Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a323332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a323332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Wq3I6WThql7lltX+RN00pLsdUnbjc+W0gM7UB6gqnzo=
Subject key identifier:   00:0C:BC:97:69:10:7E:CF:3D:6D:C3:73:52:F5:60:25:12:06:02:31
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       416F66B267D0DFD2A21CDADB4DF07584A28830B7
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a323332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 23:25:02 +0000
ROA not before:           Sun 30 Jan 2022 23:20:02 +0000
ROA not after:            Sun 29 Jan 2023 23:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:2325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6f:66:b2:67:d0:df:d2:a2:1c:da:db:4d:f0:75:84:a2:88:30:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 23:20:02 2022 GMT
            Not After : Jan 29 23:25:02 2023 GMT
        Subject: CN=3082010A0282010100B50A1920D88E112AAD50B39508834FC69A288E3AAEA5B470C6D6CF5D1D6C958F115384F6F11E40156E2CC7883A83952D1F59A5D82669E469F9C1E67A25446B37389D762EF4D98AC17E03DCA46ACA8E301649910F306940FB8903AEFA41F2EE357F6AC691877F1C4A6CFE0D752F7C2FD9D662732988559194A0002C5FBD10A9E955D2DE706295CC04A76436099C0921864DC88E77E160AE12F301E7BA321379102FFED6FEF8D5F3D8F80AA483470D5F67D5A694DF320C92ED31134121D8459237DDF37EA57D31EE4B4D9C964AD33C0216F08C7D5A2B8557C1F098198D130D598537FD0F6E9C6BAE470112150BD2629B5A08900265DB963691CDA2C73B490A25DB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:19:20:d8:8e:11:2a:ad:50:b3:95:08:83:
                    4f:c6:9a:28:8e:3a:ae:a5:b4:70:c6:d6:cf:5d:1d:
                    6c:95:8f:11:53:84:f6:f1:1e:40:15:6e:2c:c7:88:
                    3a:83:95:2d:1f:59:a5:d8:26:69:e4:69:f9:c1:e6:
                    7a:25:44:6b:37:38:9d:76:2e:f4:d9:8a:c1:7e:03:
                    dc:a4:6a:ca:8e:30:16:49:91:0f:30:69:40:fb:89:
                    03:ae:fa:41:f2:ee:35:7f:6a:c6:91:87:7f:1c:4a:
                    6c:fe:0d:75:2f:7c:2f:d9:d6:62:73:29:88:55:91:
                    94:a0:00:2c:5f:bd:10:a9:e9:55:d2:de:70:62:95:
                    cc:04:a7:64:36:09:9c:09:21:86:4d:c8:8e:77:e1:
                    60:ae:12:f3:01:e7:ba:32:13:79:10:2f:fe:d6:fe:
                    f8:d5:f3:d8:f8:0a:a4:83:47:0d:5f:67:d5:a6:94:
                    df:32:0c:92:ed:31:13:41:21:d8:45:92:37:dd:f3:
                    7e:a5:7d:31:ee:4b:4d:9c:96:4a:d3:3c:02:16:f0:
                    8c:7d:5a:2b:85:57:c1:f0:98:19:8d:13:0d:59:85:
                    37:fd:0f:6e:9c:6b:ae:47:01:12:15:0b:d2:62:9b:
                    5a:08:90:02:65:db:96:36:91:cd:a2:c7:3b:49:0a:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0C:BC:97:69:10:7E:CF:3D:6D:C3:73:52:F5:60:25:12:06:02:31
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a323332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:2325::/80

