Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313035353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a313035353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          XvJlQqdxhrpqJCD36Ndl9VzuiUlnSwM02T6GIIpw2p0=
Subject key identifier:   2D:2C:95:FB:CB:BD:63:AF:4B:7C:7E:E5:5C:3D:C5:48:52:FF:0C:A4
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       39F8AE913212292E08A11CED6E5451595596030B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313035353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 10:55:01 +0000
ROA not before:           Thu 17 Feb 2022 10:50:01 +0000
ROA not after:            Thu 16 Feb 2023 10:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:1055::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f8:ae:91:32:12:29:2e:08:a1:1c:ed:6e:54:51:59:55:96:03:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 10:50:01 2022 GMT
            Not After : Feb 16 10:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:47:05:ac:3d:29:c8:39:5e:31:29:69:6b:48:
                    8f:60:f3:86:52:69:41:aa:49:e9:9f:b4:37:1a:da:
                    07:73:3d:f8:e4:57:c8:16:5c:ba:60:10:4d:6b:84:
                    41:ff:cf:b9:f4:da:66:9f:27:3c:e9:94:5c:33:d4:
                    50:13:d0:6f:c8:59:2e:c2:13:25:c2:a8:5e:85:e8:
                    21:6f:63:b8:ff:c6:ec:03:1d:3c:d8:67:4f:f6:ba:
                    5d:d3:3a:48:75:09:61:59:65:f4:42:48:3d:80:fd:
                    4f:5c:c1:94:5e:3e:e6:04:7c:65:10:cd:08:0e:5d:
                    47:9f:bd:d6:cd:59:a2:18:da:05:69:c9:75:e5:31:
                    19:f4:13:3a:9c:5d:88:61:e3:74:d6:a6:ce:a7:00:
                    11:53:66:31:07:28:0c:c6:92:d8:30:74:50:d5:36:
                    9c:93:d7:73:da:57:14:26:6e:ca:61:6a:69:83:96:
                    bb:99:9d:c9:ce:20:c1:41:40:58:9e:96:6d:c3:c9:
                    94:30:f6:f9:90:36:a1:f9:5c:bb:08:13:0e:5e:09:
                    48:4e:80:cc:e0:08:dd:38:1b:04:c5:c6:51:87:6b:
                    ab:7a:29:63:99:04:53:cb:77:71:af:eb:85:f0:ab:
                    d7:b6:c3:f8:57:68:c2:b1:11:06:30:8f:37:bd:82:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2C:95:FB:CB:BD:63:AF:4B:7C:7E:E5:5C:3D:C5:48:52:FF:0C:A4
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313035353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:1055::/80

    Signature Algorithm: sha256WithRSAEncryption
         11:e1:c1:da:13:f9:c1:27:2e:ec:63:9a:95:9b:dc:cd:17:bd:
         fa:f1:ea:a9:29:08:83:9a:39:ce:fe:48:eb:1f:bc:a4:1e:42:
         80:59:18:88:fc:04:0d:eb:65:a5:fd:1b:08:f6:01:af:e6:15:
         03:89:6c:c6:42:ad:f8:ac:3d:4e:c4:1e:2e:e3:20:96:ef:a0:
