Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132353a313433353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3132353a313433353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          jvuW5rlVVbs0f01rDsw8d2FUxDoX9EoKrSYyef5Jtdo=
Subject key identifier:   7C:39:82:49:1E:E4:22:57:EE:6B:E6:F2:94:53:AC:A0:29:E6:D8:25
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7F924AD25276E35722B88FA62D29587129566710
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132353a313433353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 25 Jan 2022 14:35:01 +0000
ROA not before:           Tue 25 Jan 2022 14:30:01 +0000
ROA not after:            Tue 24 Jan 2023 14:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:125:1435::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:92:4a:d2:52:76:e3:57:22:b8:8f:a6:2d:29:58:71:29:56:67:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 25 14:30:01 2022 GMT
            Not After : Jan 24 14:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:9c:c1:3b:07:9d:d8:08:c3:a2:d8:b7:6d:
                    74:6c:6d:6e:1b:2f:72:8b:9b:31:66:d2:e2:9b:9e:
                    0d:3b:72:fa:67:b0:0b:55:fb:d8:e7:74:d2:ad:b5:
                    a9:9a:ab:bd:64:a4:3f:b5:09:7f:79:5e:cb:34:92:
                    a4:ae:ec:4e:b7:48:6a:fd:99:85:a8:f4:96:12:91:
                    65:6c:8d:cf:3d:71:14:56:b9:79:20:3a:39:1d:ba:
                    2f:ec:d4:89:30:9d:af:4c:87:d0:7f:cc:43:26:0f:
                    ec:4b:95:62:79:50:07:d2:67:42:a4:86:83:d0:c4:
                    38:07:03:2a:90:30:b8:c4:26:e6:f8:d2:48:8d:14:
                    b9:42:3c:97:e9:2a:28:46:69:a8:1c:2e:47:8c:d6:
                    a0:7e:ff:98:c9:6a:de:2f:26:63:24:0e:cb:00:f1:
                    f0:5e:4f:54:2b:9a:43:fa:e7:89:ff:23:23:68:70:
                    a6:5f:22:25:a5:38:43:3a:fd:26:1e:72:f6:f1:2e:
                    51:69:07:7b:d1:92:4f:70:ed:57:9a:f1:cd:a3:2d:
                    0a:9a:62:6a:5a:a2:d7:62:25:d2:6d:78:7f:c2:06:
                    29:d7:ab:44:42:60:e7:2a:53:a7:34:c1:bb:76:1b:
                    b3:62:d8:ef:92:32:1c:1c:b9:36:67:9d:d7:04:5a:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:39:82:49:1E:E4:22:57:EE:6B:E6:F2:94:53:AC:A0:29:E6:D8:25
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132353a313433353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:125:1435::/80

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:7a:6c:08:c9:e1:09:f2:61:2c:a7:67:d8:e1:78:52:2c:
         68:c6:72:04:6c:79:65:e7:15:e7:72:bd:5d:0a:84:8f:bb:96:
         ea:cc:a7:b5:39:db:d8:1d:27:d2:05:f6:c0:66:9b:0d:fa:16:
         32:5b:b2:9f:08:05:5a:d3:2c:72:ef:5f:fc:65:ee:21:0b:2a:
         d4:29:d4:45:e5:15:5c:61:b7:fc:1c:1a:48:19:c9:a2:66:2e:
         5f:3a:05:ac:86:9f:63:6a:dd:ff:46:1b:07:07:de:66:a5:09:
         d3:f7:28:ef:5e:d9:5a:ac:17:76:4c:1e:01:a5:e9:04:22:de:
         2e:87:8c:0a:67:5f:4f:48:75:2e:79:d2:89:a5:97:a7:b1:ae:
         cc:7b:ae:7f:d8:1c:58:5e:d8:e5:20:96:59:e8:76:37:a6:14:
         b1:ac:75:cf:5c:ec:13:88:5b:bd:e6:ea:26:fb:45:c8:2b:a1:
         28:2a:1b:58:4c:6d:34:70:b1:a4:0c:61:10:fb:5e:20:6e:4c:
         ba:02:38:12:7b:8c:6a:3a:b0:d1:35:42:2d:25:a9:b2:28:d9:
         b4:0a:b2:35:86:38:57:26:55:79:47:b5:99:b6:5f:d9:2e:b0:
         45:b2:04:e8:b8:27:0e:cc:fc:b5:7f:65:ac:30:a8:59:dc:98:
         64:90:48:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----