Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313530353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a313530353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          OtczXa9y+ccM10npTSwn4hbAJn18yNmz1aku+wdkqZo=
Subject key identifier:   03:3B:E7:29:2E:77:31:9B:A7:19:0F:8A:DA:43:41:B0:73:C5:0D:DB
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2051764671F18EB96105E72F767ADBE7FCCE74CC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313530353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 15:05:01 +0000
ROA not before:           Sun 30 Jan 2022 15:00:01 +0000
ROA not after:            Sun 29 Jan 2023 15:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:1505::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:51:76:46:71:f1:8e:b9:61:05:e7:2f:76:7a:db:e7:fc:ce:74:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 15:00:01 2022 GMT
            Not After : Jan 29 15:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bf:06:bb:eb:03:10:1c:33:09:5f:a3:e9:c1:
                    c6:65:16:7a:7b:bd:ff:34:dc:ab:cf:be:77:96:e8:
                    16:88:3b:e9:83:a7:f2:5f:04:bc:b6:45:b4:27:3b:
                    40:fa:5a:77:4a:83:b0:2e:50:fe:ca:80:4c:87:79:
                    1a:8b:93:fa:44:f2:19:0e:25:22:11:6e:14:38:b7:
                    ca:3f:8f:0d:85:48:04:0c:dd:a2:ec:16:14:b5:a6:
                    b5:3e:b8:9a:45:d2:b5:3c:65:33:9b:85:75:7b:e0:
                    f1:72:c0:17:17:fd:32:09:b1:34:63:f1:10:0f:81:
                    a1:a3:29:e5:a7:cb:cd:0a:d4:06:9e:73:86:ad:1e:
                    d7:f5:a2:a5:4a:d2:e1:d8:81:58:4a:14:59:ad:92:
                    97:2d:01:7e:7b:1e:60:d2:a6:0b:9a:7d:67:0c:81:
                    3f:ec:88:08:b9:96:d1:5b:03:cd:f3:3c:7e:b9:c8:
                    8d:3c:57:53:fa:80:d9:4c:d1:87:e7:07:55:9d:c1:
                    e0:77:55:4f:df:14:4f:6d:b2:6a:d7:16:6c:89:48:
                    6e:b0:76:37:c2:40:f8:3a:ce:01:a1:4f:ea:53:5d:
                    5b:65:50:52:e6:72:07:b1:f7:13:8a:01:36:b3:b9:
                    f8:52:ee:60:99:87:c5:46:c6:11:d7:eb:d9:66:76:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3B:E7:29:2E:77:31:9B:A7:19:0F:8A:DA:43:41:B0:73:C5:0D:DB
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313530353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:1505::/80

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:5c:ae:0d:47:06:c0:b9:a6:95:21:b1:ac:cb:ef:44:64:
         23:32:a5:d5:7f:d2:d1:42:91:8f:f9:a0:39:74:49:09:44:42:
         77:33:81:55:08:07:c4:be:c7:1f:f6:04:8f:de:ff:f4:de:b0:
         19:17:ab:5b:9a:b0:46:1a:73:65:d8:ad:7c:b3:36:cd:e8:5b:
         56:da:33:74:e6:e7:d3:e4:9f:22:d1:8a:f0:aa:0c:39:c7:8c:
         8a:a1:ec:fa:d2:56:83:c9:c7:f7:6f:7f:c6:aa:de:d6:e8:bf:
         a3:a9:89:6a:71:77:5e:dc:83:e8:5a:00:f5:1e:fb:8d:28:7f:
         70:e6:f0:72:f2:d0:3f:50:cf:c8:e7:f3:b4:7c:75:fd:54:f8:
         c6:f9:20:32:87:0c:a1:d1:f1:fb:ed:6d:29:11:99:ae:ec:21:
         e7:82:3f:41:6e:ee:ec:b8:a0:b5:a5:b7:c7:74:ef:db:d1:2b:
         19:f5:44:6e:92:ea:7c:68:8c:88:be:c7:b9:02:73:36:75:0f:
         8a:8e:e5:47:59:7f:eb:2d:52:28:00:8e:00:bf:d3:d3:c4:7b:
         2b:dc:ba:bc:eb:0a:5f:4c:10:9a:3b:01:53:87:0e:7a:8b:46:
         bc:ad:3b:1a:c4:91:ea:c2:48:2d:74:38:49:63:f5:f8:17:46:
         df:0f:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----