Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313133353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a313133353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          bFtuUZAR/FNLOnSfgS0hxZ35uriHwtkVwKiP1XpfTho=
Subject key identifier:   5B:D4:D0:80:59:BC:0F:36:DA:24:03:4D:B1:CC:16:B9:09:7D:91:C0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       446FB8043FD9FA8A9A83802D4157065891FCEBA7
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313133353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 11:35:02 +0000
ROA not before:           Sun 20 Feb 2022 11:30:02 +0000
ROA not after:            Sun 19 Feb 2023 11:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:1135::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6f:b8:04:3f:d9:fa:8a:9a:83:80:2d:41:57:06:58:91:fc:eb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 11:30:02 2022 GMT
            Not After : Feb 19 11:35:02 2023 GMT
        Subject: CN=3082010A0282010100C1DE397DE9B59384DD837AF113C74BA281BFE6ED655BAD85C681E4437608D7BC5D8D819B9AEC6B18C32C2699BC326C3D9B517D73D1769CFF282CE4C1500964915240C21C0F63FF841674198C5697D8832CCD3F21F8596BEEEA09434D5CC02075D11FF2E8E6E151D1FC64FB064FCEEE2FAC9A672C71CAE92D37FC98B3B3FD5A6E55ABA357A59DBCF26F666FA1812F7375D8E2804F65009E63D24A80B4E483FA7F2775BDDC1F3E9951EE2BEDAFDB9D310F28E88577FE7B20BB98C28802EA98682FF2AF6E20FFFA444132E18F57808D9D1DC0BCD09421EB381AF7B514798A73982BCBB34000716290D27D4B56EDBBCCCAF1FF29C88651DF7E148A6F5553909508ED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:39:7d:e9:b5:93:84:dd:83:7a:f1:13:c7:
                    4b:a2:81:bf:e6:ed:65:5b:ad:85:c6:81:e4:43:76:
                    08:d7:bc:5d:8d:81:9b:9a:ec:6b:18:c3:2c:26:99:
                    bc:32:6c:3d:9b:51:7d:73:d1:76:9c:ff:28:2c:e4:
                    c1:50:09:64:91:52:40:c2:1c:0f:63:ff:84:16:74:
                    19:8c:56:97:d8:83:2c:cd:3f:21:f8:59:6b:ee:ea:
                    09:43:4d:5c:c0:20:75:d1:1f:f2:e8:e6:e1:51:d1:
                    fc:64:fb:06:4f:ce:ee:2f:ac:9a:67:2c:71:ca:e9:
                    2d:37:fc:98:b3:b3:fd:5a:6e:55:ab:a3:57:a5:9d:
                    bc:f2:6f:66:6f:a1:81:2f:73:75:d8:e2:80:4f:65:
                    00:9e:63:d2:4a:80:b4:e4:83:fa:7f:27:75:bd:dc:
                    1f:3e:99:51:ee:2b:ed:af:db:9d:31:0f:28:e8:85:
                    77:fe:7b:20:bb:98:c2:88:02:ea:98:68:2f:f2:af:
                    6e:20:ff:fa:44:41:32:e1:8f:57:80:8d:9d:1d:c0:
                    bc:d0:94:21:eb:38:1a:f7:b5:14:79:8a:73:98:2b:
                    cb:b3:40:00:71:62:90:d2:7d:4b:56:ed:bb:cc:ca:
                    f1:ff:29:c8:86:51:df:7e:14:8a:6f:55:53:90:95:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:D0:80:59:BC:0F:36:DA:24:03:4D:B1:CC:16:B9:09:7D:91:C0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a313133353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:1135::/80

