Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323030303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231373a323030303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          HO5XA2aF8wyVJ2rs5Fk0TARvOCPpRilZlD77van52BI=
Subject key identifier:   7C:4A:5B:96:46:6D:9E:88:8D:E6:B0:83:7C:82:CE:E4:F6:12:D2:DD
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       36408FFAB1A613457E912591227CC5E146F39A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323030303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 17 Feb 2022 20:00:01 +0000
ROA not before:           Thu 17 Feb 2022 19:55:01 +0000
ROA not after:            Thu 16 Feb 2023 20:00:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:217:2000::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:40:8f:fa:b1:a6:13:45:7e:91:25:91:22:7c:c5:e1:46:f3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 17 19:55:01 2022 GMT
            Not After : Feb 16 20:00:01 2023 GMT
        Subject: CN=3082010A0282010100BBD386EA7215B2CA6B9FD2E59DFD2D28B828BE6513B4B1E534AAA0C5D702F36C29FE0E0164DF670DD1E9FB76C758A727D6DA64CF025524604FCE32F36E57023A6425922CE3E2F72A856D8F22BCBC664FCE498B28F0C8527F537977BD96428106CC8A139D7FA0CDCF8AD92738BDE413678AE41CBBC9472EAB4464226A8D7C3FECE07165D2B16F70C9ED586682E88BAEB1384FA7E204195F1F4AF097E191421ED4FD59858A7E406707B59FA0B25CD7BC6B5AD28E8E1CEE72F3A14C52AF1B592B9F71ACB48E00097F9E072B26A0A872DB0E190316E96B5B87BE52879AE8187FF9CEE376F33B79E437B830F0E84E06CC87C3FAFCD43FFDF0530132FBA936227DBC490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:86:ea:72:15:b2:ca:6b:9f:d2:e5:9d:fd:
                    2d:28:b8:28:be:65:13:b4:b1:e5:34:aa:a0:c5:d7:
                    02:f3:6c:29:fe:0e:01:64:df:67:0d:d1:e9:fb:76:
                    c7:58:a7:27:d6:da:64:cf:02:55:24:60:4f:ce:32:
                    f3:6e:57:02:3a:64:25:92:2c:e3:e2:f7:2a:85:6d:
                    8f:22:bc:bc:66:4f:ce:49:8b:28:f0:c8:52:7f:53:
                    79:77:bd:96:42:81:06:cc:8a:13:9d:7f:a0:cd:cf:
                    8a:d9:27:38:bd:e4:13:67:8a:e4:1c:bb:c9:47:2e:
                    ab:44:64:22:6a:8d:7c:3f:ec:e0:71:65:d2:b1:6f:
                    70:c9:ed:58:66:82:e8:8b:ae:b1:38:4f:a7:e2:04:
                    19:5f:1f:4a:f0:97:e1:91:42:1e:d4:fd:59:85:8a:
                    7e:40:67:07:b5:9f:a0:b2:5c:d7:bc:6b:5a:d2:8e:
                    8e:1c:ee:72:f3:a1:4c:52:af:1b:59:2b:9f:71:ac:
                    b4:8e:00:09:7f:9e:07:2b:26:a0:a8:72:db:0e:19:
                    03:16:e9:6b:5b:87:be:52:87:9a:e8:18:7f:f9:ce:
                    e3:76:f3:3b:79:e4:37:b8:30:f0:e8:4e:06:cc:87:
                    c3:fa:fc:d4:3f:fd:f0:53:01:32:fb:a9:36:22:7d:
                    bc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4A:5B:96:46:6D:9E:88:8D:E6:B0:83:7C:82:CE:E4:F6:12:D2:DD
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231373a323030303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:217:2000::/80

    Signature Algorithm: sha256WithRSAEncryption
         86:69:2b:38:b5:97:42:f0:3f:1e:ce:97:f2:1b:ca:ae:fe:90:
         38:3d:55:6d:e1:04:77:1a:06:7d:2c:10:9c:bc:c9:e7:80:61:
         c8:c4:16:2b:9e:3a:d9:d4:64:0c:ff:b8:1a:a6:8d:fb:c8:eb:
         53:bb:c9:94:41:6d:f0:a4:50:92:83:ca:b9:90:96:aa:7f:48:
         da:bf:b6:b8:b9:1a:df:05:b5:fe:1e:cc:21:e3:5e:10:c4:96:
