Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313932353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a313932353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          3jMkc1wnnCpFQFR7kOBAQwfSkWUHQWL8ZQub+RXxChI=
Subject key identifier:   1F:56:99:81:41:B0:6C:E9:41:1A:38:8F:06:FA:6B:9E:67:61:C5:BC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2BB445443947C82EDD06F6528CB276D9F76CF15F
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313932353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 19:25:02 +0000
ROA not before:           Sun 30 Jan 2022 19:20:02 +0000
ROA not after:            Sun 29 Jan 2023 19:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:1925::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b4:45:44:39:47:c8:2e:dd:06:f6:52:8c:b2:76:d9:f7:6c:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 19:20:02 2022 GMT
            Not After : Jan 29 19:25:02 2023 GMT
        Subject: CN=3082010A0282010100B3D727153A3D1F4E6189EDEAE7277EE18AA3F1EFED3B8E7845759DA8DFCA39617E88F1CE1DE891528DF54A31E95F092AA2BF2713A486D25997487CFC3F924FA7A45753880BF683C54F3DC41FF9332B25D98DFB0AB6A4725DD0389F980E67559022F19293C877AAE6791841628049CEF4708DE6899E0405EF7C5F61A1D66A6532F672285B67020D0E3A1C984E3EB3D8726E9AAA9CF9ADF3BBFAB346A955973C03F27BDC1F1266B459788D3CEEC61750D16B741A6DE1A67023679E9F8DDCE7E8700C76FF56BDD282AE11CF006C044557B10D05921DCDAA19253A8149310C0B1E25B7BB898059AAD3C81608D9E770337AB93A0897347563B4C36F03C2A4F1D1A41D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:27:15:3a:3d:1f:4e:61:89:ed:ea:e7:27:
                    7e:e1:8a:a3:f1:ef:ed:3b:8e:78:45:75:9d:a8:df:
                    ca:39:61:7e:88:f1:ce:1d:e8:91:52:8d:f5:4a:31:
                    e9:5f:09:2a:a2:bf:27:13:a4:86:d2:59:97:48:7c:
                    fc:3f:92:4f:a7:a4:57:53:88:0b:f6:83:c5:4f:3d:
                    c4:1f:f9:33:2b:25:d9:8d:fb:0a:b6:a4:72:5d:d0:
                    38:9f:98:0e:67:55:90:22:f1:92:93:c8:77:aa:e6:
                    79:18:41:62:80:49:ce:f4:70:8d:e6:89:9e:04:05:
                    ef:7c:5f:61:a1:d6:6a:65:32:f6:72:28:5b:67:02:
                    0d:0e:3a:1c:98:4e:3e:b3:d8:72:6e:9a:aa:9c:f9:
                    ad:f3:bb:fa:b3:46:a9:55:97:3c:03:f2:7b:dc:1f:
                    12:66:b4:59:78:8d:3c:ee:c6:17:50:d1:6b:74:1a:
                    6d:e1:a6:70:23:67:9e:9f:8d:dc:e7:e8:70:0c:76:
                    ff:56:bd:d2:82:ae:11:cf:00:6c:04:45:57:b1:0d:
                    05:92:1d:cd:aa:19:25:3a:81:49:31:0c:0b:1e:25:
                    b7:bb:89:80:59:aa:d3:c8:16:08:d9:e7:70:33:7a:
                    b9:3a:08:97:34:75:63:b4:c3:6f:03:c2:a4:f1:d1:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:56:99:81:41:B0:6C:E9:41:1A:38:8F:06:FA:6B:9E:67:61:C5:BC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a313932353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:1925::/80

    Signature Algorithm: sha256WithRSAEncryption
         9c:35:79:0b:1f:4c:71:f7:f9:50:3b:7d:d5:72:ad:2b:e7:11:
         74:d2:1f:60:dd:ed:58:cd:57:35:ce:4a:46:be:f4:18:ed:33:
         92:dc:48:e2:8b:64:17:29:e7:44:14:93:35:9d:75:7f:d1:6c:
         2e:61:e4:f4:40:33:26:59:a6:16:31:21:40:80:ea:7e:00:24:
         f5:55:c4:70:52:06:68:4f:c8:e5:6e:7c:53:cb:92:80:d8:7b:
         54:c7:c1:bb:fb:7e:80:e9:7c:97:ac:d2:03:39:82:9a:2b:fc:
         ff:b8:fa:45:06:ed:6a:5c:ac:82:75:2c:35:0e:30:7b:3c:0a:
         5c:bf:76:47:52:12:90:e0:77:b7:01:6f:5f:ae:36:6c:bd:a0:
         cb:a3:d6:15:70:4f:54:c3:34:80:4d:e3:4f:f2:d0:2b:05:82:
         e8:c8:96:8f:f5:be:d4:4d:a9:ac:3c:48:a6:dc:75:9a:88:86:
         9d:7b:52:c4:dd:c3:5a:c6:b6:b8:84:22:ca:6e:8f:e4:47:07:
         4d:39:d0:e5:f4:9a:b4:40:d6:9d:3a:ff:ec:8b:c6:9d:8c:92:
         4f:7c:88:76:ba:15:2b:7f:50:83:4a:c7:1a:49:00:6b:c7:1f:
         7f:42:a9:99:92:54:6e:ae:0f:94:a9:8f:a4:48:2f:3a:c7:16:
         c6:43:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----