Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313630353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a313630353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          JphiAydIIv8GrenleUctSblwjS76/WXsl3bOeMDmgSI=
Subject key identifier:   A2:87:77:81:35:DC:0D:FF:95:41:E1:FA:14:09:66:2B:A5:D5:A4:68
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5A8DAA731DDAA1D8166228805FD5C01652E2AA1A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313630353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 16:05:02 +0000
ROA not before:           Fri 18 Feb 2022 16:00:02 +0000
ROA not after:            Fri 17 Feb 2023 16:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:1605::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8d:aa:73:1d:da:a1:d8:16:62:28:80:5f:d5:c0:16:52:e2:aa:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 16:00:02 2022 GMT
            Not After : Feb 17 16:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:c3:14:dd:46:9a:46:f1:6e:11:b7:48:61:
                    70:40:04:ee:0d:10:ae:f2:ea:83:68:69:fb:3e:eb:
                    f0:22:bf:72:e1:78:2d:3e:d9:13:69:f6:0a:b2:11:
                    a0:57:ed:ea:22:1b:ee:e9:49:ee:3d:f7:5a:d5:c9:
                    7a:fc:e3:20:ec:33:3a:85:e2:c6:3f:17:33:18:a8:
                    10:d0:0d:72:3e:67:99:52:67:ae:d1:fb:9a:ef:d6:
                    ab:c0:dc:bb:3d:5e:4b:3f:a0:d6:67:86:15:f0:91:
                    d2:97:56:88:33:7c:94:ce:fc:b3:d8:0c:85:f4:c1:
                    65:e3:e8:ef:75:be:d1:08:63:02:85:85:d6:e4:df:
                    ab:c8:f0:6e:72:70:a6:89:d5:96:b0:ad:aa:02:93:
                    a7:b9:68:8e:2c:89:92:63:c9:c5:b3:3b:94:03:a2:
                    82:cd:a5:41:5d:7a:ba:85:b2:3f:d5:ae:81:33:73:
                    bb:01:ee:07:17:99:84:be:9c:17:fe:28:45:28:f6:
                    f7:21:82:fa:aa:0b:6e:d2:74:74:b6:26:e2:9e:83:
                    30:b2:32:e5:ee:09:f4:ca:9f:6c:fb:36:cd:48:a5:
                    4e:42:cd:54:47:f3:90:59:5e:90:c0:93:65:f6:ab:
                    bc:69:46:c7:65:b9:c5:da:65:e5:73:de:4d:bd:1b:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:87:77:81:35:DC:0D:FF:95:41:E1:FA:14:09:66:2B:A5:D5:A4:68
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a313630353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:1605::/80

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:bc:81:d9:fb:9f:3a:f9:dd:a1:9a:5a:50:05:97:a5:36:
         4f:1f:85:d9:5e:ea:a8:e1:ed:36:c8:ec:47:1b:97:3c:78:c8:
         63:2e:04:c5:92:f3:4c:97:51:17:00:79:30:79:a3:44:74:9a:
         fd:59:c7:27:8a:bf:6a:d5:d3:ab:ab:4b:a5:f7:ce:06:85:a9:
