Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a313835353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3132393a313835353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          eZjjwKGQAE2TyeEnaMNzRTFz2fxQWDSKyHDz9bHFGEU=
Subject key identifier:   68:6A:AC:92:C9:FB:F6:CF:84:5A:A0:C7:A7:FF:D7:5E:F1:D8:8F:13
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       398E92333017401E8470D3AD0B286788AD861B88
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a313835353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 29 Jan 2022 18:55:01 +0000
ROA not before:           Sat 29 Jan 2022 18:50:01 +0000
ROA not after:            Sat 28 Jan 2023 18:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:129:1855::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8e:92:33:30:17:40:1e:84:70:d3:ad:0b:28:67:88:ad:86:1b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 29 18:50:01 2022 GMT
            Not After : Jan 28 18:55:01 2023 GMT
        Subject: CN=3082010A0282010100D5681B926271889A385CE58FF3BB1C2E33B1C9DF796ED107127296DFC876494172BE0AFCC7AC6D6E58709FC633C8D370372EC62074EB70ADBF592ADAD3CD29FB13CAC21FD528647B4AE11AC327C1ECCE09A9C450C37A9E229D3E7834757E4CEA6DA2ED693E82E014661A315AAE0505B1C760483172AB8843C5F35F714F01E802FDE5B9F972C4BD86DC7FD362B62FEDD78002CAF2E5144C37492CCAF97CF8ED715DB05C0934AB3D25CD60FE68906F0810F9E80771CC66113080F62C543F5483187F9983484E09B2453409422B63C95D64C8F042C60F81C52D3C363016A9DC748CE86364200464A568D1D327AF22E6EDC72E9E33068374989119DA5BB0BB9015CD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:1b:92:62:71:88:9a:38:5c:e5:8f:f3:bb:
                    1c:2e:33:b1:c9:df:79:6e:d1:07:12:72:96:df:c8:
                    76:49:41:72:be:0a:fc:c7:ac:6d:6e:58:70:9f:c6:
                    33:c8:d3:70:37:2e:c6:20:74:eb:70:ad:bf:59:2a:
                    da:d3:cd:29:fb:13:ca:c2:1f:d5:28:64:7b:4a:e1:
                    1a:c3:27:c1:ec:ce:09:a9:c4:50:c3:7a:9e:22:9d:
                    3e:78:34:75:7e:4c:ea:6d:a2:ed:69:3e:82:e0:14:
                    66:1a:31:5a:ae:05:05:b1:c7:60:48:31:72:ab:88:
                    43:c5:f3:5f:71:4f:01:e8:02:fd:e5:b9:f9:72:c4:
                    bd:86:dc:7f:d3:62:b6:2f:ed:d7:80:02:ca:f2:e5:
                    14:4c:37:49:2c:ca:f9:7c:f8:ed:71:5d:b0:5c:09:
                    34:ab:3d:25:cd:60:fe:68:90:6f:08:10:f9:e8:07:
                    71:cc:66:11:30:80:f6:2c:54:3f:54:83:18:7f:99:
                    83:48:4e:09:b2:45:34:09:42:2b:63:c9:5d:64:c8:
                    f0:42:c6:0f:81:c5:2d:3c:36:30:16:a9:dc:74:8c:
                    e8:63:64:20:04:64:a5:68:d1:d3:27:af:22:e6:ed:
                    c7:2e:9e:33:06:83:74:98:91:19:da:5b:b0:bb:90:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6A:AC:92:C9:FB:F6:CF:84:5A:A0:C7:A7:FF:D7:5E:F1:D8:8F:13
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3132393a313835353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:129:1855::/80