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:10:57:da:d1:68:05:24:33:d0:cc:e4:89:aa:b0:84:29:
         87:ef:25:e8:ae:60:22:c7:35:6f:c7:ea:49:84:20:f9:e1:88:
         53:29:83:33:a3:99:08:13:1c:96:9e:42:ae:c4:a3:b9:f9:8b:
         a4:a3:c4:04:df:22:fe:f2:b2:ea:bf:81:c0:93:b2:7b:81:a5:
         2e:3a:62:fe:a7:68:0d:d5:dd:98:45:fd:34:86:ca:e5:27:4f:
         8a:14:a9:ae:a4:a3:a3:37:f1:10:31:8a:67:6f:5a:e7:18:84:
         1d:12:88:da:fe:4b:2d:40:fb:0f:ab:58:6a:b9:46:a0:3d:fc:
         1f:b6:49:66:4d:bc:f0:3f:3b:94:3a:90:4d:3a:0e:39:87:b4:
         09:7a:fe:92:24:ea:2b:ef:4d:1f:33:3c:8b:51:d6:fc:91:6a:
         7d:00:5a:89:78:5d:6e:c4:cd:68:3d:91:ae:9e:3c:c5:46:53:
         ee:33:d8:57:ec:45:04:0b:94:62:2e:70:83:e3:f2:b4:45:95:
         3d:6a:be:34:a3:50:20:a6:44:e9:59:7a:04:71:29:02:21:85:
         e1:99:6d:cd:de:c6:c5:d5:29:7a:68:39:4e:54:dc:a0:25:74:
         1e:b9:75:18:77:b1:78:1a:ad:ff:ca:2c:41:6c:c0:a9:4f:a6:
         d8:7c:dd:83
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUQW9msmfQ39KiHNrbTfB1hKKIMLcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTMwMjMyMDAyWhcNMjMwMTI5MjMyNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI1MEExOTIw
RDg4RTExMkFBRDUwQjM5NTA4ODM0RkM2OUEyODhFM0FBRUE1QjQ3MEM2RDZDRjVE
MUQ2Qzk1OEYxMTUzODRGNkYxMUU0MDE1NkUyQ0M3ODgzQTgzOTUyRDFGNTlBNUQ4
MjY2OUU0NjlGOUMxRTY3QTI1NDQ2QjM3Mzg5RDc2MkVGNEQ5OEFDMTdFMDNEQ0E0
NkFDQThFMzAxNjQ5OTEwRjMwNjk0MEZCODkwM0FFRkE0MUYyRUUzNTdGNkFDNjkx
ODc3RjFDNEE2Q0ZFMEQ3NTJGN0MyRkQ5RDY2MjczMjk4ODU1OTE5NEEwMDAyQzVG
QkQxMEE5RTk1NUQyREU3MDYyOTVDQzA0QTc2NDM2MDk5QzA5MjE4NjREQzg4RTc3
RTE2MEFFMTJGMzAxRTdCQTMyMTM3OTEwMkZGRUQ2RkVGOEQ1RjNEOEY4MEFBNDgz
NDcwRDVGNjdENUE2OTRERjMyMEM5MkVEMzExMzQxMjFEODQ1OTIzN0RERjM3RUE1
N0QzMUVFNEI0RDlDOTY0QUQzM0MwMjE2RjA4QzdENUEyQjg1NTdDMUYwOTgxOThE
MTMwRDU5ODUzN0ZEMEY2RTlDNkJBRTQ3MDExMjE1MEJEMjYyOUI1QTA4OTAwMjY1
REI5NjM2OTFDREEyQzczQjQ5MEEyNURCMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALUKGSDYjhEqrVCzlQiDT8aaKI46rqW0cMbWz10d
bJWPEVOE9vEeQBVuLMeIOoOVLR9ZpdgmaeRp+cHmeiVEazc4nXYu9NmKwX4D3KRq
yo4wFkmRDzBpQPuJA676QfLuNX9qxpGHfxxKbP4NdS98L9nWYnMpiFWRlKAALF+9
EKnpVdLecGKVzASnZDYJnAkhhk3IjnfhYK4S8wHnujITeRAv/tb++NXz2PgKpINH
DV9n1aaU3zIMku0xE0Eh2EWSN93zfqV9Me5LTZyWStM8AhbwjH1aK4VXwfCYGY0T
DVmFN/0PbpxrrkcBEhUL0mKbWgiQAmXbljaRzaLHO0kKJdsCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBQADLyXaRB+zz1tw3NS9WAlEgYCMTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMzMzAzYTMyMzMzMjM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiATAjJTANBgkqhkiG
9w0BAQsFAAOCAQEAYMMQV9rRaAUkM9DM5ImqsIQph+8l6K5gIsc1b8fqSYQg+eGI
UymDM6OZCBMclp5CrsSjufmLpKPEBN8i/vKy6r+BwJOye4GlLjpi/qdoDdXdmEX9
NIbK5SdPihSprqSjozfxEDGKZ29a5xiEHRKI2v5LLUD7D6tYarlGoD38H7ZJZk28
8D87lDqQTToOOYe0CXr+kiTqK+9NHzM8i1HW/JFqfQBaiXhdbsTNaD2Rrp48xUZT
7jPYV+xFBAuUYi5wg+PytEWVPWq+NKNQIKZE6Vl6BHEpAiGF4Zltzd7GxdUpemg5
TlTcoCV0Hrl1GHexeBqt/8osQWzAqU+m2Hzdgw==
-----END CERTIFICATE-----