Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3432353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133303a3432353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          uHlXy/cfdMsetLISnq9wQgcf3Ss2JzqGR5jYDBFDpfI=
Subject key identifier:   1B:D9:EF:55:E4:B1:96:94:DE:AB:6D:FE:EE:15:16:77:0E:34:8F:AE
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       6015C854D8B6633DF1A04CBD2ECA8A4849B14EB3
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3432353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 30 Jan 2022 04:25:02 +0000
ROA not before:           Sun 30 Jan 2022 04:20:02 +0000
ROA not after:            Sun 29 Jan 2023 04:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:130:425::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:15:c8:54:d8:b6:63:3d:f1:a0:4c:bd:2e:ca:8a:48:49:b1:4e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 30 04:20:02 2022 GMT
            Not After : Jan 29 04:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fa:63:45:06:39:1f:b9:16:a6:4d:f1:46:c5:
                    3a:be:dc:4d:85:c3:db:3d:67:c2:19:e0:e9:ca:59:
                    56:17:cb:e4:85:ad:4d:94:78:65:e8:a6:ed:21:22:
                    5f:72:68:86:8f:1e:1e:a7:00:89:6f:a0:a7:1b:d6:
                    91:3a:47:a1:b2:ca:be:96:9e:e7:cf:dd:86:fa:0f:
                    e3:20:31:f1:f4:d2:3e:d0:a8:10:24:54:22:c2:8a:
                    ce:56:06:53:04:24:cf:0f:49:16:85:20:0f:60:05:
                    25:00:77:e7:1c:72:61:b7:29:5b:23:fe:49:57:14:
                    a1:97:9b:92:db:ec:e8:a8:14:ba:0b:04:53:7c:7d:
                    0f:fb:b6:8b:5a:d7:a7:a0:c4:af:00:38:9e:72:ee:
                    cf:12:55:94:48:7b:57:0a:12:3c:8f:df:df:9d:1e:
                    23:d5:87:f9:bf:82:01:33:19:2b:39:d7:9b:a9:ad:
                    9a:1a:7d:ae:5d:18:0b:01:c7:54:66:3e:11:d4:10:
                    03:4e:b6:28:5d:88:ac:76:3d:c6:40:91:ef:86:d5:
                    8a:0f:8a:d0:3a:89:1a:be:13:00:69:46:e0:98:a9:
                    7a:08:6c:de:83:19:b3:32:f2:0f:8f:1d:93:f8:d7:
                    9c:b5:98:48:22:f5:18:9d:04:f8:c4:2a:8a:9d:bc:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D9:EF:55:E4:B1:96:94:DE:AB:6D:FE:EE:15:16:77:0E:34:8F:AE
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133303a3432353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:130:425::/80

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:e5:96:cd:38:f4:44:00:63:66:94:3b:c4:65:c7:45:b0:
         0e:31:b9:a9:bc:cb:33:ea:54:25:ac:07:6f:b5:86:90:96:37:
         3d:c8:e1:72:15:d5:89:8f:88:64:9c:ad:f3:4f:df:99:a7:00:
         69:80:a9:fe:b2:71:9e:10:1e:9a:d2:f6:45:6b:c6:33:86:7a:
         ed:df:8a:01:06:b9:40:77:f0:34:ec:61:0d:1c:44:7a:48:0d:
         f4:f9:ea:09:56:f0:8d:dc:f4:7b:05:40:ab:bd:eb:df:7d:85:
         b8:a4:46:91:dd:a3:c7:f2:7f:63:bc:9f:5f:ab:a5:7b:78:d7:
         da:37:d5:a6:c2:b8:02:cc:46:71:f7:7d:1a:48:dc:bd:77:87:
         a0:7d:be:83:33:77:5b:24:44:84:61:8d:9d:12:62:45:b7:2a:
         60:22:d4:93:2a:d6:dd:28:c1:3a:53:26:ca:6e:9b:dc:6f:7b:
         4f:ef:94:7c:fe:aa:b3:5d:2c:fa:2a:28:c0:c3:f3:69:3c:79:
         5e:64:52:b1:58:36:40:29:c4:ef:b7:c1:bf:1c:24:26:e0:94:
         86:24:04:09:5d:0f:7c:4c:f6:cc:be:2d:cd:45:ee:9c:ff:7a:
         af:1a:28:00:90:b9:bd:99:65:bf:b1:d0:23:6b:5b:b6:9c:42:
         52:bf:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----