Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323235353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231393a323235353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          X32YK1S+EpYhQ96P5s5bsUKWEQc5UDaF/Eb0f2UKnqQ=
Subject key identifier:   12:95:D4:13:98:DA:02:CB:EC:78:ED:95:AD:ED:DF:A2:39:C0:E5:65
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       08EC7C6DF30E0D2AD080BCCC10F6AFBD5B5DABCF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323235353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 19 Feb 2022 22:55:01 +0000
ROA not before:           Sat 19 Feb 2022 22:50:01 +0000
ROA not after:            Sat 18 Feb 2023 22:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:219:2255::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ec:7c:6d:f3:0e:0d:2a:d0:80:bc:cc:10:f6:af:bd:5b:5d:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 19 22:50:01 2022 GMT
            Not After : Feb 18 22:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:fe:01:c3:28:36:3e:12:61:3b:71:1e:0c:
                    1d:64:b9:ce:8f:b3:b0:39:d1:64:68:bf:b7:33:e3:
                    45:5b:3f:5f:79:01:64:51:f0:32:82:c6:c3:f7:b5:
                    89:6f:c6:c4:b6:d6:d4:d8:61:6e:e0:3f:f5:5f:49:
                    78:aa:8c:72:de:b7:d6:48:ee:6b:37:90:bb:6c:9e:
                    6d:cb:48:9d:b4:70:cf:85:27:7c:97:91:87:c1:0b:
                    ee:00:a4:f2:17:ac:c4:91:73:fc:d3:71:d4:c4:3f:
                    48:07:24:54:b6:42:c0:37:49:6c:a6:17:a0:1c:ab:
                    65:4d:89:4b:e1:ca:2a:18:b5:b6:87:bd:5d:56:70:
                    b9:cc:90:98:2b:63:87:a2:a4:96:12:4a:0f:04:e7:
                    bb:59:c4:9d:5a:27:ef:db:75:92:4a:29:39:36:20:
                    86:15:d3:0b:24:14:1a:43:e9:2d:75:d1:38:70:80:
                    e6:f1:71:6a:a0:8e:16:b9:63:7f:60:24:db:91:09:
                    86:f3:5a:ea:87:c6:54:05:89:4c:0b:0b:4c:6d:e7:
                    da:0f:1f:37:ae:5b:da:cc:de:8a:a2:8e:7a:bf:e1:
                    45:9e:56:b2:72:bb:db:18:32:e7:01:3f:5e:07:ae:
                    bd:cf:29:05:1a:81:79:5e:36:f1:c8:51:4c:8d:b7:
                    57:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:95:D4:13:98:DA:02:CB:EC:78:ED:95:AD:ED:DF:A2:39:C0:E5:65
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231393a323235353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:219:2255::/80

    Signature Algorithm: sha256WithRSAEncryption
         23:64:53:d0:89:84:be:fc:87:c5:01:e7:03:ca:3a:43:e4:ae:
         b3:f3:74:f6:0f:3e:60:15:af:ac:7f:0f:df:73:86:8b:40:5d:
         14:28:5c:bb:ff:99:3b:e5:91:2a:fa:15:7f:ea:f1:30:60:6a:
