Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a323232303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a323232303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          lHDOiDayAgj1dKufjIjiOZgwU037CH91AI/bhW73Hjo=
Subject key identifier:   31:C2:06:04:6D:2A:44:03:09:71:9A:63:DC:5B:9F:BA:9F:DE:23:1E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       44DCFB6AE9DF0B190CA3B98BBA2C10014A417C9F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a323232303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 22:20:01 +0000
ROA not before:           Fri 18 Feb 2022 22:15:01 +0000
ROA not after:            Fri 17 Feb 2023 22:20:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:2220::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:dc:fb:6a:e9:df:0b:19:0c:a3:b9:8b:ba:2c:10:01:4a:41:7c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 22:15:01 2022 GMT
            Not After : Feb 17 22:20:01 2023 GMT
        Subject: CN=3082010A0282010100A7CD0E655C093E17431395E6F4BFF1E3ED7AB2635A6C845E0EB03F6638862A0514F63139FBF0769207FC5C78DA3BC8A56313F9AABD8E6B146812C629BBB82E493A04114421D57723C93A60F82FD974F01D1EBCCDD371FE670DA23E3EBC786F64FCA164B39A6B2ABF09FDF8DA4AD09FB2B6156E47919862D94B1BF608584A0593D64B44AA265D505B452AB3299A14EAA980B408BC428AC7D4D1880F20363362097A562EDE5320DE9F07FF7687E060759AFDCCACCA1B8C570B19254392835F56BDC85C2415DC01C4FF91FE8868C574EF978A3EC939EE9EAC903415F451BD7791AF2ADC41AA192F72D0044CB3E3F12729F2EFAB83D15C9D9CF5AE8D617ED0A38EED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:0e:65:5c:09:3e:17:43:13:95:e6:f4:bf:
                    f1:e3:ed:7a:b2:63:5a:6c:84:5e:0e:b0:3f:66:38:
                    86:2a:05:14:f6:31:39:fb:f0:76:92:07:fc:5c:78:
                    da:3b:c8:a5:63:13:f9:aa:bd:8e:6b:14:68:12:c6:
                    29:bb:b8:2e:49:3a:04:11:44:21:d5:77:23:c9:3a:
                    60:f8:2f:d9:74:f0:1d:1e:bc:cd:d3:71:fe:67:0d:
                    a2:3e:3e:bc:78:6f:64:fc:a1:64:b3:9a:6b:2a:bf:
                    09:fd:f8:da:4a:d0:9f:b2:b6:15:6e:47:91:98:62:
                    d9:4b:1b:f6:08:58:4a:05:93:d6:4b:44:aa:26:5d:
                    50:5b:45:2a:b3:29:9a:14:ea:a9:80:b4:08:bc:42:
                    8a:c7:d4:d1:88:0f:20:36:33:62:09:7a:56:2e:de:
                    53:20:de:9f:07:ff:76:87:e0:60:75:9a:fd:cc:ac:
                    ca:1b:8c:57:0b:19:25:43:92:83:5f:56:bd:c8:5c:
                    24:15:dc:01:c4:ff:91:fe:88:68:c5:74:ef:97:8a:
                    3e:c9:39:ee:9e:ac:90:34:15:f4:51:bd:77:91:af:
                    2a:dc:41:aa:19:2f:72:d0:04:4c:b3:e3:f1:27:29:
                    f2:ef:ab:83:d1:5c:9d:9c:f5:ae:8d:61:7e:d0:a3:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C2:06:04:6D:2A:44:03:09:71:9A:63:DC:5B:9F:BA:9F:DE:23:1E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a323232303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:2220::/80

