Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3632353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3632353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          rmLhFJl4s4NRLpLrd5OngnbeY3bR0q8B2uwoTDICHq4=
Subject key identifier:   D0:36:2C:F5:C5:4D:B7:41:38:91:FF:05:40:DD:F9:47:6B:1D:AE:EC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       52E080D072DF6BB9963009C019902FF81C8CD8B0
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3632353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 06:25:02 +0000
ROA not before:           Sun 20 Feb 2022 06:20:02 +0000
ROA not after:            Sun 19 Feb 2023 06:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:625::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e0:80:d0:72:df:6b:b9:96:30:09:c0:19:90:2f:f8:1c:8c:d8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 06:20:02 2022 GMT
            Not After : Feb 19 06:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:61:c7:65:dd:f3:b4:f2:50:b3:92:37:72:
                    40:dd:08:d6:94:39:ad:92:f4:28:13:c4:4b:5b:e8:
                    29:b0:a5:8f:69:a7:73:1e:aa:9f:13:76:98:bb:91:
                    32:d7:e7:b1:4e:d8:bf:ab:a5:d2:0d:8b:44:d4:6c:
                    cc:d2:17:6a:d6:0e:a8:5e:dd:7b:e3:da:52:29:d2:
                    74:2f:f3:e8:45:83:c9:e5:7b:6b:d6:24:c3:c4:d2:
                    f4:e0:17:d5:37:7f:a1:02:1e:38:5d:b6:8a:53:1b:
                    65:9c:1d:cd:37:a4:82:8b:91:c7:28:c5:04:eb:12:
                    60:0f:0b:41:1b:0b:1e:81:2d:3d:08:ac:1e:e1:2d:
                    b5:15:46:8a:6d:94:fc:62:a0:fa:f3:18:07:db:01:
                    af:c9:72:cb:52:ca:92:c7:ef:1b:b3:c4:36:05:f6:
                    60:bb:75:6e:f1:26:57:9c:49:5c:ff:f3:41:58:5a:
                    51:c5:60:55:e2:d2:df:eb:bd:13:c3:c3:fd:10:fe:
                    ec:f4:7c:e6:4d:ca:02:94:91:0a:4e:0e:b9:a1:10:
                    54:3d:16:6e:ea:65:db:7c:f3:45:80:1d:1c:d8:c9:
                    d7:0c:8a:2b:42:76:7d:00:a7:cb:af:e0:8e:7b:81:
                    b2:19:0b:c0:86:03:42:89:4c:14:7e:96:ee:83:62:
                    b8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:2C:F5:C5:4D:B7:41:38:91:FF:05:40:DD:F9:47:6B:1D:AE:EC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3632353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:625::/80

    Signature Algorithm: sha256WithRSAEncryption
         af:49:81:cf:cc:37:f1:0e:08:f9:43:f2:9a:7c:4c:f7:91:76:
         f0:55:15:3a:9c:5e:29:82:e2:3d:ef:ea:cc:56:16:5a:45:af:
         a4:a5:2a:dc:41:de:8e:ba:79:64:a3:d8:62:dc:f6:30:67:6a:
         64:22:66:79:e9:7c:e9:dc:ca:ca:e4:5b:54:fb:2e:a8:e5:46:
