Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a346134303a3a2f33322d3332203d3e203534373238.roa
File:                     323630363a346134303a3a2f33322d3332203d3e203534373238.roa (raw, json)
Hash identifier:          YEaPohslsNMFksfxdUVgVUeTaMbtfI26+1bjddocWk4=
Subject key identifier:   29:EE:21:3F:C4:C6:72:D1:00:AC:10:FA:86:36:AF:D3:11:BD:FE:8E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7176157BC4D41B6B672AC972F2CEA24A006C2672
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a346134303a3a2f33322d3332203d3e203534373238.roa
Signing time:             Mon 25 Oct 2021 22:26:04 +0000
ROA not before:           Mon 25 Oct 2021 22:21:04 +0000
ROA not after:            Mon 24 Oct 2022 22:26:04 +0000
asID:                     54728
IP address blocks:        2606:4a40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:76:15:7b:c4:d4:1b:6b:67:2a:c9:72:f2:ce:a2:4a:00:6c:26:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Oct 25 22:21:04 2021 GMT
            Not After : Oct 24 22:26:04 2022 GMT
        Subject: CN=3082010A0282010100ED7680AE4B7FDA6DD5AF3168F007E9ABDF6EEF472BE2B9950591408D89097D51433590B89DCCB288F8504A5BF9CB1CA0A0246B070A32A5E61B806AEE40CEF34BA93AD24EAD7394104D7416AFE1CA0F835D4BC5FC9E3F97925636F437ADD2FF01D63495EEA824FEF3BA2AD863FCF8799D878E8489BC5CEBC767B1AF45808CE989E8DD1054410C7EF13B24C75765DB70F3F617F64F93370B67291725137EB5F76E2EC84A86C9DFBE109F1D24F23DDB4980F5DE58C0E114A0046B30AE560EE8149C1C006F15F10E681B46A747E335E5B3E895EA143AEC57751419E2933E4A96867C653E55AE5C529DD820B80DBD6A37C6B82697005DD24808E10C94A360A973793F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:76:80:ae:4b:7f:da:6d:d5:af:31:68:f0:07:
                    e9:ab:df:6e:ef:47:2b:e2:b9:95:05:91:40:8d:89:
                    09:7d:51:43:35:90:b8:9d:cc:b2:88:f8:50:4a:5b:
                    f9:cb:1c:a0:a0:24:6b:07:0a:32:a5:e6:1b:80:6a:
                    ee:40:ce:f3:4b:a9:3a:d2:4e:ad:73:94:10:4d:74:
                    16:af:e1:ca:0f:83:5d:4b:c5:fc:9e:3f:97:92:56:
                    36:f4:37:ad:d2:ff:01:d6:34:95:ee:a8:24:fe:f3:
                    ba:2a:d8:63:fc:f8:79:9d:87:8e:84:89:bc:5c:eb:
                    c7:67:b1:af:45:80:8c:e9:89:e8:dd:10:54:41:0c:
                    7e:f1:3b:24:c7:57:65:db:70:f3:f6:17:f6:4f:93:
                    37:0b:67:29:17:25:13:7e:b5:f7:6e:2e:c8:4a:86:
                    c9:df:be:10:9f:1d:24:f2:3d:db:49:80:f5:de:58:
                    c0:e1:14:a0:04:6b:30:ae:56:0e:e8:14:9c:1c:00:
                    6f:15:f1:0e:68:1b:46:a7:47:e3:35:e5:b3:e8:95:
                    ea:14:3a:ec:57:75:14:19:e2:93:3e:4a:96:86:7c:
                    65:3e:55:ae:5c:52:9d:d8:20:b8:0d:bd:6a:37:c6:
                    b8:26:97:00:5d:d2:48:08:e1:0c:94:a3:60:a9:73:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:21:3F:C4:C6:72:D1:00:AC:10:FA:86:36:AF:D3:11:BD:FE:8E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a346134303a3a2f33322d3332203d3e203534373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:7f:d6:f7:82:bd:b1:91:06:d1:e9:e9:96:e9:72:ef:1a:
