Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3230353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231363a3230353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          kINbPwZfVuOI6h/NFxmEvFr/XVxIOzUyIlgr7YrpIhU=
Subject key identifier:   04:F9:AF:54:08:7D:5F:34:13:CF:84:30:52:7E:5B:81:91:DD:CF:C5
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3AAFE2E3944703FA0D68B149CA05AB99F52B59B8
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3230353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 16 Feb 2022 02:05:01 +0000
ROA not before:           Wed 16 Feb 2022 02:00:01 +0000
ROA not after:            Wed 15 Feb 2023 02:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:216:205::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:af:e2:e3:94:47:03:fa:0d:68:b1:49:ca:05:ab:99:f5:2b:59:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 16 02:00:01 2022 GMT
            Not After : Feb 15 02:05:01 2023 GMT
        Subject: CN=3082010A0282010100E10EFFBE38917206DFFCF0BF4014C111D9C8A88F9DF4AFF50BF3B50BF55F4D5305F60721B66FB349F494A79540E190AD3D6E469323CEAB45BD0D0C05390B7EDB7B827F60A935777D87C9711025F1BF15FD4DF1A7A4268650AC6B831EAFF06E5F31D190E056245A0A3E172EA54AAEAC959AFD695F0F39D938C95A929BE9E3FD4DC542A48547D554B4A23027858CB81C73FCEA05F1D8213A014E9EB62266FC2EF1172FBBD5309E147D908C519119DF0EEFD4311E5DCFEDF97F6B6C18092404CACD1C821F8F351C6E27F33E8311D8588DA2AF2FDF2A8D76B7AD71CB3443689FFB9E43D14A6E8753BCCDB306176587BC241E94D9D07D20CF6F74529D31F81118C9970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0e:ff:be:38:91:72:06:df:fc:f0:bf:40:14:
                    c1:11:d9:c8:a8:8f:9d:f4:af:f5:0b:f3:b5:0b:f5:
                    5f:4d:53:05:f6:07:21:b6:6f:b3:49:f4:94:a7:95:
                    40:e1:90:ad:3d:6e:46:93:23:ce:ab:45:bd:0d:0c:
                    05:39:0b:7e:db:7b:82:7f:60:a9:35:77:7d:87:c9:
                    71:10:25:f1:bf:15:fd:4d:f1:a7:a4:26:86:50:ac:
                    6b:83:1e:af:f0:6e:5f:31:d1:90:e0:56:24:5a:0a:
                    3e:17:2e:a5:4a:ae:ac:95:9a:fd:69:5f:0f:39:d9:
                    38:c9:5a:92:9b:e9:e3:fd:4d:c5:42:a4:85:47:d5:
                    54:b4:a2:30:27:85:8c:b8:1c:73:fc:ea:05:f1:d8:
                    21:3a:01:4e:9e:b6:22:66:fc:2e:f1:17:2f:bb:d5:
                    30:9e:14:7d:90:8c:51:91:19:df:0e:ef:d4:31:1e:
                    5d:cf:ed:f9:7f:6b:6c:18:09:24:04:ca:cd:1c:82:
                    1f:8f:35:1c:6e:27:f3:3e:83:11:d8:58:8d:a2:af:
                    2f:df:2a:8d:76:b7:ad:71:cb:34:43:68:9f:fb:9e:
                    43:d1:4a:6e:87:53:bc:cd:b3:06:17:65:87:bc:24:
                    1e:94:d9:d0:7d:20:cf:6f:74:52:9d:31:f8:11:18:
                    c9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F9:AF:54:08:7D:5F:34:13:CF:84:30:52:7E:5B:81:91:DD:CF:C5
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231363a3230353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:216:205::/80