         0c:b3:5e:4b:40:60:d8:63:88:3b:cc:00:98:21:7c:53:e0:5c:
         1c:4a:40:74:d0:19:5f:e0:51:5f:a3:ce:d8:98:83:c0:f5:6f:
         6a:13:24:87:77:72:a0:4a:75:d5:f3:74:d6:91:2f:d6:8b:2f:
         45:b7:ab:2e:62:6f:8b:4e:62:e7:fa:79:26:e3:88:d3:18:51:
         9c:5b:7c:63:27:a2:82:f6:6f:86:e2:2f:53:31:3d:eb:a9:4f:
         e3:45:3c:6a:d0:7e:93:2c:18:8f:cb:87:e4:ca:9d:fb:df:75:
         a8:35:01:0a:e6:66:34:44:1f:f2:8a:8d:25:ce:48:90:7e:18:
         32:a6:87:ee:b6:08:84:d0:d8:2e:b0:3a:9b:09:2d:c4:88:ea:
         72:63:4a:88:bb:e3:bf:d5:54:a7:b9:56:54:69:80:9f:e7:ff:
         3d:6e:34:a6
-----BEGIN CERTIFICATE-----
MIIHlzCCBn+gAwIBAgITNkCP+rGmE0V+kSWRInzF4UbzmjANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI1YTdiNWQzMmUzZmI1MzdjNDE2YmU4M2Y3ZjZjYmI0YTk1
ZTk1OGE2MWIyNTAxNzkyMjAeFw0yMjAyMTcxOTU1MDFaFw0yMzAyMTYyMDAwMDFa
MIICLTGCAikwggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJEMzg2RUE3
MjE1QjJDQTZCOUZEMkU1OURGRDJEMjhCODI4QkU2NTEzQjRCMUU1MzRBQUEwQzVE
NzAyRjM2QzI5RkUwRTAxNjRERjY3MEREMUU5RkI3NkM3NThBNzI3RDZEQTY0Q0Yw
MjU1MjQ2MDRGQ0UzMkYzNkU1NzAyM0E2NDI1OTIyQ0UzRTJGNzJBODU2RDhGMjJC
Q0JDNjY0RkNFNDk4QjI4RjBDODUyN0Y1Mzc5NzdCRDk2NDI4MTA2Q0M4QTEzOUQ3
RkEwQ0RDRjhBRDkyNzM4QkRFNDEzNjc4QUU0MUNCQkM5NDcyRUFCNDQ2NDIyNkE4
RDdDM0ZFQ0UwNzE2NUQyQjE2RjcwQzlFRDU4NjY4MkU4OEJBRUIxMzg0RkE3RTIw
NDE5NUYxRjRBRjA5N0UxOTE0MjFFRDRGRDU5ODU4QTdFNDA2NzA3QjU5RkEwQjI1
Q0Q3QkM2QjVBRDI4RThFMUNFRTcyRjNBMTRDNTJBRjFCNTkyQjlGNzFBQ0I0OEUw
MDA5N0Y5RTA3MkIyNkEwQTg3MkRCMEUxOTAzMTZFOTZCNUI4N0JFNTI4NzlBRTgx
ODdGRjlDRUUzNzZGMzNCNzlFNDM3QjgzMEYwRTg0RTA2Q0M4N0MzRkFGQ0Q0M0ZG
REYwNTMwMTMyRkJBOTM2MjI3REJDNDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAu9OG6nIVssprn9Llnf0tKLgovmUTtLHlNKqgxdcC
82wp/g4BZN9nDdHp+3bHWKcn1tpkzwJVJGBPzjLzblcCOmQlkizj4vcqhW2PIry8
Zk/OSYso8MhSf1N5d72WQoEGzIoTnX+gzc+K2Sc4veQTZ4rkHLvJRy6rRGQiao18
P+zgcWXSsW9wye1YZoLoi66xOE+n4gQZXx9K8JfhkUIe1P1ZhYp+QGcHtZ+gslzX
vGta0o6OHO5y86FMUq8bWSufcay0jgAJf54HKyagqHLbDhkDFulrW4e+Uoea6Bh/
+c7jdvM7eeQ3uDDw6E4GzIfD+vzUP/3wUwEy+6k2In28SQIDAQABo4ICnDCCApgw
HQYDVR0OBBYEFHxKW5ZGbZ6Ijeawg3yCzuT2EtLdMB8GA1UdIwQYMBaAFHSh+3um
8A0k7HfAC+lAn6h1H/48MA4GA1UdDwEB/wQEAwIHgDBpBgNVHR8EYjBgMF6gXKBa
hlhyc3luYzovL3Jwa2kuZGF0YXBsYW5lLm9yZy9yZXBvL0RBVEFQTEFORS8wLzc0
QTFGQjdCQTZGMDBEMjRFQzc3QzAwQkU5NDA5RkE4NzUxRkZFM0MuY3JsMIHzBggr
BgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5u
ZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIw
OGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBi
ODQxNS82OGYyYjY1Zi1jYzQ4LTQ5MTYtYjljYy1jYWU5MGI0OWRhN2IvNWE3YjVk
MzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5NWU5NThhNjFiMjUwMTc5MjIuY2Vy
MIGiBggrBgEFBQcBCwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3Jwa2ku
ZGF0YXBsYW5lLm9yZy9yZXBvL0RBVEFQTEFORS8wLzMyMzYzMDM2M2EzMzY1NjMz
MDNhMzIzMDMyMzIzYTMyMzEzNzNhMzIzMDMwMzAzYTNhMmYzODMwMmQzODMwMjAz
ZDNlMjAzMzM5MzkzNTMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JgYIKwYBBQUHAQcBAf8EFzAVMBMEAgACMA0DCwAmBj7AICICFyAAMA0GCSqGSIb3
DQEBCwUAA4IBAQCGaSs4tZdC8D8ezpfyG8qu/pA4PVVt4QR3GgZ9LBCcvMnngGHI
xBYrnjrZ1GQM/7gapo37yOtTu8mUQW3wpFCSg8q5kJaqf0jav7a4uRrfBbX+Hswh
414QxJYMs15LQGDYY4g7zACYIXxT4FwcSkB00Blf4FFfo87YmIPA9W9qEySHd3Kg
SnXV83TWkS/Wiy9Ft6suYm+LTmLn+nkm44jTGFGcW3xjJ6KC9m+G4i9TMT3rqU/j
RTxq0H6TLBiPy4fkyp3733WoNQEK5mY0RB/yio0lzkiQfhgypofutgiE0NgusDqb
CS3EiOpyY0qIu+O/1VSnuVZUaYCf5/89bjSm
-----END CERTIFICATE-----