Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313035303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a313035303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Y14BfX0DDfDFi2du34ePrIgwFFP5c5VQg33S8RQv2Oo=
Subject key identifier:   F9:8C:1F:6A:B0:7F:7D:16:07:75:A6:A8:FD:1A:B4:E1:84:CE:8D:D4
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       0DC36BEE9A33DA5935C42CD4E3A044B3B3E64773
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313035303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 10:50:01 +0000
ROA not before:           Mon 31 Jan 2022 10:45:01 +0000
ROA not after:            Mon 30 Jan 2023 10:50:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:1050::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c3:6b:ee:9a:33:da:59:35:c4:2c:d4:e3:a0:44:b3:b3:e6:47:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 10:45:01 2022 GMT
            Not After : Jan 30 10:50:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b2:62:c3:ed:a5:04:98:82:7f:51:2b:47:67:
                    47:94:5c:1f:ca:45:97:f1:31:5d:74:b8:eb:7e:7d:
                    a6:e9:1d:30:4f:89:8d:7b:74:48:08:1a:74:33:a2:
                    6c:20:75:00:b3:c9:ff:0d:f5:98:88:a9:7b:5e:e2:
                    54:f4:d3:eb:89:db:aa:65:75:0a:d3:8a:af:05:83:
                    c0:91:a5:21:5d:c4:f7:3f:ed:2f:65:61:36:bb:43:
                    3e:eb:d0:d6:55:23:43:19:8a:ad:45:be:c9:3a:c1:
                    58:65:85:64:86:98:ed:c7:d5:1a:96:de:09:c2:0d:
                    2e:f7:3a:0e:82:45:c0:24:93:cd:4b:e6:f8:df:57:
                    2b:c7:d1:27:44:17:73:14:70:7d:fa:bd:e3:89:a4:
                    34:17:19:a2:e6:3b:b0:c3:75:ac:2a:2d:cb:c9:6f:
                    5b:d2:b1:01:3d:21:31:37:f7:5f:f4:fd:00:86:1e:
                    14:b9:e7:43:fc:83:3a:ea:94:e3:05:b3:ff:60:48:
                    08:d6:0f:4b:88:ac:88:9e:df:00:49:73:97:c2:76:
                    6c:8c:70:f9:67:9f:86:de:fa:f0:49:cf:d1:09:fb:
                    f5:b8:16:15:15:2e:d6:70:56:f3:84:4b:53:80:f4:
                    60:0a:24:22:22:ba:21:b9:b4:3b:82:7c:d0:a7:3f:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:1F:6A:B0:7F:7D:16:07:75:A6:A8:FD:1A:B4:E1:84:CE:8D:D4
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a313035303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:1050::/80

    Signature Algorithm: sha256WithRSAEncryption
         5f:cc:c1:d0:5f:06:3b:98:fa:25:7c:8e:ba:ab:0f:c5:09:4a:
         11:f4:8f:e7:15:92:55:fa:49:81:cd:06:fb:49:98:11:35:a2:
         e9:91:43:2d:9d:67:29:d6:68:cb:14:91:84:1d:d0:32:6e:46:
         07:c7:e5:58:89:7f:21:c8:ba:20:67:88:8f:fb:91:e1:5e:56:
         f2:8f:f6:1a:a3:da:b3:99:5f:ac:4e:ce:3c:fb:8c:3a:d0:dc:
         16:ce:dd:07:ac:a1:be:36:49:5b:bc:65:fb:b2:ce:20:92:57:
         93:86:9f:a0:bf:00:1e:3e:88:e9:bf:9d:a5:bb:cc:d5:47:63:
         74:e0:af:6e:88:d9:3f:c6:60:65:33:27:a7:e7:b3:a9:ab:be:
         11:99:15:18:18:87:3d:4b:64:c3:07:7c:92:b2:ee:ed:a0:00:
         48:15:a9:00:f7:e8:8d:7b:46:76:03:3a:a0:d1:a7:a4:ca:f6:
         df:6c:60:45:65:92:bf:d0:98:e9:9e:13:39:ed:0f:57:37:6b:
         c5:2d:c8:59:5d:22:2b:cf:1d:81:c3:4c:40:99:b3:9a:fc:e1:
         d2:d2:a5:cc:d3:c1:71:b5:90:b3:de:5c:ac:a7:ad:e8:5a:30:
         6a:8d:ac:06:91:9f:c9:9e:47:0f:a9:56:8c:3d:2f:ca:5b:7a:
         6c:02:dd:55
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUDcNr7poz2lk1xCzU46BEs7PmR3MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMTMxMTA0NTAxWhcNMjMwMTMwMTA1MDAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI4QjI2MkMz
RURBNTA0OTg4MjdGNTEyQjQ3Njc0Nzk0NUMxRkNBNDU5N0YxMzE1RDc0QjhFQjdF
N0RBNkU5MUQzMDRGODk4RDdCNzQ0ODA4MUE3NDMzQTI2QzIwNzUwMEIzQzlGRjBE
RjU5ODg4QTk3QjVFRTI1NEY0RDNFQjg5REJBQTY1NzUwQUQzOEFBRjA1ODNDMDkx
QTUyMTVEQzRGNzNGRUQyRjY1NjEzNkJCNDMzRUVCRDBENjU1MjM0MzE5OEFBRDQ1
QkVDOTNBQzE1ODY1ODU2NDg2OThFREM3RDUxQTk2REUwOUMyMEQyRUY3M0EwRTgy
NDVDMDI0OTNDRDRCRTZGOERGNTcyQkM3RDEyNzQ0MTc3MzE0NzA3REZBQkRFMzg5
QTQzNDE3MTlBMkU2M0JCMEMzNzVBQzJBMkRDQkM5NkY1QkQyQjEwMTNEMjEzMTM3
Rjc1RkY0RkQwMDg2MUUxNEI5RTc0M0ZDODMzQUVBOTRFMzA1QjNGRjYwNDgwOEQ2
MEY0Qjg4QUM4ODlFREYwMDQ5NzM5N0MyNzY2QzhDNzBGOTY3OUY4NkRFRkFGMDQ5
Q0ZEMTA5RkJGNUI4MTYxNTE1MkVENjcwNTZGMzg0NEI1MzgwRjQ2MDBBMjQyMjIy
QkEyMUI5QjQzQjgyN0NEMEE3M0Y2NEE1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALiyYsPtpQSYgn9RK0dnR5RcH8pFl/ExXXS46359
pukdME+JjXt0SAgadDOibCB1ALPJ/w31mIipe17iVPTT64nbqmV1CtOKrwWDwJGl
IV3E9z/tL2VhNrtDPuvQ1lUjQxmKrUW+yTrBWGWFZIaY7cfVGpbeCcINLvc6DoJF
wCSTzUvm+N9XK8fRJ0QXcxRwffq944mkNBcZouY7sMN1rCoty8lvW9KxAT0hMTf3
X/T9AIYeFLnnQ/yDOuqU4wWz/2BICNYPS4isiJ7fAElzl8J2bIxw+Wefht768EnP
0Qn79bgWFRUu1nBW84RLU4D0YAokIiK6Ibm0O4J80Kc/ZKUCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBT5jB9qsH99Fgd1pqj9GrThhM6N1DAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMTMzMzEzYTMxMzAzNTMwM2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiATEQUDANBgkqhkiG
9w0BAQsFAAOCAQEAX8zB0F8GO5j6JXyOuqsPxQlKEfSP5xWSVfpJgc0G+0mYETWi
6ZFDLZ1nKdZoyxSRhB3QMm5GB8flWIl/Ici6IGeIj/uR4V5W8o/2GqPas5lfrE7O
PPuMOtDcFs7dB6yhvjZJW7xl+7LOIJJXk4afoL8AHj6I6b+dpbvM1UdjdOCvbojZ
P8ZgZTMnp+ezqau+EZkVGBiHPUtkwwd8krLu7aAASBWpAPfojXtGdgM6oNGnpMr2
32xgRWWSv9CY6Z4TOe0PVzdrxS3IWV0iK88dgcNMQJmzmvzh0tKlzNPBcbWQs95c
rKet6Fowao2sBpGfyZ5HD6lWjD0vylt6bALdVQ==
-----END CERTIFICATE-----