         62:ea:9d:3b:88:e4:9e:98:84:2b:90:54:07:df:dc:ed:c7:37:
         5d:b3:01:3f:f4:68:07:99:4c:c5:26:fb:df:33:df:eb:42:3b:
         40:2c:34:b8:2d:72:7b:7c:10:4a:fe:17:68:54:0e:df:59:26:
         5f:38:54:89:e5:ce:16:f2:7e:10:05:52:2a:b7:de:9f:fb:7c:
         26:fa:d9:4a:f1:d6:36:86:a6:f3:e8:02:02:b4:b9:02:8e:32:
         e8:33:43:6e:48:6c:cb:22:a5:e7:a4:70:fa:56:23:cc:79:f9:
         e7:73:d7:95:53:98:0a:75:e5:04:b6:9f:2d:ac:98:6c:5c:d7:
         90:c9:35:5c:41:ba:53:03:72:fb:ad:82:fe:fd:1a:a0:da:65:
         be:04:e8:65:db:14:9f:c3:62:02:3c:2e:10:c7:ca:2d:84:fa:
         d7:7e:3f:0c:8f:9e:d2:b5:2a:22:3b:ca:3f:39:2d:27:24:f9:
         56:5f:a2:2b
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUOfiukTISKS4IoRztblRRWVWWAwswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE3MTA1MDAxWhcNMjMwMjE2MTA1NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMDlCNDcwNUFD
M0QyOUM4Mzk1RTMxMjk2OTZCNDg4RjYwRjM4NjUyNjk0MUFBNDlFOTlGQjQzNzFB
REEwNzczM0RGOEU0NTdDODE2NUNCQTYwMTA0RDZCODQ0MUZGQ0ZCOUY0REE2NjlG
MjczQ0U5OTQ1QzMzRDQ1MDEzRDA2RkM4NTkyRUMyMTMyNUMyQTg1RTg1RTgyMTZG
NjNCOEZGQzZFQzAzMUQzQ0Q4Njc0RkY2QkE1REQzM0E0ODc1MDk2MTU5NjVGNDQy
NDgzRDgwRkQ0RjVDQzE5NDVFM0VFNjA0N0M2NTEwQ0QwODBFNUQ0NzlGQkRENkNE
NTlBMjE4REEwNTY5Qzk3NUU1MzExOUY0MTMzQTlDNUQ4ODYxRTM3NEQ2QTZDRUE3
MDAxMTUzNjYzMTA3MjgwQ0M2OTJEODMwNzQ1MEQ1MzY5QzkzRDc3M0RBNTcxNDI2
NkVDQTYxNkE2OTgzOTZCQjk5OURDOUNFMjBDMTQxNDA1ODlFOTY2REMzQzk5NDMw
RjZGOTkwMzZBMUY5NUNCQjA4MTMwRTVFMDk0ODRFODBDQ0UwMDhERDM4MUIwNEM1
QzY1MTg3NkJBQjdBMjk2Mzk5MDQ1M0NCNzc3MUFGRUI4NUYwQUJEN0I2QzNGODU3
NjhDMkIxMTEwNjMwOEYzN0JEODJBRDUxMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJtHBaw9Kcg5XjEpaWtIj2DzhlJpQapJ6Z+0Nxra
B3M9+ORXyBZcumAQTWuEQf/PufTaZp8nPOmUXDPUUBPQb8hZLsITJcKoXoXoIW9j
uP/G7AMdPNhnT/a6XdM6SHUJYVll9EJIPYD9T1zBlF4+5gR8ZRDNCA5dR5+91s1Z
ohjaBWnJdeUxGfQTOpxdiGHjdNamzqcAEVNmMQcoDMaS2DB0UNU2nJPXc9pXFCZu
ymFqaYOWu5mdyc4gwUFAWJ6WbcPJlDD2+ZA2oflcuwgTDl4JSE6AzOAI3TgbBMXG
UYdrq3opY5kEU8t3ca/rhfCr17bD+FdowrERBjCPN72CrVECAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQtLJX7y71jr0t8fuVcPcVIUv8MpDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzczYTMxMzAzNTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhcQVTANBgkqhkiG
9w0BAQsFAAOCAQEAEeHB2hP5wScu7GOalZvczRe9+vHqqSkIg5o5zv5I6x+8pB5C
gFkYiPwEDetlpf0bCPYBr+YVA4lsxkKt+Kw9TsQeLuMglu+gYuqdO4jknpiEK5BU
B9/c7cc3XbMBP/RoB5lMxSb73zPf60I7QCw0uC1ye3wQSv4XaFQO31kmXzhUieXO
FvJ+EAVSKrfen/t8JvrZSvHWNoam8+gCArS5Ao4y6DNDbkhsyyKl56Rw+lYjzHn5
53PXlVOYCnXlBLafLayYbFzXkMk1XEG6UwNy+62C/v0aoNplvgToZdsUn8NiAjwu
EMfKLYT6134/DI+e0rUqIjvKPzktJyT5Vl+iKw==
-----END CERTIFICATE-----