Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3733353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3232303a3733353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          gMWjFLqqeQ4CFaZq2Z+mIe6jgrdEr2n0R+aSDjFaQ6w=
Subject key identifier:   10:6A:A2:81:48:3F:3E:E3:A2:50:BA:B3:3E:69:0C:B7:5B:80:E0:1D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       710B18290A286172B6E287BD052DF01A471D4BE1
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3733353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 20 Feb 2022 07:35:02 +0000
ROA not before:           Sun 20 Feb 2022 07:30:02 +0000
ROA not after:            Sun 19 Feb 2023 07:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:220:735::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0b:18:29:0a:28:61:72:b6:e2:87:bd:05:2d:f0:1a:47:1d:4b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 20 07:30:02 2022 GMT
            Not After : Feb 19 07:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:f9:19:95:17:0d:35:45:2d:98:44:f3:77:
                    55:b0:36:4d:5c:3f:81:ab:b2:49:16:8f:1e:2e:1a:
                    e5:4b:9e:19:2a:8b:60:91:fa:f9:2b:69:23:db:a5:
                    a2:9d:b2:25:7f:a4:c6:2a:ff:a7:a5:5e:95:44:26:
                    28:92:16:a5:45:10:96:39:4c:8b:09:f4:8e:08:5e:
                    8b:5a:b0:ed:6f:de:21:dd:44:8d:31:44:c7:6f:d7:
                    16:7d:7d:b5:0e:df:2b:39:af:26:d9:f1:14:f3:0b:
                    bd:94:08:b3:1d:7b:6a:93:4e:16:c1:82:57:b1:68:
                    f5:ca:a4:db:bf:85:f3:03:5c:2b:0d:5c:7c:07:8f:
                    e7:77:72:e6:db:f6:40:a6:ec:05:9b:58:b6:6b:74:
                    c9:3a:d4:95:5c:43:57:58:4c:ff:89:8f:e2:df:97:
                    bd:1a:7b:3e:eb:7b:52:29:1b:5b:be:2d:cd:77:5f:
                    ec:05:56:7c:8c:51:dd:cd:69:52:98:07:0e:b4:3d:
                    89:5a:91:fc:b0:51:a0:3d:24:ba:0f:70:59:33:ea:
                    66:06:23:0d:46:3d:e2:6f:6f:d5:e1:94:65:b3:69:
                    bf:ad:4b:fd:96:2a:c9:fe:89:18:57:31:e8:6e:2c:
                    06:94:7a:70:01:33:83:f7:bd:77:46:31:e7:aa:fb:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6A:A2:81:48:3F:3E:E3:A2:50:BA:B3:3E:69:0C:B7:5B:80:E0:1D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3232303a3733353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:220:735::/80

    Signature Algorithm: sha256WithRSAEncryption
         21:1a:ec:2c:e1:a5:84:fe:87:d9:8c:5e:81:10:06:82:6a:d3:
         12:18:34:3d:9c:72:41:bb:ff:02:2b:5f:9f:21:6d:84:0a:97:
         c6:76:84:e1:6e:9e:45:ae:9e:20:f5:55:1f:1f:a7:52:0e:6d:
