Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313533353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a313533353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Ce/qtB7l1m1QYyWzffawJVvIBTKRWyKJVPbluBKOXs4=
Subject key identifier:   03:9C:16:3F:FA:D8:13:C1:5C:FF:9B:AB:B4:71:42:AC:D0:1D:D4:96
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       52A16745A52D0CF5D41DF145FB53BD00C175B0EE
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313533353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 15:35:01 +0000
ROA not before:           Thu 17 Feb 2022 15:30:01 +0000
ROA not after:            Thu 16 Feb 2023 15:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:1535::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a1:67:45:a5:2d:0c:f5:d4:1d:f1:45:fb:53:bd:00:c1:75:b0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 15:30:01 2022 GMT
            Not After : Feb 16 15:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:ba:f3:1f:1d:6e:26:d1:6a:4e:72:2f:43:
                    78:1d:79:4f:16:6e:6d:c4:6d:f1:8f:c3:2d:b3:b1:
                    4f:e2:c9:a0:82:2c:b8:97:dc:d2:4d:23:24:f1:e8:
                    ba:51:d8:5f:38:c8:b5:c4:f4:e9:74:ed:16:b6:68:
                    1e:63:82:f5:27:c5:c2:d4:a5:6e:bb:09:1c:25:48:
                    c5:e5:ab:94:2f:46:7e:de:82:0e:22:61:56:43:30:
                    ae:5c:54:ee:57:9a:05:ad:1f:d1:26:61:cf:85:3d:
                    55:e0:62:56:40:e5:69:5f:98:93:55:51:c1:fd:f1:
                    cd:68:60:8c:79:bc:d2:a5:69:bb:f5:0b:0d:a6:a6:
                    e4:f3:dc:48:de:ef:e3:45:03:9b:3b:ce:5a:43:6c:
                    c0:d3:68:76:79:b1:a4:52:b4:15:f0:52:3e:d2:51:
                    69:a7:b5:69:ed:f6:ab:b5:9d:09:35:25:3e:69:1e:
                    98:91:6d:24:31:19:45:13:da:bb:ad:74:95:7e:cf:
                    46:89:c0:23:3a:16:cc:8f:7a:eb:86:1c:f0:cc:b0:
                    44:62:25:2b:2d:b6:bc:ef:e7:4b:2c:c6:ff:70:e7:
                    34:e5:4a:2f:9f:6d:1a:1b:2e:ff:fe:c4:d9:9d:81:
                    37:74:a8:39:7e:5a:57:2c:16:f3:ba:ed:c8:11:87:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9C:16:3F:FA:D8:13:C1:5C:FF:9B:AB:B4:71:42:AC:D0:1D:D4:96
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313533353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:1535::/80

    Signature Algorithm: sha256WithRSAEncryption
         61:09:27:9c:4c:65:8d:cb:0b:43:c6:f1:0c:19:82:fe:6a:a8:
         63:e5:42:25:2b:4d:e6:02:26:f0:6a:22:23:14:22:bc:98:97:
         90:78:72:93:13:8c:97:ef:c5:dc:42:37:88:b2:68:39:f0:12:
         2d:4a:ec:31:a3:1b:98:24:28:1c:8d:b6:f3:bf:f3:e5:fe:43:
         3f:05:3a:cd:32:9a:56:69:02:f5:d3:db:d3:0b:7f:8e:fe:04:
         2e:2e:ec:2d:02:ef:5f:ac:5b:00:ee:e9:7a:2b:46:62:a1:27:
         26:29:36:d1:09:ee:34:fa:7a:a1:d3:71:bf:eb:c6:43:1f:68:
         30:a0:9b:8d:ec:73:96:78:94:4b:6f:83:60:aa:c1:9e:03:8c:
         cb:8e:96:ec:7f:52:5a:29:e0:12:71:50:51:7e:ed:23:f8:ba:
         87:3c:fc:13:18:ad:46:f4:15:69:ba:ab:45:e3:29:28:ae:69:
         27:72:42:be:26:13:47:23:9a:9d:3c:a8:4b:07:56:16:2e:6b:
         9e:ef:50:73:69:08:cc:c8:c1:85:5a:0e:94:b4:ed:b9:0e:92:
         c4:c3:c3:b7:9e:86:23:39:07:5c:e6:f8:d2:7d:e8:c4:60:36:
         be:24:72:11:d8:c7:8c:74:62:24:30:98:c5:67:0f:c0:c7:a8:
         66:87:ce:1c
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUUqFnRaUtDPXUHfFF+1O9AMF1sO4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE3MTUzMDAxWhcNMjMwMjE2MTUzNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEEyNUVCQUYz
MUYxRDZFMjZEMTZBNEU3MjJGNDM3ODFENzk0RjE2NkU2REM0NkRGMThGQzMyREIz
QjE0RkUyQzlBMDgyMkNCODk3RENEMjREMjMyNEYxRThCQTUxRDg1RjM4QzhCNUM0
RjRFOTc0RUQxNkI2NjgxRTYzODJGNTI3QzVDMkQ0QTU2RUJCMDkxQzI1NDhDNUU1
QUI5NDJGNDY3RURFODIwRTIyNjE1NjQzMzBBRTVDNTRFRTU3OUEwNUFEMUZEMTI2
NjFDRjg1M0Q1NUUwNjI1NjQwRTU2OTVGOTg5MzU1NTFDMUZERjFDRDY4NjA4Qzc5
QkNEMkE1NjlCQkY1MEIwREE2QTZFNEYzREM0OERFRUZFMzQ1MDM5QjNCQ0U1QTQz
NkNDMEQzNjg3Njc5QjFBNDUyQjQxNUYwNTIzRUQyNTE2OUE3QjU2OUVERjZBQkI1
OUQwOTM1MjUzRTY5MUU5ODkxNkQyNDMxMTk0NTEzREFCQkFENzQ5NTdFQ0Y0Njg5
QzAyMzNBMTZDQzhGN0FFQjg2MUNGMENDQjA0NDYyMjUyQjJEQjZCQ0VGRTc0QjJD
QzZGRjcwRTczNEU1NEEyRjlGNkQxQTFCMkVGRkZFQzREOTlEODEzNzc0QTgzOTdF
NUE1NzJDMTZGM0JBRURDODExODc4MzY1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKJeuvMfHW4m0WpOci9DeB15TxZubcRt8Y/DLbOx
T+LJoIIsuJfc0k0jJPHoulHYXzjItcT06XTtFrZoHmOC9SfFwtSlbrsJHCVIxeWr
lC9Gft6CDiJhVkMwrlxU7leaBa0f0SZhz4U9VeBiVkDlaV+Yk1VRwf3xzWhgjHm8
0qVpu/ULDaam5PPcSN7v40UDmzvOWkNswNNodnmxpFK0FfBSPtJRaae1ae32q7Wd
CTUlPmkemJFtJDEZRRPau610lX7PRonAIzoWzI9664Yc8MywRGIlKy22vO/nSyzG
/3DnNOVKL59tGhsu//7E2Z2BN3SoOX5aVywW87rtyBGHg2UCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQDnBY/+tgTwVz/m6u0cUKs0B3UljAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzczYTMxMzUzMzM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhcVNTANBgkqhkiG
9w0BAQsFAAOCAQEAYQknnExljcsLQ8bxDBmC/mqoY+VCJStN5gIm8GoiIxQivJiX
kHhykxOMl+/F3EI3iLJoOfASLUrsMaMbmCQoHI2287/z5f5DPwU6zTKaVmkC9dPb
0wt/jv4ELi7sLQLvX6xbAO7peitGYqEnJik20QnuNPp6odNxv+vGQx9oMKCbjexz
lniUS2+DYKrBngOMy46W7H9SWingEnFQUX7tI/i6hzz8ExitRvQVabqrReMpKK5p
J3JCviYTRyOanTyoSwdWFi5rnu9Qc2kIzMjBhVoOlLTtuQ6SxMPDt56GIzkHXOb4
0n3oxGA2viRyEdjHjHRiJDCYxWcPwMeoZofOHA==
-----END CERTIFICATE-----