         36:a4:de:f7:e1:17:e7:8c:d6:50:e1:56:e0:ca:56:37:36:e1:
         67:dd:1c:dd:a6:ea:45:2e:8a:b5:ae:c4:d4:63:66:7d:5b:4a:
         0d:ec:ef:25:b8:ff:f7:1f:54:b9:e4:1c:37:7a:48:e3:24:35:
         72:f7:60:64:30:6d:0e:b8:03:7a:4a:30:d7:d4:86:32:1c:4b:
         7e:3c:ab:8d:d1:08:2b:1b:70:10:50:c7:12:1f:c6:20:2d:e2:
         ad:7b:cd:96:ef:24:97:61:8f:14:0f:72:f2:97:7e:6d:9e:3e:
         d3:72:55:b4:0d:d6:20:f9:fe:6b:bd:36:32:6f:3b:b2:e2:8e:
         2d:4f:0b:c2:0c:2a:e7:d6:05:cf:2c:03:c8:82:67:0e:fd:e5:
         40:65:17:77:9a:84:38:dd:53:1e:78:42:39:c6:41:58:ae:38:
         3e:b8:90:c0:1f:5c:25:61:59:b5:9e:c8:7d:da:02:dc:85:96:
         b2:5a:f6:2c:b1:33:f7:d6:16:6b:2d:91:c3:a7:a7:b4:1d:40:
         da:ec:4f:d5:88:6a:c8:50:70:0b:64:46:b6:b5:36:8a:36:09:
         4f:13:1d:ce:a5:54:7d:fd:35:e1:02:a2:2b:06:58:bd:0c:83:
         54:58:05:d1
-----BEGIN CERTIFICATE-----
MIIHcDCCBligAwIBAgIUcXYVe8TUG2tnKsly8s6iSgBsJnIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjExMDI1MjIyMTA0WhcNMjIxMDI0MjIyNjA0
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEVENzY4MEFF
NEI3RkRBNkRENUFGMzE2OEYwMDdFOUFCREY2RUVGNDcyQkUyQjk5NTA1OTE0MDhE
ODkwOTdENTE0MzM1OTBCODlEQ0NCMjg4Rjg1MDRBNUJGOUNCMUNBMEEwMjQ2QjA3
MEEzMkE1RTYxQjgwNkFFRTQwQ0VGMzRCQTkzQUQyNEVBRDczOTQxMDRENzQxNkFG
RTFDQTBGODM1RDRCQzVGQzlFM0Y5NzkyNTYzNkY0MzdBREQyRkYwMUQ2MzQ5NUVF
QTgyNEZFRjNCQTJBRDg2M0ZDRjg3OTlEODc4RTg0ODlCQzVDRUJDNzY3QjFBRjQ1
ODA4Q0U5ODlFOEREMTA1NDQxMEM3RUYxM0IyNEM3NTc2NURCNzBGM0Y2MTdGNjRG
OTMzNzBCNjcyOTE3MjUxMzdFQjVGNzZFMkVDODRBODZDOURGQkUxMDlGMUQyNEYy
M0REQjQ5ODBGNURFNThDMEUxMTRBMDA0NkIzMEFFNTYwRUU4MTQ5QzFDMDA2RjE1
RjEwRTY4MUI0NkE3NDdFMzM1RTVCM0U4OTVFQTE0M0FFQzU3NzUxNDE5RTI5MzNF
NEE5Njg2N0M2NTNFNTVBRTVDNTI5REQ4MjBCODBEQkQ2QTM3QzZCODI2OTcwMDVE
RDI0ODA4RTEwQzk0QTM2MEE5NzM3OTNGMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAO12gK5Lf9pt1a8xaPAH6avfbu9HK+K5lQWRQI2J
CX1RQzWQuJ3Msoj4UEpb+cscoKAkawcKMqXmG4Bq7kDO80upOtJOrXOUEE10Fq/h
yg+DXUvF/J4/l5JWNvQ3rdL/AdY0le6oJP7zuirYY/z4eZ2HjoSJvFzrx2exr0WA
jOmJ6N0QVEEMfvE7JMdXZdtw8/YX9k+TNwtnKRclE361924uyEqGyd++EJ8dJPI9
20mA9d5YwOEUoARrMK5WDugUnBwAbxXxDmgbRqdH4zXls+iV6hQ67Fd1FBnikz5K
loZ8ZT5VrlxSndgguA29ajfGuCaXAF3SSAjhDJSjYKlzeT8CAwEAAaOCAnQwggJw
MB0GA1UdDgQWBBQp7iE/xMZy0QCsEPqGNq/TEb3+jjAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRyc3luYzovL3Jwa2kuZGF0
YXBsYW5lLm9yZy9yZXBvL0RBVEFQTEFORS8wLzMyMzYzMDM2M2EzNDYxMzQzMDNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM1MzQzNzMyMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBkpA
MA0GCSqGSIb3DQEBCwUAA4IBAQBi1n/W94K9sZEG0enpluly7xo2pN734RfnjNZQ
4VbgylY3NuFn3RzdpupFLoq1rsTUY2Z9W0oN7O8luP/3H1S55Bw3ekjjJDVy92Bk
MG0OuAN6SjDX1IYyHEt+PKuN0QgrG3AQUMcSH8YgLeKte82W7ySXYY8UD3Lyl35t
nj7TclW0DdYg+f5rvTYybzuy4o4tTwvCDCrn1gXPLAPIgmcO/eVAZRd3moQ43VMe
eEI5xkFYrjg+uJDAH1wlYVm1nsh92gLchZayWvYssTP31hZrLZHDp6e0HUDa7E/V
iGrIUHALZEa2tTaKNglPEx3OpVR9/TXhAqIrBli9DINUWAXR
-----END CERTIFICATE-----