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:af:ca:c4:06:b8:4b:a8:eb:dd:de:13:ba:de:af:bf:06:
         8d:5d:75:99:86:3c:cc:0f:b4:03:a3:a8:6a:72:f3:2c:fd:7d:
         fe:ac:a9:77:d2:53:50:93:09:68:3e:d2:a6:55:d1:04:13:a8:
         f8:c4:94:86:f2:98:98:7e:7e:49:0f:86:90:80:1c:26:4a:58:
         b5:ec:e5:21:e6:d8:d6:92:00:4f:0f:55:87:43:10:d9:67:d5:
         74:1c:07:8b:30:43:94:31:fe:64:00:0f:f6:0a:36:95:69:89:
         4a:cd:cc:d7:d2:56:5e:7e:83:e6:84:2a:bb:fa:2c:7f:d8:34:
         89:30:0f:a8:70:f2:8f:0a:63:02:ae:f8:65:00:af:57:61:12:
         ea:58:42:ee:6a:4b:ac:61:a1:fa:a8:05:e6:f0:7e:a0:37:ed:
         12:63:b3:ad:fd:ea:28:90:2b:2b:66:0d:5b:af:9d:5e:4d:6d:
         58:7e:7a:92:37:6f:07:b4:b5:02:12:af:0c:d4:8f:2e:28:11:
         e4:91:f4:1c:4f:4e:d4:ca:26:7d:88:73:83:70:6b:b7:9b:59:
         59:b9:97:68:33:d7:c5:37:43:91:84:6d:96:bb:38:07:07:68:
         91:23:c1:7e:66:29:6d:dc:4a:87:46:87:d8:8b:5d:3e:dc:55:
         5c:97:bd:82
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUOq/i45RHA/oNaLFJygWrmfUrWbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE2MDIwMDAxWhcNMjMwMjE1MDIwNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEUxMEVGRkJF
Mzg5MTcyMDZERkZDRjBCRjQwMTRDMTExRDlDOEE4OEY5REY0QUZGNTBCRjNCNTBC
RjU1RjRENTMwNUY2MDcyMUI2NkZCMzQ5RjQ5NEE3OTU0MEUxOTBBRDNENkU0Njkz
MjNDRUFCNDVCRDBEMEMwNTM5MEI3RURCN0I4MjdGNjBBOTM1Nzc3RDg3Qzk3MTEw
MjVGMUJGMTVGRDRERjFBN0E0MjY4NjUwQUM2QjgzMUVBRkYwNkU1RjMxRDE5MEUw
NTYyNDVBMEEzRTE3MkVBNTRBQUVBQzk1OUFGRDY5NUYwRjM5RDkzOEM5NUE5MjlC
RTlFM0ZENERDNTQyQTQ4NTQ3RDU1NEI0QTIzMDI3ODU4Q0I4MUM3M0ZDRUEwNUYx
RDgyMTNBMDE0RTlFQjYyMjY2RkMyRUYxMTcyRkJCRDUzMDlFMTQ3RDkwOEM1MTkx
MTlERjBFRUZENDMxMUU1RENGRURGOTdGNkI2QzE4MDkyNDA0Q0FDRDFDODIxRjhG
MzUxQzZFMjdGMzNFODMxMUQ4NTg4REEyQUYyRkRGMkE4RDc2QjdBRDcxQ0IzNDQz
Njg5RkZCOUU0M0QxNEE2RTg3NTNCQ0NEQjMwNjE3NjU4N0JDMjQxRTk0RDlEMDdE
MjBDRjZGNzQ1MjlEMzFGODExMThDOTk3MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOEO/744kXIG3/zwv0AUwRHZyKiPnfSv9QvztQv1
X01TBfYHIbZvs0n0lKeVQOGQrT1uRpMjzqtFvQ0MBTkLftt7gn9gqTV3fYfJcRAl
8b8V/U3xp6QmhlCsa4Mer/BuXzHRkOBWJFoKPhcupUqurJWa/WlfDznZOMlakpvp
4/1NxUKkhUfVVLSiMCeFjLgcc/zqBfHYIToBTp62Imb8LvEXL7vVMJ4UfZCMUZEZ
3w7v1DEeXc/t+X9rbBgJJATKzRyCH481HG4n8z6DEdhYjaKvL98qjXa3rXHLNENo
n/ueQ9FKbodTvM2zBhdlh7wkHpTZ0H0gz290Up0x+BEYyZcCAwEAAaOCApowggKW
MB0GA1UdDgQWBBQE+a9UCH1fNBPPhDBSfluBkd3PxTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzYzYTMyMzAzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIWAgUwDQYJKoZIhvcN
AQELBQADggEBAHf0r8rEBrhLqOvd3hO63q+/Bo1ddZmGPMwPtAOjqGpy8yz9ff6s
qXfSU1CTCWg+0qZV0QQTqPjElIbymJh+fkkPhpCAHCZKWLXs5SHm2NaSAE8PVYdD
ENln1XQcB4swQ5Qx/mQAD/YKNpVpiUrNzNfSVl5+g+aEKrv6LH/YNIkwD6hw8o8K
YwKu+GUAr1dhEupYQu5qS6xhofqoBebwfqA37RJjs6396iiQKytmDVuvnV5NbVh+
epI3bwe0tQISrwzUjy4oEeSR9BxPTtTKJn2Ic4Nwa7ebWVm5l2gz18U3Q5GEbZa7
OAcHaJEjwX5mKW3cSodGh9iLXT7cVVyXvYI=
-----END CERTIFICATE-----