         95:3b:e8:00:b7:a6:32:c7:be:20:cb:31:28:7f:3a:2b:94:aa:
         e9:d1:72:0d:7a:05:78:8a:bd:5a:86:ac:49:57:4c:46:a7:eb:
         a5:c1:4b:f8:31:02:fe:88:ea:f4:ad:1e:d8:e6:28:7a:08:de:
         9b:9e:ab:2e:e7:f6:5d:d6:1c:ff:6e:eb:b7:63:4a:58:cd:f1:
         a5:07:f7:ec:2b:c3:9b:b4:da:20:92:46:39:3d:55:71:05:5c:
         c5:1c:9e:df:84:67:c1:84:18:c9:1c:03:39:a1:50:64:8c:d8:
         5e:7c:81:b3:7a:6a:52:cd:ae:be:79:36:ac:20:af:b2:40:2c:
         7e:5a:7c:3c:30:ca:26:8c:c9:bf:65:c3:b7:b8:d7:11:e1:a9:
         b6:87:bc:31:93:1f:5c:09:01:c7:1b:19:a9:23:f1:11:ff:80:
         0e:d0:38:75:c5:e4:5c:60:2d:a3:8c:42:2c:11:d0:1b:75:12:
         19:90:77:4a
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUWo2qcx3aodgWYiiAX9XAFlLiqhowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE4MTYwMDAyWhcNMjMwMjE3MTYwNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEMyQ0ZDMzE0
REQ0NjlBNDZGMTZFMTFCNzQ4NjE3MDQwMDRFRTBEMTBBRUYyRUE4MzY4NjlGQjNF
RUJGMDIyQkY3MkUxNzgyRDNFRDkxMzY5RjYwQUIyMTFBMDU3RURFQTIyMUJFRUU5
NDlFRTNERjc1QUQ1Qzk3QUZDRTMyMEVDMzMzQTg1RTJDNjNGMTczMzE4QTgxMEQw
MEQ3MjNFNjc5OTUyNjdBRUQxRkI5QUVGRDZBQkMwRENCQjNENUU0QjNGQTBENjY3
ODYxNUYwOTFEMjk3NTY4ODMzN0M5NENFRkNCM0Q4MEM4NUY0QzE2NUUzRThFRjc1
QkVEMTA4NjMwMjg1ODVENkU0REZBQkM4RjA2RTcyNzBBNjg5RDU5NkIwQURBQTAy
OTNBN0I5Njg4RTJDODk5MjYzQzlDNUIzM0I5NDAzQTI4MkNEQTU0MTVEN0FCQTg1
QjIzRkQ1QUU4MTMzNzNCQjAxRUUwNzE3OTk4NEJFOUMxN0ZFMjg0NTI4RjZGNzIx
ODJGQUFBMEI2RUQyNzQ3NEI2MjZFMjlFODMzMEIyMzJFNUVFMDlGNENBOUY2Q0ZC
MzZDRDQ4QTU0RTQyQ0Q1NDQ3RjM5MDU5NUU5MEMwOTM2NUY2QUJCQzY5NDZDNzY1
QjlDNURBNjVFNTczREU0REJEMUJEMkQ1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMLPwxTdRppG8W4Rt0hhcEAE7g0QrvLqg2hp+z7r
8CK/cuF4LT7ZE2n2CrIRoFft6iIb7ulJ7j33WtXJevzjIOwzOoXixj8XMxioENAN
cj5nmVJnrtH7mu/Wq8Dcuz1eSz+g1meGFfCR0pdWiDN8lM78s9gMhfTBZePo73W+
0QhjAoWF1uTfq8jwbnJwponVlrCtqgKTp7lojiyJkmPJxbM7lAOigs2lQV16uoWy
P9WugTNzuwHuBxeZhL6cF/4oRSj29yGC+qoLbtJ0dLYm4p6DMLIy5e4J9MqfbPs2
zUilTkLNVEfzkFlekMCTZfarvGlGx2W5xdpl5XPeTb0b0tUCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBSih3eBNdwN/5VB4foUCWYrpdWkaDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzgzYTMxMzYzMDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhgWBTANBgkqhkiG
9w0BAQsFAAOCAQEAGMm8gdn7nzr53aGaWlAFl6U2Tx+F2V7qqOHtNsjsRxuXPHjI
Yy4ExZLzTJdRFwB5MHmjRHSa/VnHJ4q/atXTq6tLpffOBoWplTvoALemMse+IMsx
KH86K5Sq6dFyDXoFeIq9WoasSVdMRqfrpcFL+DEC/ojq9K0e2OYoegjem56rLuf2
XdYc/27rt2NKWM3xpQf37CvDm7TaIJJGOT1VcQVcxRye34RnwYQYyRwDOaFQZIzY
XnyBs3pqUs2uvnk2rCCvskAsflp8PDDKJozJv2XDt7jXEeGptoe8MZMfXAkBxxsZ
qSPxEf+ADtA4dcXkXGAto4xCLBHQG3USGZB3Sg==
-----END CERTIFICATE-----