         e5:3c:14:7d:c4:d7:b0:68:0b:8c:48:cd:79:86:8b:3b:d6:3c:
         5a:c0:8a:af:7f:bd:7c:b4:fd:30:fa:ca:ba:20:7c:47:98:b6:
         57:13:42:cc:6a:98:d0:71:29:df:16:42:77:8e:2a:a9:e4:5b:
         ef:9e:69:b5:1f:c0:2b:35:bf:5c:da:0a:d5:e6:2c:3c:00:d4:
         c4:a7:85:3b:92:6d:c4:7e:df:52:80:4b:50:de:f1:42:de:e9:
         34:44:f5:aa:f1:b5:cf:83:e5:d1:81:e1:9b:f2:d1:54:1f:9e:
         6e:f1:2d:bc:01:d9:ae:ec:17:89:d2:2e:65:1d:da:51:73:99:
         e2:ff:cf:15:56:69:f3:33:fa:af:f4:3d:02:be:a4:9e:de:88:
         69:06:c2:fe:06:17:5d:8c:74:d0:b2:ac:10:da:fe:07:38:52:
         11:bf:db:e8:ec:98:a5:db:b1:af:2a:ef:39:60:77:8b:64:17:
         b3:81:57:24:ef:6b:b5:2a:39:8f:2f:d6:ee:0a:bd:ce:4d:5a:
         c6:50:69:74
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUcQsYKQooYXK24oe9BS3wGkcdS+EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjIwMDczMDAyWhcNMjMwMjE5MDczNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI4QzhGOTE5
OTUxNzBEMzU0NTJEOTg0NEYzNzc1NUIwMzY0RDVDM0Y4MUFCQjI0OTE2OEYxRTJF
MUFFNTRCOUUxOTJBOEI2MDkxRkFGOTJCNjkyM0RCQTVBMjlEQjIyNTdGQTRDNjJB
RkZBN0E1NUU5NTQ0MjYyODkyMTZBNTQ1MTA5NjM5NEM4QjA5RjQ4RTA4NUU4QjVB
QjBFRDZGREUyMURENDQ4RDMxNDRDNzZGRDcxNjdEN0RCNTBFREYyQjM5QUYyNkQ5
RjExNEYzMEJCRDk0MDhCMzFEN0I2QTkzNEUxNkMxODI1N0IxNjhGNUNBQTREQkJG
ODVGMzAzNUMyQjBENUM3QzA3OEZFNzc3NzJFNkRCRjY0MEE2RUMwNTlCNThCNjZC
NzRDOTNBRDQ5NTVDNDM1NzU4NENGRjg5OEZFMkRGOTdCRDFBN0IzRUVCN0I1MjI5
MUI1QkJFMkRDRDc3NUZFQzA1NTY3QzhDNTFERENENjk1Mjk4MDcwRUI0M0Q4OTVB
OTFGQ0IwNTFBMDNEMjRCQTBGNzA1OTMzRUE2NjA2MjMwRDQ2M0RFMjZGNkZENUUx
OTQ2NUIzNjlCRkFENEJGRDk2MkFDOUZFODkxODU3MzFFODZFMkMwNjk0N0E3MDAx
MzM4M0Y3QkQ3NzQ2MzFFN0FBRkI0ODIzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALjI+RmVFw01RS2YRPN3VbA2TVw/gauySRaPHi4a
5UueGSqLYJH6+StpI9ulop2yJX+kxir/p6VelUQmKJIWpUUQljlMiwn0jghei1qw
7W/eId1EjTFEx2/XFn19tQ7fKzmvJtnxFPMLvZQIsx17apNOFsGCV7Fo9cqk27+F
8wNcKw1cfAeP53dy5tv2QKbsBZtYtmt0yTrUlVxDV1hM/4mP4t+XvRp7Put7Uikb
W74tzXdf7AVWfIxR3c1pUpgHDrQ9iVqR/LBRoD0kug9wWTPqZgYjDUY94m9v1eGU
ZbNpv61L/ZYqyf6JGFcx6G4sBpR6cAEzg/e9d0Yx56r7SCMCAwEAAaOCApowggKW
MB0GA1UdDgQWBBQQaqKBSD8+46JQurM+aQy3W4DgHTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMyMzAzYTM3MzMzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIgBzUwDQYJKoZIhvcN
AQELBQADggEBACEa7CzhpYT+h9mMXoEQBoJq0xIYND2cckG7/wIrX58hbYQKl8Z2
hOFunkWuniD1VR8fp1IObeU8FH3E17BoC4xIzXmGizvWPFrAiq9/vXy0/TD6yrog
fEeYtlcTQsxqmNBxKd8WQneOKqnkW++eabUfwCs1v1zaCtXmLDwA1MSnhTuSbcR+
31KAS1De8ULe6TRE9arxtc+D5dGB4Zvy0VQfnm7xLbwB2a7sF4nSLmUd2lFzmeL/
zxVWafMz+q/0PQK+pJ7eiGkGwv4GF12MdNCyrBDa/gc4UhG/2+jsmKXbsa8q7zlg
d4tkF7OBVyTva7UqOY8v1u4Kvc5NWsZQaXQ=
-----END CERTIFICATE-----