    Signature Algorithm: sha256WithRSAEncryption
         3b:f0:a4:2a:2a:b6:14:07:2b:3f:eb:52:e4:40:87:b3:b1:e1:
         04:f1:25:10:11:94:40:fb:71:bf:4e:ef:77:ba:ea:20:5f:e5:
         d6:d2:01:ce:a3:98:29:2e:ce:21:49:75:58:f8:8c:10:0d:23:
         08:39:89:72:bc:57:23:96:c4:dc:20:88:f7:93:71:17:07:a0:
         31:eb:ab:57:d5:22:18:12:95:69:16:68:01:7a:47:6f:41:ed:
         a0:cc:c4:86:15:66:7d:bf:39:ee:52:7e:a3:c5:8e:1f:ae:6e:
         3d:39:5a:a7:f7:44:e3:92:a3:30:56:16:09:4f:84:fd:96:d4:
         f1:4e:91:f7:07:bc:92:b5:ef:59:b2:94:d5:31:95:17:ef:ee:
         7c:40:b3:c3:53:fa:9c:cd:97:42:51:98:9a:87:d8:0c:82:85:
         31:23:2a:90:5d:54:70:e2:52:09:26:f1:b2:43:13:f1:0a:e9:
         85:d3:e6:e6:19:22:0f:86:c1:34:15:ee:ec:ac:f5:de:10:ac:
         e6:dd:2a:fb:99:b9:33:b9:66:a3:69:73:f2:69:9a:64:36:9c:
         0e:f1:bf:94:29:0a:bd:27:b9:fa:73:b1:c9:7f:af:9f:e3:49:
         5e:3d:91:45:b6:67:59:b7:f9:32:b1:51:2c:1b:48:61:30:31:
         8c:fa:bf:26
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIURG+4BD/Z+oqag4AtQVcGWJH866cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjIwMTEzMDAyWhcNMjMwMjE5MTEzNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEMxREUzOTdE
RTlCNTkzODRERDgzN0FGMTEzQzc0QkEyODFCRkU2RUQ2NTVCQUQ4NUM2ODFFNDQz
NzYwOEQ3QkM1RDhEODE5QjlBRUM2QjE4QzMyQzI2OTlCQzMyNkMzRDlCNTE3RDcz
RDE3NjlDRkYyODJDRTRDMTUwMDk2NDkxNTI0MEMyMUMwRjYzRkY4NDE2NzQxOThD
NTY5N0Q4ODMyQ0NEM0YyMUY4NTk2QkVFRUEwOTQzNEQ1Q0MwMjA3NUQxMUZGMkU4
RTZFMTUxRDFGQzY0RkIwNjRGQ0VFRTJGQUM5QTY3MkM3MUNBRTkyRDM3RkM5OEIz
QjNGRDVBNkU1NUFCQTM1N0E1OURCQ0YyNkY2NjZGQTE4MTJGNzM3NUQ4RTI4MDRG
NjUwMDlFNjNEMjRBODBCNEU0ODNGQTdGMjc3NUJEREMxRjNFOTk1MUVFMkJFREFG
REI5RDMxMEYyOEU4ODU3N0ZFN0IyMEJCOThDMjg4MDJFQTk4NjgyRkYyQUY2RTIw
RkZGQTQ0NDEzMkUxOEY1NzgwOEQ5RDFEQzBCQ0QwOTQyMUVCMzgxQUY3QjUxNDc5
OEE3Mzk4MkJDQkIzNDAwMDcxNjI5MEQyN0Q0QjU2RURCQkNDQ0FGMUZGMjlDODg2
NTFERjdFMTQ4QTZGNTU1MzkwOTUwOEVEMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMHeOX3ptZOE3YN68RPHS6KBv+btZVuthcaB5EN2
CNe8XY2Bm5rsaxjDLCaZvDJsPZtRfXPRdpz/KCzkwVAJZJFSQMIcD2P/hBZ0GYxW
l9iDLM0/IfhZa+7qCUNNXMAgddEf8ujm4VHR/GT7Bk/O7i+smmcsccrpLTf8mLOz
/VpuVaujV6WdvPJvZm+hgS9zddjigE9lAJ5j0kqAtOSD+n8ndb3cHz6ZUe4r7a/b
nTEPKOiFd/57ILuYwogC6phoL/KvbiD/+kRBMuGPV4CNnR3AvNCUIes4Gve1FHmK
c5gry7NAAHFikNJ9S1btu8zK8f8pyIZR334Uim9VU5CVCO0CAwEAAaOCApwwggKY
MB0GA1UdDgQWBBRb1NCAWbwPNtokA02xzBa5CX2RwDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMyMzAzYTMxMzEzMzM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAiARNTANBgkqhkiG
9w0BAQsFAAOCAQEAO/CkKiq2FAcrP+tS5ECHs7HhBPElEBGUQPtxv07vd7rqIF/l
1tIBzqOYKS7OIUl1WPiMEA0jCDmJcrxXI5bE3CCI95NxFwegMeurV9UiGBKVaRZo
AXpHb0HtoMzEhhVmfb857lJ+o8WOH65uPTlap/dE45KjMFYWCU+E/ZbU8U6R9we8
krXvWbKU1TGVF+/ufECzw1P6nM2XQlGYmofYDIKFMSMqkF1UcOJSCSbxskMT8Qrp
hdPm5hkiD4bBNBXu7Kz13hCs5t0q+5m5M7lmo2lz8mmaZDacDvG/lCkKvSe5+nOx
yX+vn+NJXj2RRbZnWbf5MrFRLBtIYTAxjPq/Jg==
-----END CERTIFICATE-----