         21:2d:fc:b5:07:d4:ed:68:e4:64:de:7d:5a:1d:60:b6:61:cc:
         b8:3b:11:b4:2b:68:23:63:cc:b2:57:5e:f0:54:30:0e:9a:88:
         4b:f6:18:17:39:34:11:a1:25:49:bb:82:e2:22:95:66:9e:a9:
         66:97:cf:dc:85:88:51:d5:50:19:0e:11:bd:22:96:e4:90:cd:
         5e:02:fb:9f:a5:c6:d2:22:b5:b1:19:51:7a:bd:c3:fc:13:eb:
         21:33:1b:9a:e7:ae:3e:97:b8:d3:6a:db:fd:9f:15:bb:33:36:
         ed:ef:e6:ac:8d:6e:a3:d5:77:d6:4a:fa:c2:97:96:9c:16:1a:
         9b:0d:a1:63:52:40:62:22:70:e3:ff:02:99:0b:02:e9:90:21:
         6f:15:6b:c2:c4:e9:6c:e7:df:77:1f:55:8b:5c:c8:3c:a4:64:
         b1:20:23:a2:c4:6b:09:61:5b:ec:18:f7:b6:60:33:b3:b9:c0:
         75:e1:ee:15
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUUuCA0HLfa7mWMAnAGZAv+ByM2LAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjIwMDYyMDAyWhcNMjMwMjE5MDYyNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEU3M0Q2MUM3
NjVEREYzQjRGMjUwQjM5MjM3NzI0MEREMDhENjk0MzlBRDkyRjQyODEzQzQ0QjVC
RTgyOUIwQTU4RjY5QTc3MzFFQUE5RjEzNzY5OEJCOTEzMkQ3RTdCMTRFRDhCRkFC
QTVEMjBEOEI0NEQ0NkNDQ0QyMTc2QUQ2MEVBODVFREQ3QkUzREE1MjI5RDI3NDJG
RjNFODQ1ODNDOUU1N0I2QkQ2MjRDM0M0RDJGNEUwMTdENTM3N0ZBMTAyMUUzODVE
QjY4QTUzMUI2NTlDMURDRDM3QTQ4MjhCOTFDNzI4QzUwNEVCMTI2MDBGMEI0MTFC
MEIxRTgxMkQzRDA4QUMxRUUxMkRCNTE1NDY4QTZEOTRGQzYyQTBGQUYzMTgwN0RC
MDFBRkM5NzJDQjUyQ0E5MkM3RUYxQkIzQzQzNjA1RjY2MEJCNzU2RUYxMjY1NzlD
NDk1Q0ZGRjM0MTU4NUE1MUM1NjA1NUUyRDJERkVCQkQxM0MzQzNGRDEwRkVFQ0Y0
N0NFNjREQ0EwMjk0OTEwQTRFMEVCOUExMTA1NDNEMTY2RUVBNjVEQjdDRjM0NTgw
MUQxQ0Q4QzlENzBDOEEyQjQyNzY3RDAwQTdDQkFGRTA4RTdCODFCMjE5MEJDMDg2
MDM0Mjg5NEMxNDdFOTZFRTgzNjJCOEFGMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOc9Ycdl3fO08lCzkjdyQN0I1pQ5rZL0KBPES1vo
KbClj2mncx6qnxN2mLuRMtfnsU7Yv6ul0g2LRNRszNIXatYOqF7de+PaUinSdC/z
6EWDyeV7a9Ykw8TS9OAX1Td/oQIeOF22ilMbZZwdzTekgouRxyjFBOsSYA8LQRsL
HoEtPQisHuEttRVGim2U/GKg+vMYB9sBr8lyy1LKksfvG7PENgX2YLt1bvEmV5xJ
XP/zQVhaUcVgVeLS3+u9E8PD/RD+7PR85k3KApSRCk4OuaEQVD0Wbupl23zzRYAd
HNjJ1wyKK0J2fQCny6/gjnuBshkLwIYDQolMFH6W7oNiuK8CAwEAAaOCApowggKW
MB0GA1UdDgQWBBTQNiz1xU23QTiR/wVA3flHax2u7DAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMyMzAzYTM2MzIzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIgBiUwDQYJKoZIhvcN
AQELBQADggEBAK9Jgc/MN/EOCPlD8pp8TPeRdvBVFTqcXimC4j3v6sxWFlpFr6Sl
KtxB3o66eWSj2GLc9jBnamQiZnnpfOncysrkW1T7LqjlRiEt/LUH1O1o5GTefVod
YLZhzLg7EbQraCNjzLJXXvBUMA6aiEv2GBc5NBGhJUm7guIilWaeqWaXz9yFiFHV
UBkOEb0iluSQzV4C+5+lxtIitbEZUXq9w/wT6yEzG5rnrj6XuNNq2/2fFbszNu3v
5qyNbqPVd9ZK+sKXlpwWGpsNoWNSQGIicOP/ApkLAumQIW8Va8LE6Wzn33cfVYtc
yDykZLEgI6LEawlhW+wY97ZgM7O5wHXh7hU=
-----END CERTIFICATE-----