Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a3135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          UVoX3AaF7WNmBLw5ld3TvUIEAKk7+egRcYG+d1xXxjw=
Subject key identifier:   8B:38:9B:79:6D:DA:29:64:64:A1:42:7E:11:21:38:C8:9A:0D:8F:AD
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4856463F045C6C6F63C9078543F42D4A111BDB0C
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 01:55:02 +0000
ROA not before:           Sun 30 Jan 2022 01:50:02 +0000
ROA not after:            Sun 29 Jan 2023 01:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:56:46:3f:04:5c:6c:6f:63:c9:07:85:43:f4:2d:4a:11:1b:db:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 01:50:02 2022 GMT
            Not After : Jan 29 01:55:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:c3:c7:7e:07:4a:72:f5:8a:33:f7:16:13:
                    3a:bb:a9:18:49:a8:34:83:a5:8f:9a:ba:aa:9c:28:
                    70:5b:cf:ec:a9:4f:80:a5:f7:10:95:5f:dc:7a:cf:
                    8a:6d:17:01:8e:36:e1:8a:f3:ce:5a:94:7b:b8:a5:
                    14:ef:e8:d2:c9:a6:7a:4f:88:f5:eb:d9:55:a1:5c:
                    a9:07:05:97:4a:cb:ee:58:44:44:04:50:76:5f:82:
                    03:ba:ef:57:16:95:29:38:76:5e:ac:fb:44:d7:a8:
                    18:64:91:5f:4f:f4:90:04:6f:73:98:5a:9f:cc:a7:
                    ae:d2:8a:b9:9f:6d:d2:12:e6:73:c0:74:17:f3:5e:
                    12:81:45:58:81:17:d8:bf:4d:70:28:28:2a:f5:f7:
                    d6:97:5a:f9:52:b3:47:39:b4:23:cc:0b:4f:32:dd:
                    3a:ec:bd:d0:5f:df:12:57:51:05:7b:7f:5d:88:ac:
                    d2:e5:32:0d:4c:f0:6b:e7:d7:aa:cc:be:f0:da:a9:
                    87:6f:05:8a:16:2a:80:f4:d9:eb:17:ea:96:3c:c4:
                    b7:6b:1b:6e:bf:17:64:8f:d3:d0:8d:15:0c:7a:2c:
                    39:78:3e:23:27:91:26:8d:8b:3a:b5:55:bb:a9:07:
                    71:15:c7:98:e2:85:bf:60:56:2a:26:c7:9f:ea:a1:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:38:9B:79:6D:DA:29:64:64:A1:42:7E:11:21:38:C8:9A:0D:8F:AD
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:155::/80

    Signature Algorithm: sha256WithRSAEncryption
         af:88:5d:86:92:17:46:a2:c9:23:e6:2b:3e:c4:26:e1:e1:59:
         83:ef:0a:71:c6:50:a1:30:95:5e:25:7f:47:e7:b1:0c:58:97:
         5a:cd:2b:fb:9a:ff:3b:ad:72:d9:16:c6:1f:2f:db:2b:95:96:
         df:10:83:1f:9b:8e:e7:81:f6:f8:fc:53:ce:74:57:0f:f5:b9:
         1c:23:91:a5:8d:0a:be:aa:72:5f:c5:ad:9d:b2:9c:f7:5f:c0:
         45:ca:2f:0a:56:4a:1e:7e:2c:a6:a0:25:23:10:f4:00:68:32:
         81:76:9d:89:ee:04:43:2b:21:8c:16:f0:b0:cf:8c:71:b3:15:
         2c:83:2c:1b:6d:61:d8:c8:ac:f7:07:19:05:ce:fc:d8:27:04:
         59:f6:a1:b2:30:49:48:66:73:5e:07:23:b3:d9:7f:5b:07:d1:
         3b:75:1d:31:04:e1:82:6b:e1:ca:07:1f:d5:5c:cd:e1:5c:6f:
         9c:fd:36:78:f8:19:30:12:a9:2a:84:a1:e6:e9:9a:bf:2a:9e:
         cb:f1:8a:20:d6:14:af:03:9a:2b:fd:64:04:71:0a:42:a9:e7:
         88:d5:54:b7:37:8f:aa:b6:2b:38:58:7b:96:76:fe:b5:05:82:
         58:ec:09:c3:8a:9b:90:38:fe:e0:fa:1a:e4:c5:66:13:ea:fc:
         6a:cf:80:4b
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUSFZGPwRcbG9jyQeFQ/QtShEb2wwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTMwMDE1MDAyWhcNMjMwMTI5MDE1NTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMDlDODZDM0M3
N0UwNzRBNzJGNThBMzNGNzE2MTMzQUJCQTkxODQ5QTgzNDgzQTU4RjlBQkFBQTlD
Mjg3MDVCQ0ZFQ0E5NEY4MEE1RjcxMDk1NUZEQzdBQ0Y4QTZEMTcwMThFMzZFMThB
RjNDRTVBOTQ3QkI4QTUxNEVGRThEMkM5QTY3QTRGODhGNUVCRDk1NUExNUNBOTA3
MDU5NzRBQ0JFRTU4NDQ0NDA0NTA3NjVGODIwM0JBRUY1NzE2OTUyOTM4NzY1RUFD
RkI0NEQ3QTgxODY0OTE1RjRGRjQ5MDA0NkY3Mzk4NUE5RkNDQTdBRUQyOEFCOTlG
NkREMjEyRTY3M0MwNzQxN0YzNUUxMjgxNDU1ODgxMTdEOEJGNEQ3MDI4MjgyQUY1
RjdENjk3NUFGOTUyQjM0NzM5QjQyM0NDMEI0RjMyREQzQUVDQkREMDVGREYxMjU3
NTEwNTdCN0Y1RDg4QUNEMkU1MzIwRDRDRjA2QkU3RDdBQUNDQkVGMERBQTk4NzZG
MDU4QTE2MkE4MEY0RDlFQjE3RUE5NjNDQzRCNzZCMUI2RUJGMTc2NDhGRDNEMDhE
MTUwQzdBMkMzOTc4M0UyMzI3OTEyNjhEOEIzQUI1NTVCQkE5MDc3MTE1Qzc5OEUy
ODVCRjYwNTYyQTI2Qzc5RkVBQTFFOUQxMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJyGw8d+B0py9Yoz9xYTOrupGEmoNIOlj5q6qpwo
cFvP7KlPgKX3EJVf3HrPim0XAY424YrzzlqUe7ilFO/o0smmek+I9evZVaFcqQcF
l0rL7lhERARQdl+CA7rvVxaVKTh2Xqz7RNeoGGSRX0/0kARvc5han8ynrtKKuZ9t
0hLmc8B0F/NeEoFFWIEX2L9NcCgoKvX31pda+VKzRzm0I8wLTzLdOuy90F/fEldR
BXt/XYis0uUyDUzwa+fXqsy+8Nqph28FihYqgPTZ6xfqljzEt2sbbr8XZI/T0I0V
DHosOXg+IyeRJo2LOrVVu6kHcRXHmOKFv2BWKibHn+qh6dECAwEAAaOCApowggKW
MB0GA1UdDgQWBBSLOJt5bdopZGShQn4RITjImg2PrTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMzMzAzYTMxMzUzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgEwAVUwDQYJKoZIhvcN
AQELBQADggEBAK+IXYaSF0aiySPmKz7EJuHhWYPvCnHGUKEwlV4lf0fnsQxYl1rN
K/ua/zutctkWxh8v2yuVlt8Qgx+bjueB9vj8U850Vw/1uRwjkaWNCr6qcl/FrZ2y
nPdfwEXKLwpWSh5+LKagJSMQ9ABoMoF2nYnuBEMrIYwW8LDPjHGzFSyDLBttYdjI
rPcHGQXO/NgnBFn2obIwSUhmc14HI7PZf1sH0Tt1HTEE4YJr4coHH9VczeFcb5z9
Nnj4GTASqSqEoebpmr8qnsvxiiDWFK8Dmiv9ZARxCkKp54jVVLc3j6q2KzhYe5Z2
/rUFgljsCcOKm5A4/uD6GuTFZhPq/GrPgEs=
-----END CERTIFICATE-----