3D5D8F1D800409230B3403B17D3E4F2417C8E5F2CC8111DF96E44D133BD9F1617B6724D88B8047F8144D18C009CB255C373E0A2D77165A863B151F2FF964FD08546A563A741F558198148CDE4CAB91941A63F9EE8B5937468620BC9C987246F80512B066AD1D41DC7FF4961FDCF65C9FDC6AD3287E681E18EBBAF6A5AC4FA87C03180A4EAF3E4CF8F873604FAE409DF9605F2BD8FFD10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:1d:bb:2d:3b:5d:7b:01:e9:17:1a:a8:1a:
                    75:19:b4:ce:9f:c9:82:b2:67:68:8b:80:fa:60:1e:
                    38:74:b6:41:33:de:c3:58:38:6f:c4:9a:74:dc:fe:
                    a8:0d:22:e4:ac:13:7a:1d:8b:30:b0:da:fa:cb:6d:
                    9a:1f:11:ba:d9:a5:7f:14:77:17:ae:79:b3:2d:41:
                    1b:b2:b6:5e:f1:20:cb:1d:31:20:50:5e:bc:42:b0:
                    3f:d2:87:45:a6:9d:e3:12:45:04:c7:74:7d:fc:c0:
                    39:df:3d:5d:8f:1d:80:04:09:23:0b:34:03:b1:7d:
                    3e:4f:24:17:c8:e5:f2:cc:81:11:df:96:e4:4d:13:
                    3b:d9:f1:61:7b:67:24:d8:8b:80:47:f8:14:4d:18:
                    c0:09:cb:25:5c:37:3e:0a:2d:77:16:5a:86:3b:15:
                    1f:2f:f9:64:fd:08:54:6a:56:3a:74:1f:55:81:98:
                    14:8c:de:4c:ab:91:94:1a:63:f9:ee:8b:59:37:46:
                    86:20:bc:9c:98:72:46:f8:05:12:b0:66:ad:1d:41:
                    dc:7f:f4:96:1f:dc:f6:5c:9f:dc:6a:d3:28:7e:68:
                    1e:18:eb:ba:f6:a5:ac:4f:a8:7c:03:18:0a:4e:af:
                    3e:4c:f8:f8:73:60:4f:ae:40:9d:f9:60:5f:2b:d8:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4B:5B:71:D1:F1:9F:C8:70:EF:77:19:FE:9C:BD:72:88:A4:B3:01
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231353a313730303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:215:1700::/80

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:11:9f:5e:6b:39:a5:71:a9:cb:46:aa:a0:3c:7e:0c:ee:
         b3:59:2f:1f:13:aa:dc:de:77:a9:90:de:63:21:d3:6f:b7:93:
         93:36:fb:0c:62:c2:7b:60:d4:6d:0c:22:e2:4d:ce:77:71:d4:
         20:d7:61:d1:d3:be:bb:22:0f:47:e9:e5:6d:ef:b6:28:78:18:
         0e:38:2b:75:cd:14:d8:75:16:cf:a7:ab:2b:44:97:b9:37:80:
         51:85:33:49:83:85:1c:db:df:e2:24:a9:21:55:bc:77:fa:50:
         18:2d:57:2e:93:57:74:a0:e6:79:ce:e9:76:83:d2:38:f4:c9:
         0b:97:4d:ef:0e:c6:bd:d4:ee:2f:fd:b0:34:f7:f9:e8:07:4c:
         6e:a1:4c:27:b1:e7:ab:ac:4d:24:fc:c3:48:75:bd:0c:6b:3b:
         39:72:92:ac:93:5a:fe:62:9e:ed:22:3f:2e:7d:8f:d9:b3:32:
         03:2c:7a:77:6f:52:ec:c5:10:66:73:0d:2e:85:6b:05:bf:99:
         36:b9:dd:cc:57:0f:97:9f:3b:a8:3a:65:94:e3:80:93:1c:ff:
         fe:2f:20:a8:76:92:9a:d1:9d:8d:37:7b:2b:77:6f:b1:95:8d:
         39:ed:d0:50:fa:c6:62:88:57:83:f4:c4:2a:6c:7e:12:1b:16:
         60:6e:25:f3
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUfq8Yc9xwKmdX7MECh7m2u2wcihAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE1MTY1NTAyWhcNMjMwMjE0MTcwMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEM1MUYxREJC
MkQzQjVEN0IwMUU5MTcxQUE4MUE3NTE5QjRDRTlGQzk4MkIyNjc2ODhCODBGQTYw
MUUzODc0QjY0MTMzREVDMzU4Mzg2RkM0OUE3NERDRkVBODBEMjJFNEFDMTM3QTFE
OEIzMEIwREFGQUNCNkQ5QTFGMTFCQUQ5QTU3RjE0NzcxN0FFNzlCMzJENDExQkIy
QjY1RUYxMjBDQjFEMzEyMDUwNUVCQzQyQjAzRkQyODc0NUE2OURFMzEyNDUwNEM3
NzQ3REZDQzAzOURGM0Q1RDhGMUQ4MDA0MDkyMzBCMzQwM0IxN0QzRTRGMjQxN0M4
RTVGMkNDODExMURGOTZFNDREMTMzQkQ5RjE2MTdCNjcyNEQ4OEI4MDQ3RjgxNDRE
MThDMDA5Q0IyNTVDMzczRTBBMkQ3NzE2NUE4NjNCMTUxRjJGRjk2NEZEMDg1NDZB
NTYzQTc0MUY1NTgxOTgxNDhDREU0Q0FCOTE5NDFBNjNGOUVFOEI1OTM3NDY4NjIw
QkM5Qzk4NzI0NkY4MDUxMkIwNjZBRDFENDFEQzdGRjQ5NjFGRENGNjVDOUZEQzZB
RDMyODdFNjgxRTE4RUJCQUY2QTVBQzRGQTg3QzAzMTgwQTRFQUYzRTRDRjhGODcz
NjA0RkFFNDA5REY5NjA1RjJCRDhGRkQxMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMUfHbstO117AekXGqgadRm0zp/JgrJnaIuA+mAe
OHS2QTPew1g4b8SadNz+qA0i5KwTeh2LMLDa+sttmh8RutmlfxR3F655sy1BG7K2
XvEgyx0xIFBevEKwP9KHRaad4xJFBMd0ffzAOd89XY8dgAQJIws0A7F9Pk8kF8jl
8syBEd+W5E0TO9nxYXtnJNiLgEf4FE0YwAnLJVw3PgotdxZahjsVHy/5ZP0IVGpW
OnQfVYGYFIzeTKuRlBpj+e6LWTdGhiC8nJhyRvgFErBmrR1B3H/0lh/c9lyf3GrT
KH5oHhjruvalrE+ofAMYCk6vPkz4+HNgT65AnflgXyvY/9ECAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQ5S1tx0fGfyHDvdxn+nL1yiKSzATAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzUzYTMxMzczMDMwM2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhUXADANBgkqhkiG
9w0BAQsFAAOCAQEAqyYRn15rOaVxqctGqqA8fgzus1kvHxOq3N53qZDeYyHTb7eT
kzb7DGLCe2DUbQwi4k3Od3HUINdh0dO+uyIPR+nlbe+2KHgYDjgrdc0U2HUWz6er
K0SXuTeAUYUzSYOFHNvf4iSpIVW8d/pQGC1XLpNXdKDmec7pdoPSOPTJC5dN7w7G
vdTuL/2wNPf56AdMbqFMJ7Hnq6xNJPzDSHW9DGs7OXKSrJNa/mKe7SI/Ln2P2bMy
Ayx6d29S7MUQZnMNLoVrBb+ZNrndzFcPl587qDpllOOAkxz//i8gqHaSmtGdjTd7
K3dvsZWNOe3QUPrGYohXg/TEKmx+EhsWYG4l8w==
-----END CERTIFICATE-----