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:03:39:60:ad:b0:e0:51:76:9c:7b:e1:04:64:9e:94:51:
         39:39:a5:81:4f:2e:e3:ec:7c:23:05:0d:e9:29:12:0a:2f:ee:
         2a:52:98:9a:b9:71:af:c7:33:a3:26:98:55:5f:ca:d2:29:22:
         70:6e:01:d3:97:27:0a:e4:29:b5:78:5a:1f:34:07:14:0b:b2:
         fb:e7:3e:31:af:79:bd:6c:87:16:cb:aa:69:c5:05:93:39:d0:
         4b:8c:55:2c:45:13:c3:d5:98:fc:d2:66:4d:c9:76:7a:46:46:
         85:c6:58:e5:bf:fd:3d:b5:78:14:67:0d:70:ad:ff:ef:c4:82:
         5c:a2:e6:fd:70:dc:5d:b0:60:e0:2d:fe:b0:ad:aa:e0:c4:1b:
         b2:77:05:fc:d1:6b:c2:bd:c8:3b:ee:68:25:43:80:1d:08:d3:
         2c:54:62:7b:d2:f7:fc:d5:74:dd:b1:87:82:8a:d0:4b:69:15:
         fb:ee:ae:ef:25:66:c3:96:35:2a:dd:6d:5b:0d:d9:3a:47:7e:
         31:b9:28:64:b0:ec:97:41:12:5e:8b:86:36:f5:c6:58:d3:93:
         37:de:9e:e9:f0:5c:8a:8d:33:d0:30:48:a9:0a:c7:c2:9f:1d:
         4c:45:b8:6a:19:9f:a4:15:92:c8:88:d5:a5:96:f4:65:63:3d:
         fc:26:dd:03
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUOY6SMzAXQB6EcNOtCyhniK2GG4gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTI5MTg1MDAxWhcNMjMwMTI4MTg1NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEQ1NjgxQjky
NjI3MTg4OUEzODVDRTU4RkYzQkIxQzJFMzNCMUM5REY3OTZFRDEwNzEyNzI5NkRG
Qzg3NjQ5NDE3MkJFMEFGQ0M3QUM2RDZFNTg3MDlGQzYzM0M4RDM3MDM3MkVDNjIw
NzRFQjcwQURCRjU5MkFEQUQzQ0QyOUZCMTNDQUMyMUZENTI4NjQ3QjRBRTExQUMz
MjdDMUVDQ0UwOUE5QzQ1MEMzN0E5RTIyOUQzRTc4MzQ3NTdFNENFQTZEQTJFRDY5
M0U4MkUwMTQ2NjFBMzE1QUFFMDUwNUIxQzc2MDQ4MzE3MkFCODg0M0M1RjM1Rjcx
NEYwMUU4MDJGREU1QjlGOTcyQzRCRDg2REM3RkQzNjJCNjJGRURENzgwMDJDQUYy
RTUxNDRDMzc0OTJDQ0FGOTdDRjhFRDcxNURCMDVDMDkzNEFCM0QyNUNENjBGRTY4
OTA2RjA4MTBGOUU4MDc3MUNDNjYxMTMwODBGNjJDNTQzRjU0ODMxODdGOTk4MzQ4
NEUwOUIyNDUzNDA5NDIyQjYzQzk1RDY0QzhGMDQyQzYwRjgxQzUyRDNDMzYzMDE2
QTlEQzc0OENFODYzNjQyMDA0NjRBNTY4RDFEMzI3QUYyMkU2RURDNzJFOUUzMzA2
ODM3NDk4OTExOURBNUJCMEJCOTAxNUNEMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANVoG5JicYiaOFzlj/O7HC4zscnfeW7RBxJylt/I
dklBcr4K/MesbW5YcJ/GM8jTcDcuxiB063Ctv1kq2tPNKfsTysIf1Shke0rhGsMn
wezOCanEUMN6niKdPng0dX5M6m2i7Wk+guAUZhoxWq4FBbHHYEgxcquIQ8XzX3FP
AegC/eW5+XLEvYbcf9Niti/t14ACyvLlFEw3SSzK+Xz47XFdsFwJNKs9Jc1g/miQ
bwgQ+egHccxmETCA9ixUP1SDGH+Zg0hOCbJFNAlCK2PJXWTI8ELGD4HFLTw2MBap
3HSM6GNkIARkpWjR0yevIubtxy6eMwaDdJiRGdpbsLuQFc0CAwEAAaOCApwwggKY
MB0GA1UdDgQWBBRoaqySyfv2z4RaoMen/9de8diPEzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMyMzkzYTMxMzgzNTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiASkYVTANBgkqhkiG
9w0BAQsFAAOCAQEAAKQDOWCtsOBRdpx74QRknpRROTmlgU8u4+x8IwUN6SkSCi/u
KlKYmrlxr8czoyaYVV/K0ikicG4B05cnCuQptXhaHzQHFAuy++c+Ma95vWyHFsuq
acUFkznQS4xVLEUTw9WY/NJmTcl2ekZGhcZY5b/9PbV4FGcNcK3/78SCXKLm/XDc
XbBg4C3+sK2q4MQbsncF/NFrwr3IO+5oJUOAHQjTLFRie9L3/NV03bGHgorQS2kV
++6u7yVmw5Y1Kt1tWw3ZOkd+MbkoZLDsl0ESXouGNvXGWNOTN96e6fBcio0z0DBI
qQrHwp8dTEW4ahmfpBWSyIjVpZb0ZWM9/CbdAw==
-----END CERTIFICATE-----