Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313734353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a313734353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          PxB2lLimXjCREpRPbc7q35gSqAtx1b04KJpZVrYMTGk=
Subject key identifier:   E6:97:A0:6F:43:B3:72:A8:77:8F:0D:A4:8D:91:F2:2C:0C:8B:97:9F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3D63DE3703DB81F960C21CB1C4EA348EB1416298
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313734353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 17:45:02 +0000
ROA not before:           Thu 17 Feb 2022 17:40:02 +0000
ROA not after:            Thu 16 Feb 2023 17:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:1745::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:63:de:37:03:db:81:f9:60:c2:1c:b1:c4:ea:34:8e:b1:41:62:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 17:40:02 2022 GMT
            Not After : Feb 16 17:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:2a:c6:9c:96:97:f9:6a:69:4f:8d:df:1e:
                    71:46:9c:98:8e:57:ad:db:9d:b2:79:2a:44:f2:ed:
                    eb:a7:2a:bd:ee:89:65:b0:5d:f9:5e:a6:66:ce:d1:
                    a4:65:c7:e7:6c:06:4b:83:2f:b1:72:3c:56:40:4d:
                    03:cf:98:e2:4a:21:b2:d4:54:10:0b:b3:c4:fe:cf:
                    6b:71:78:31:d0:8f:70:83:4d:0c:e1:41:a1:aa:1a:
                    c5:0f:04:04:e7:2b:e2:cc:4d:05:9c:64:9a:43:9c:
                    cc:dc:59:28:15:05:e8:1d:88:f9:76:07:b8:e1:f2:
                    0c:60:53:fe:29:88:95:e6:66:be:98:45:c9:c7:6d:
                    32:dc:4f:74:2b:19:58:85:d4:13:64:3a:cd:b1:57:
                    18:3b:b0:29:04:86:c1:01:0a:24:8c:89:3a:ce:e6:
                    4c:47:59:24:17:6e:f4:99:1f:d4:56:8b:00:d4:27:
                    7a:2c:66:09:e4:e0:f3:c5:17:33:8c:36:ba:36:50:
                    79:d3:15:ee:0b:e3:cb:a7:a5:0f:78:19:78:5a:6d:
                    5d:ed:17:97:b6:2a:23:de:19:81:19:f0:f2:35:2d:
                    9b:57:65:a7:0c:1b:99:70:58:29:47:70:0a:a3:67:
                    da:f2:df:86:f4:ad:9f:a2:f9:f4:56:77:5c:4c:8d:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:A0:6F:43:B3:72:A8:77:8F:0D:A4:8D:91:F2:2C:0C:8B:97:9F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a313734353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:1745::/80

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:36:07:2a:45:e8:8b:f6:0a:89:d3:1a:e6:71:77:f5:97:
         e6:93:73:9e:55:13:24:2d:24:30:26:70:ce:c9:6a:b5:0c:ed:
         5a:7d:91:e9:71:87:11:76:07:f9:f6:97:85:ab:f4:0d:65:59:
         68:5a:bc:e1:4d:86:a0:fa:8c:e6:de:79:b2:18:68:16:8d:55:
