Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323231353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a323231353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          wmk804knesM5IK1TZQIscWnTxZWKLSDJSADkohqTbjA=
Subject key identifier:   45:6B:F8:D1:51:82:3F:D6:21:31:BA:56:0A:82:97:0C:9B:9F:6F:1F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2F7CA176E872D8E23B543C1A7628B7277419C233
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323231353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 22:15:01 +0000
ROA not before:           Sun 20 Feb 2022 22:10:01 +0000
ROA not after:            Sun 19 Feb 2023 22:15:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:2215::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7c:a1:76:e8:72:d8:e2:3b:54:3c:1a:76:28:b7:27:74:19:c2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 22:10:01 2022 GMT
            Not After : Feb 19 22:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:2f:1a:f8:c5:ad:76:11:ce:96:53:a5:0e:
                    43:a7:42:dc:0e:d7:15:29:40:08:a8:5c:0d:7a:f6:
                    3d:bd:83:e3:ad:a6:68:fb:58:c4:b7:b3:32:a9:8d:
                    d7:a2:cc:8b:5d:b0:c0:8f:03:54:ef:75:3e:ba:c0:
                    c7:f1:21:94:3d:de:67:27:33:ac:39:c2:34:1a:ed:
                    d5:66:5f:82:da:88:4a:3b:1e:98:bc:a9:12:03:51:
                    dc:93:62:d9:95:91:83:31:65:5f:69:3f:05:ee:ee:
                    be:47:f8:fc:e4:e3:9a:53:cd:d6:07:b6:ce:a1:da:
                    81:ab:8d:e8:25:01:40:2a:1a:f9:91:da:a9:60:46:
                    f8:65:8b:d0:ef:23:5a:3d:36:fe:6e:84:47:fe:d8:
                    8b:7a:ef:f2:e9:80:97:28:6d:70:1b:15:1c:58:6e:
                    4f:93:ef:8f:02:5c:9e:d0:1a:84:2b:c0:16:60:47:
                    61:da:30:69:d0:6a:36:a7:d4:dd:d7:0a:cb:18:7f:
                    45:80:67:41:fe:be:3d:ee:47:f7:a9:46:27:e4:ad:
                    d4:a6:b5:8f:19:a2:88:dc:55:98:f4:94:3c:cc:96:
                    e1:39:3d:fc:3f:88:e0:21:08:a1:9f:95:05:89:91:
                    9e:2e:d8:c6:77:fb:ce:17:e3:54:e4:48:6c:e3:03:
                    e2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6B:F8:D1:51:82:3F:D6:21:31:BA:56:0A:82:97:0C:9B:9F:6F:1F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a323231353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:2215::/80

    Signature Algorithm: sha256WithRSAEncryption
         29:a9:ae:de:0a:0b:92:15:ab:c4:6f:bd:43:01:a4:a2:97:23:
         ba:27:a7:13:db:77:ac:59:2e:ce:15:03:af:88:85:62:78:66:
         1f:9b:e6:82:aa:0b:8c:11:df:55:fb:f3:9f:5d:3a:1e:a3:f3:
         ff:49:56:79:fa:bd:93:b2:a8:19:f9:3a:e4:bd:45:3f:b0:2e:
         57:a7:30:11:c5:73:b8:54:85:7a:ba:1b:07:7f:aa:ad:e6:b5:
         a2:13:ed:b2:ca:6d:2e:5c:a5:5a:a0:d8:1b:bb:33:99:f6:20:
         e7:ea:31:69:be:3a:30:9b:39:fb:dd:56:b0:c2:12:2c:a7:6b:
         bf:4e:90:f7:9d:00:94:c0:83:a1:02:d6:0e:48:14:ed:ea:ec:
         96:7b:ba:ce:3e:6b:f2:69:62:53:c9:3a:d5:e3:14:e6:5d:b2:
         3e:17:91:95:cf:ae:ff:3e:d7:f3:3e:81:e0:cd:d8:db:da:c9:
         7e:63:49:02:68:fa:c8:7a:45:54:2e:41:47:5e:17:16:fe:98:
         04:c8:6d:db:c2:20:7f:2e:47:99:12:5b:01:69:a1:39:bb:19:
         9a:4c:7c:7e:77:8f:68:19:86:cb:05:03:8a:e5:34:ce:82:bb:
         0a:21:03:00:a9:fc:2e:65:f7:1c:fc:57:79:06:22:30:05:0f:
         51:1e:3e:76
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUL3yhduhy2OI7VDwadii3J3QZwjMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjIwMjIxMDAxWhcNMjMwMjE5MjIxNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEU0QzMyRjFB
RjhDNUFENzYxMUNFOTY1M0E1MEU0M0E3NDJEQzBFRDcxNTI5NDAwOEE4NUMwRDdB
RjYzREJEODNFM0FEQTY2OEZCNThDNEI3QjMzMkE5OEREN0EyQ0M4QjVEQjBDMDhG
MDM1NEVGNzUzRUJBQzBDN0YxMjE5NDNEREU2NzI3MzNBQzM5QzIzNDFBRURENTY2
NUY4MkRBODg0QTNCMUU5OEJDQTkxMjAzNTFEQzkzNjJEOTk1OTE4MzMxNjU1RjY5
M0YwNUVFRUVCRTQ3RjhGQ0U0RTM5QTUzQ0RENjA3QjZDRUExREE4MUFCOERFODI1
MDE0MDJBMUFGOTkxREFBOTYwNDZGODY1OEJEMEVGMjM1QTNEMzZGRTZFODQ0N0ZF
RDg4QjdBRUZGMkU5ODA5NzI4NkQ3MDFCMTUxQzU4NkU0RjkzRUY4RjAyNUM5RUQw
MUE4NDJCQzAxNjYwNDc2MURBMzA2OUQwNkEzNkE3RDREREQ3MEFDQjE4N0Y0NTgw
Njc0MUZFQkUzREVFNDdGN0E5NDYyN0U0QURENEE2QjU4RjE5QTI4OERDNTU5OEY0
OTQzQ0NDOTZFMTM5M0RGQzNGODhFMDIxMDhBMTlGOTUwNTg5OTE5RTJFRDhDNjc3
RkJDRTE3RTM1NEU0NDg2Q0UzMDNFMjVGMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOTDLxr4xa12Ec6WU6UOQ6dC3A7XFSlACKhcDXr2
Pb2D462maPtYxLezMqmN16LMi12wwI8DVO91PrrAx/EhlD3eZyczrDnCNBrt1WZf
gtqISjsemLypEgNR3JNi2ZWRgzFlX2k/Be7uvkf4/OTjmlPN1ge2zqHagauN6CUB
QCoa+ZHaqWBG+GWL0O8jWj02/m6ER/7Yi3rv8umAlyhtcBsVHFhuT5PvjwJcntAa
hCvAFmBHYdowadBqNqfU3dcKyxh/RYBnQf6+Pe5H96lGJ+St1Ka1jxmiiNxVmPSU
PMyW4Tk9/D+I4CEIoZ+VBYmRni7Yxnf7zhfjVORIbOMD4l8CAwEAAaOCApwwggKY
MB0GA1UdDgQWBBRFa/jRUYI/1iExulYKgpcMm59vHzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMyMzAzYTMyMzIzMTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAiAiFTANBgkqhkiG
9w0BAQsFAAOCAQEAKamu3goLkhWrxG+9QwGkopcjuienE9t3rFkuzhUDr4iFYnhm
H5vmgqoLjBHfVfvzn106HqPz/0lWefq9k7KoGfk65L1FP7AuV6cwEcVzuFSFerob
B3+qrea1ohPtssptLlylWqDYG7szmfYg5+oxab46MJs5+91WsMISLKdrv06Q950A
lMCDoQLWDkgU7erslnu6zj5r8mliU8k61eMU5l2yPheRlc+u/z7X8z6B4M3Y29rJ
fmNJAmj6yHpFVC5BR14XFv6YBMht28Igfy5HmRJbAWmhObsZmkx8fnePaBmGywUD
iuU0zoK7CiEDAKn8LmX3HPxXeQYiMAUPUR4+dg==
-----END CERTIFICATE-----