         0e:c7:b9:e6:1b:28:31:cf:b6:b7:c8:07:ba:f2:96:da:89:18:
         cb:4c:fb:9e:53:35:4e:00:ff:7a:dc:dc:66:56:92:a6:55:32:
         57:08:d8:c4:b6:61:ce:a7:b0:99:6d:1a:43:9d:f5:47:72:8a:
         b2:31:ba:0e:bb:08:32:b5:6a:23:cf:13:2d:ef:72:f9:b5:1e:
         77:6a:14:2c:f7:51:9f:75:96:ac:d9:8d:77:c9:f3:a6:59:aa:
         32:d9:81:8c:07:0c:ac:7e:8f:fd:64:53:d8:37:2e:a7:8f:19:
         64:98:5c:dd:3c:26:6b:5a:41:d7:2b:36:68:e4:36:9d:86:ed:
         a1:55:bf:b5:3a:fd:91:9c:76:01:a1:3e:58:bd:31:c6:52:67:
         10:c5:77:1a:45:45:42:9f:26:f0:55:79:38:12:3d:be:29:31:
         17:14:8f:15:9d:87:8b:60:86:fd:1d:ce:98:01:5f:0a:f3:c7:
         a6:bf:b3:af:66:f3:bd:11:8c:66:e6:b3:cc:6a:a6:87:7a:e1:
         06:44:59:8d
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUCOx8bfMODSrQgLzMEPavvVtdq88wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjE5MjI1MDAxWhcNMjMwMjE4MjI1NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEM1MDZGRTAx
QzMyODM2M0UxMjYxM0I3MTFFMEMxRDY0QjlDRThGQjNCMDM5RDE2NDY4QkZCNzMz
RTM0NTVCM0Y1Rjc5MDE2NDUxRjAzMjgyQzZDM0Y3QjU4OTZGQzZDNEI2RDZENEQ4
NjE2RUUwM0ZGNTVGNDk3OEFBOEM3MkRFQjdENjQ4RUU2QjM3OTBCQjZDOUU2RENC
NDg5REI0NzBDRjg1Mjc3Qzk3OTE4N0MxMEJFRTAwQTRGMjE3QUNDNDkxNzNGQ0Qz
NzFENEM0M0Y0ODA3MjQ1NEI2NDJDMDM3NDk2Q0E2MTdBMDFDQUI2NTREODk0QkUx
Q0EyQTE4QjVCNjg3QkQ1RDU2NzBCOUNDOTA5ODJCNjM4N0EyQTQ5NjEyNEEwRjA0
RTdCQjU5QzQ5RDVBMjdFRkRCNzU5MjRBMjkzOTM2MjA4NjE1RDMwQjI0MTQxQTQz
RTkyRDc1RDEzODcwODBFNkYxNzE2QUEwOEUxNkI5NjM3RjYwMjREQjkxMDk4NkYz
NUFFQTg3QzY1NDA1ODk0QzBCMEI0QzZERTdEQTBGMUYzN0FFNUJEQUNDREU4QUEy
OEU3QUJGRTE0NTlFNTZCMjcyQkJEQjE4MzJFNzAxM0Y1RTA3QUVCRENGMjkwNTFB
ODE3OTVFMzZGMUM4NTE0QzhEQjc1NzVGMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMUG/gHDKDY+EmE7cR4MHWS5zo+zsDnRZGi/tzPj
RVs/X3kBZFHwMoLGw/e1iW/GxLbW1NhhbuA/9V9JeKqMct631kjuazeQu2yebctI
nbRwz4UnfJeRh8EL7gCk8hesxJFz/NNx1MQ/SAckVLZCwDdJbKYXoByrZU2JS+HK
Khi1toe9XVZwucyQmCtjh6KklhJKDwTnu1nEnVon79t1kkopOTYghhXTCyQUGkPp
LXXROHCA5vFxaqCOFrljf2Ak25EJhvNa6ofGVAWJTAsLTG3n2g8fN65b2szeiqKO
er/hRZ5WsnK72xgy5wE/Xgeuvc8pBRqBeV428chRTI23V18CAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQSldQTmNoCy+x47ZWt7d+iOcDlZTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMxMzkzYTMyMzIzNTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAhkiVTANBgkqhkiG
9w0BAQsFAAOCAQEAI2RT0ImEvvyHxQHnA8o6Q+Sus/N09g8+YBWvrH8P33OGi0Bd
FChcu/+ZO+WRKvoVf+rxMGBqDse55hsoMc+2t8gHuvKW2okYy0z7nlM1TgD/etzc
ZlaSplUyVwjYxLZhzqewmW0aQ531R3KKsjG6DrsIMrVqI88TLe9y+bUed2oULPdR
n3WWrNmNd8nzplmqMtmBjAcMrH6P/WRT2Dcup48ZZJhc3Twma1pB1ys2aOQ2nYbt
oVW/tTr9kZx2AaE+WL0xxlJnEMV3GkVFQp8m8FV5OBI9vikxFxSPFZ2Hi2CG/R3O
mAFfCvPHpr+zr2bzvRGMZuazzGqmh3rhBkRZjQ==
-----END CERTIFICATE-----