         ee:f8:32:46:2a:68:cb:db:da:c1:22:e1:45:1f:c3:be:4d:a8:
         f6:a4:ae:68:81:fa:fc:de:d5:91:04:86:11:52:98:e6:b9:3e:
         3c:bb:93:03:41:3a:4a:c5:77:81:67:d5:d1:13:76:26:c1:53:
         28:a4:fc:7a:4a:8b:ed:c4:52:bc:b5:fd:fa:25:f0:62:5e:0f:
         c0:83:bf:82:e3:b0:f9:13:b2:8d:5b:52:dc:1c:33:29:a7:b7:
         90:56:b0:60:3a:e5:39:ac:42:96:c2:d9:07:00:68:a9:12:ea:
         68:ad:6b:2e:51:2d:f4:bf:83:be:f0:6c:d3:77:72:d0:e7:fa:
         a7:d7:23:0c:0c:b1:10:72:17:2c:c1:93:0f:da:49:03:fe:60:
         f5:35:24:3d:e2:3b:c1:8a:59:08:48:dc:cf:00:25:0e:41:28:
         16:f2:b8:cc:b4:85:2f:ef:cb:0b:9d:ed:fe:d6:f7:5e:5c:e7:
         53:83:c3:26
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUPWPeNwPbgflgwhyxxOo0jrFBYpgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE3MTc0MDAyWhcNMjMwMjE2MTc0NTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMDlCMzYyQUM2
OUM5Njk3Rjk2QTY5NEY4RERGMUU3MTQ2OUM5ODhFNTdBRERCOURCMjc5MkE0NEYy
RURFQkE3MkFCREVFODk2NUIwNURGOTVFQTY2NkNFRDFBNDY1QzdFNzZDMDY0Qjgz
MkZCMTcyM0M1NjQwNEQwM0NGOThFMjRBMjFCMkQ0NTQxMDBCQjNDNEZFQ0Y2Qjcx
NzgzMUQwOEY3MDgzNEQwQ0UxNDFBMUFBMUFDNTBGMDQwNEU3MkJFMkNDNEQwNTlD
NjQ5QTQzOUNDQ0RDNTkyODE1MDVFODFEODhGOTc2MDdCOEUxRjIwQzYwNTNGRTI5
ODg5NUU2NjZCRTk4NDVDOUM3NkQzMkRDNEY3NDJCMTk1ODg1RDQxMzY0M0FDREIx
NTcxODNCQjAyOTA0ODZDMTAxMEEyNDhDODkzQUNFRTY0QzQ3NTkyNDE3NkVGNDk5
MUZENDU2OEIwMEQ0Mjc3QTJDNjYwOUU0RTBGM0M1MTczMzhDMzZCQTM2NTA3OUQz
MTVFRTBCRTNDQkE3QTUwRjc4MTk3ODVBNkQ1REVEMTc5N0I2MkEyM0RFMTk4MTE5
RjBGMjM1MkQ5QjU3NjVBNzBDMUI5OTcwNTgyOTQ3NzAwQUEzNjdEQUYyREY4NkY0
QUQ5RkEyRjlGNDU2Nzc1QzRDOEQ5NzU3MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJs2Ksaclpf5amlPjd8ecUacmI5XrdudsnkqRPLt
66cqve6JZbBd+V6mZs7RpGXH52wGS4MvsXI8VkBNA8+Y4kohstRUEAuzxP7Pa3F4
MdCPcINNDOFBoaoaxQ8EBOcr4sxNBZxkmkOczNxZKBUF6B2I+XYHuOHyDGBT/imI
leZmvphFycdtMtxPdCsZWIXUE2Q6zbFXGDuwKQSGwQEKJIyJOs7mTEdZJBdu9Jkf
1FaLANQneixmCeTg88UXM4w2ujZQedMV7gvjy6elD3gZeFptXe0Xl7YqI94ZgRnw
8jUtm1dlpwwbmXBYKUdwCqNn2vLfhvStn6L59FZ3XEyNl1cCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBTml6BvQ7NyqHePDaSNkfIsDIuXnzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzczYTMxMzczNDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhcXRTANBgkqhkiG
9w0BAQsFAAOCAQEAhdU2BypF6Iv2ConTGuZxd/WX5pNznlUTJC0kMCZwzslqtQzt
Wn2R6XGHEXYH+faXhav0DWVZaFq84U2GoPqM5t55shhoFo1V7vgyRipoy9vawSLh
RR/Dvk2o9qSuaIH6/N7VkQSGEVKY5rk+PLuTA0E6SsV3gWfV0RN2JsFTKKT8ekqL
7cRSvLX9+iXwYl4PwIO/guOw+ROyjVtS3BwzKae3kFawYDrlOaxClsLZBwBoqRLq
aK1rLlEt9L+DvvBs03dy0Of6p9cjDAyxEHIXLMGTD9pJA/5g9TUkPeI7wYpZCEjc
zwAlDkEoFvK4zLSFL+/LC53t/tb3XlznU4PDJg==
-----END CERTIFICATE-----