    Signature Algorithm: sha256WithRSAEncryption
         34:79:34:a9:68:16:60:91:5f:f8:1e:4e:a9:7d:f1:6e:56:f1:
         83:68:e2:40:55:17:1c:fc:07:8a:ba:a5:a6:24:aa:1e:cf:bb:
         1c:ba:23:2f:0d:bc:f1:81:41:e5:e4:d2:e5:3c:61:9f:b9:b6:
         c3:65:9e:62:e7:6a:b2:27:c1:95:0d:3c:98:09:9f:2a:78:a6:
         ea:8f:2a:c0:9a:d1:80:ad:19:25:13:8f:69:48:ea:ee:39:8b:
         b5:27:3d:2d:34:81:00:47:7c:de:d5:5e:dd:4c:1d:36:31:da:
         ae:d5:0c:4c:54:dd:71:45:49:0f:40:85:46:93:2b:7e:0b:38:
         5b:d6:74:98:e6:ac:89:c8:06:b6:c2:01:b4:97:99:a5:2b:ca:
         34:3c:3d:37:79:4d:be:1e:5a:a7:1a:f4:29:60:f2:e2:ed:50:
         00:b8:b7:90:05:83:ec:a9:6e:3e:65:57:db:ef:9e:66:c7:0d:
         0f:c8:6f:e8:7e:d0:22:d7:20:36:4f:14:d6:c1:fa:df:9c:a7:
         b7:df:f8:74:ef:0a:28:29:28:09:0c:b0:c8:94:a7:98:fd:18:
         6c:0e:da:9a:18:5e:be:dc:b0:09:fe:c2:5c:17:06:22:80:9e:
         cc:ce:6b:a2:05:bb:f3:82:06:5e:df:3f:95:e6:1f:6a:67:da:
         fd:70:b4:95
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIURNz7aunfCxkMo7mLuiwQAUpBfJ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE4MjIxNTAxWhcNMjMwMjE3MjIyMDAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEE3Q0QwRTY1
NUMwOTNFMTc0MzEzOTVFNkY0QkZGMUUzRUQ3QUIyNjM1QTZDODQ1RTBFQjAzRjY2
Mzg4NjJBMDUxNEY2MzEzOUZCRjA3NjkyMDdGQzVDNzhEQTNCQzhBNTYzMTNGOUFB
QkQ4RTZCMTQ2ODEyQzYyOUJCQjgyRTQ5M0EwNDExNDQyMUQ1NzcyM0M5M0E2MEY4
MkZEOTc0RjAxRDFFQkNDREQzNzFGRTY3MERBMjNFM0VCQzc4NkY2NEZDQTE2NEIz
OUE2QjJBQkYwOUZERjhEQTRBRDA5RkIyQjYxNTZFNDc5MTk4NjJEOTRCMUJGNjA4
NTg0QTA1OTNENjRCNDRBQTI2NUQ1MDVCNDUyQUIzMjk5QTE0RUFBOTgwQjQwOEJD
NDI4QUM3RDREMTg4MEYyMDM2MzM2MjA5N0E1NjJFREU1MzIwREU5RjA3RkY3Njg3
RTA2MDc1OUFGRENDQUNDQTFCOEM1NzBCMTkyNTQzOTI4MzVGNTZCREM4NUMyNDE1
REMwMUM0RkY5MUZFODg2OEM1NzRFRjk3OEEzRUM5MzlFRTlFQUM5MDM0MTVGNDUx
QkQ3NzkxQUYyQURDNDFBQTE5MkY3MkQwMDQ0Q0IzRTNGMTI3MjlGMkVGQUI4M0Qx
NUM5RDlDRjVBRThENjE3RUQwQTM4RUVEMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKfNDmVcCT4XQxOV5vS/8ePterJjWmyEXg6wP2Y4
hioFFPYxOfvwdpIH/Fx42jvIpWMT+aq9jmsUaBLGKbu4Lkk6BBFEIdV3I8k6YPgv
2XTwHR68zdNx/mcNoj4+vHhvZPyhZLOaayq/Cf342krQn7K2FW5HkZhi2Usb9ghY
SgWT1ktEqiZdUFtFKrMpmhTqqYC0CLxCisfU0YgPIDYzYgl6Vi7eUyDenwf/dofg
YHWa/cysyhuMVwsZJUOSg19WvchcJBXcAcT/kf6IaMV075eKPsk57p6skDQV9FG9
d5GvKtxBqhkvctAETLPj8Scp8u+rg9FcnZz1ro1hftCjju0CAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQxwgYEbSpEAwlxmmPcW5+6n94jHjAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzgzYTMyMzIzMjMwM2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhgiIDANBgkqhkiG
9w0BAQsFAAOCAQEANHk0qWgWYJFf+B5OqX3xblbxg2jiQFUXHPwHirqlpiSqHs+7
HLojLw288YFB5eTS5Txhn7m2w2WeYudqsifBlQ08mAmfKnim6o8qwJrRgK0ZJROP
aUjq7jmLtSc9LTSBAEd83tVe3UwdNjHartUMTFTdcUVJD0CFRpMrfgs4W9Z0mOas
icgGtsIBtJeZpSvKNDw9N3lNvh5apxr0KWDy4u1QALi3kAWD7KluPmVX2++eZscN
D8hv6H7QItcgNk8U1sH635ynt9/4dO8KKCkoCQywyJSnmP0YbA7amhhevtywCf7C
XBcGIoCezM5rogW784IGXt8/leYfamfa/XC0lQ==
-----END CERTIFICATE-----