Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3931353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231383a3931353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          goCPywc8gJuHFK0qlNWq0UmY3wl+DbLlAOyE+O+pYzc=
Subject key identifier:   15:4C:E1:C0:26:76:8C:F7:27:25:73:C5:57:6D:1C:39:58:70:F9:B9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5B32F3003831E8EDAC5C7C0FE2D8750D024E7B45
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3931353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Fri 18 Feb 2022 09:15:01 +0000
ROA not before:           Fri 18 Feb 2022 09:10:01 +0000
ROA not after:            Fri 17 Feb 2023 09:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:218:915::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:32:f3:00:38:31:e8:ed:ac:5c:7c:0f:e2:d8:75:0d:02:4e:7b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 18 09:10:01 2022 GMT
            Not After : Feb 17 09:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:d2:5a:78:5c:2f:b1:40:e7:cd:5b:24:6e:
                    aa:be:1e:65:d3:37:a1:9a:27:5f:67:a6:93:77:bb:
                    92:cd:12:03:f5:33:66:cb:78:ee:bc:d3:61:b0:a6:
                    31:75:3c:a1:d7:b1:cc:3f:dd:73:a8:a8:2b:89:80:
                    a7:0d:fc:19:0a:a2:e1:1f:9b:85:1f:93:ef:ea:15:
                    9e:42:af:bf:19:c2:7d:4f:46:1e:6b:bd:dc:2c:5f:
                    5a:10:09:6e:78:4a:9b:f8:9c:90:0b:d0:c3:5b:28:
                    54:2b:58:9b:3e:aa:ed:c1:d5:f1:3e:df:14:90:fd:
                    56:d2:75:1a:70:e4:4f:15:7d:99:78:00:a6:d6:40:
                    13:89:f2:3e:fb:b5:78:4e:69:6a:1c:58:47:95:04:
                    fb:66:21:23:c3:12:c4:98:e5:f1:f4:cb:3c:64:e7:
                    f3:3b:88:16:51:fa:38:43:8c:88:88:1f:8d:bf:c2:
                    06:2e:37:cc:e2:d0:a6:60:77:71:ee:57:b7:90:86:
                    06:2a:99:13:35:c6:2e:fd:94:96:a0:f2:68:79:99:
                    e4:c8:4b:26:af:f9:ac:ca:cd:3a:98:03:ca:ce:97:
                    f7:55:16:ea:fa:6a:cb:b6:39:2f:b8:0b:8e:ec:b3:
                    f3:71:4c:26:75:0e:b3:fe:c1:d1:65:f4:55:99:e4:
                    7c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4C:E1:C0:26:76:8C:F7:27:25:73:C5:57:6D:1C:39:58:70:F9:B9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231383a3931353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:218:915::/80

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:81:88:76:b9:cd:e8:6b:7e:20:80:24:ed:13:09:c1:30:
         04:f3:f0:93:25:ab:25:d2:8a:d0:d9:3c:96:e1:b9:40:8c:b6:
         7a:da:cf:07:e8:3a:94:9b:43:34:15:88:01:b6:9b:84:f2:34:
         e3:4b:77:0c:ba:ec:12:ba:26:20:93:d0:ce:da:db:0b:f9:d7:
         93:de:7e:20:25:1f:a4:02:27:22:7c:b0:2d:21:0c:17:25:dc:
         ff:1f:8c:b3:cd:52:13:48:a2:64:63:21:b2:09:88:e4:1e:96:
         5d:d1:f3:35:5d:5f:04:8d:17:93:54:5b:74:20:02:46:10:21:
         34:72:40:af:53:c6:a5:6a:c9:fc:2d:51:02:bf:1d:75:61:12:
         a4:b5:9a:c0:ee:06:1d:48:eb:2f:b9:20:b3:5b:2e:4a:1c:41:
         54:ad:9e:1c:a6:2b:b0:aa:18:db:12:56:35:24:d9:ce:2d:70:
         a4:16:ad:35:6e:8b:8b:11:ef:4b:8d:10:6e:10:c9:05:33:e4:
         6e:cb:ad:1c:e1:2e:a7:f3:56:26:50:49:dd:6b:9c:99:42:9a:
         58:7e:f5:65:3a:f4:bc:8f:ed:71:85:54:a9:f0:43:f0:7b:27:
         96:89:0d:91:79:19:b3:0c:76:56:31:1a:b3:e1:1a:05:36:c6:
         6d:fe:30:af
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUWzLzADgx6O2sXHwP4th1DQJOe0UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE4MDkxMDAxWhcNMjMwMjE3MDkxNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMDlCQTREMjVB
Nzg1QzJGQjE0MEU3Q0Q1QjI0NkVBQUJFMUU2NUQzMzdBMTlBMjc1RjY3QTY5Mzc3
QkI5MkNEMTIwM0Y1MzM2NkNCNzhFRUJDRDM2MUIwQTYzMTc1M0NBMUQ3QjFDQzNG
REQ3M0E4QTgyQjg5ODBBNzBERkMxOTBBQTJFMTFGOUI4NTFGOTNFRkVBMTU5RTQy
QUZCRjE5QzI3RDRGNDYxRTZCQkREQzJDNUY1QTEwMDk2RTc4NEE5QkY4OUM5MDBC
RDBDMzVCMjg1NDJCNTg5QjNFQUFFREMxRDVGMTNFREYxNDkwRkQ1NkQyNzUxQTcw
RTQ0RjE1N0Q5OTc4MDBBNkQ2NDAxMzg5RjIzRUZCQjU3ODRFNjk2QTFDNTg0Nzk1
MDRGQjY2MjEyM0MzMTJDNDk4RTVGMUY0Q0IzQzY0RTdGMzNCODgxNjUxRkEzODQz
OEM4ODg4MUY4REJGQzIwNjJFMzdDQ0UyRDBBNjYwNzc3MUVFNTdCNzkwODYwNjJB
OTkxMzM1QzYyRUZEOTQ5NkEwRjI2ODc5OTlFNEM4NEIyNkFGRjlBQ0NBQ0QzQTk4
MDNDQUNFOTdGNzU1MTZFQUZBNkFDQkI2MzkyRkI4MEI4RUVDQjNGMzcxNEMyNjc1
MEVCM0ZFQzFEMTY1RjQ1NTk5RTQ3Q0QzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJuk0lp4XC+xQOfNWyRuqr4eZdM3oZonX2emk3e7
ks0SA/UzZst47rzTYbCmMXU8odexzD/dc6ioK4mApw38GQqi4R+bhR+T7+oVnkKv
vxnCfU9GHmu93CxfWhAJbnhKm/ickAvQw1soVCtYmz6q7cHV8T7fFJD9VtJ1GnDk
TxV9mXgAptZAE4nyPvu1eE5pahxYR5UE+2YhI8MSxJjl8fTLPGTn8zuIFlH6OEOM
iIgfjb/CBi43zOLQpmB3ce5Xt5CGBiqZEzXGLv2UlqDyaHmZ5MhLJq/5rMrNOpgD
ys6X91UW6vpqy7Y5L7gLjuyz83FMJnUOs/7B0WX0VZnkfNMCAwEAAaOCApowggKW
MB0GA1UdDgQWBBQVTOHAJnaM9yclc8VXbRw5WHD5uTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzgzYTM5MzEzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIYCRUwDQYJKoZIhvcN
AQELBQADggEBADnKgYh2uc3oa34ggCTtEwnBMATz8JMlqyXSitDZPJbhuUCMtnra
zwfoOpSbQzQViAG2m4TyNONLdwy67BK6JiCT0M7a2wv515PefiAlH6QCJyJ8sC0h
DBcl3P8fjLPNUhNIomRjIbIJiOQell3R8zVdXwSNF5NUW3QgAkYQITRyQK9TxqVq
yfwtUQK/HXVhEqS1msDuBh1I6y+5ILNbLkocQVStnhymK7CqGNsSVjUk2c4tcKQW
rTVui4sR70uNEG4QyQUz5G7LrRzhLqfzViZQSd1rnJlCmlh+9WU69LyP7XGFVKnw
Q/B7J5aJDZF5GbMMdlYxGrPhGgU2xm3+MK8=
-----END CERTIFICATE-----