Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323335353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a323335353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          HuV/WCk6U2fJwtZVhR6CnmzxthisqGMCnLXNYp8wu7c=
Subject key identifier:   19:5F:EB:18:9E:5C:2C:FA:EB:6C:BD:45:E2:36:49:91:BE:D3:EB:0F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       271FEBDD45D6FE5EA28974A26928ED1AE35B51E8
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323335353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 23:55:01 +0000
ROA not before:           Mon 31 Jan 2022 23:50:01 +0000
ROA not after:            Mon 30 Jan 2023 23:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:2355::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1f:eb:dd:45:d6:fe:5e:a2:89:74:a2:69:28:ed:1a:e3:5b:51:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 23:50:01 2022 GMT
            Not After : Jan 30 23:55:01 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:75:ec:10:ea:3d:a6:3f:b9:e8:5d:f2:c9:
                    64:45:38:e2:81:42:c9:98:2c:f2:7c:87:ac:a2:0d:
                    7c:6f:dc:ea:06:8d:d3:d5:c1:45:47:47:6c:3a:e5:
                    ff:62:a3:bb:6e:c2:de:41:6e:f2:a3:ab:a2:20:a9:
                    e9:b3:ee:8f:41:b0:03:a3:31:dc:fa:0c:45:3a:35:
                    c0:f2:78:30:a1:9a:02:f8:98:37:ec:83:10:ae:85:
                    25:39:d2:27:6f:92:df:e7:d6:22:67:80:56:06:6b:
                    77:50:99:ab:0a:54:9d:7c:22:54:ed:e2:06:28:c0:
                    da:42:9e:db:54:30:58:ec:6e:8c:c0:b4:88:3e:9c:
                    0c:21:6d:fa:1b:89:ac:1b:85:01:1c:a3:5e:82:32:
                    0e:2e:6b:ca:7c:37:f4:86:d9:d4:fe:af:2f:18:34:
                    b2:f7:4b:d2:4c:b5:b9:96:63:00:49:5c:51:96:e2:
                    4d:93:ce:d8:09:9c:e8:00:40:e2:8a:61:ca:b8:33:
                    d8:b5:62:18:c3:46:39:29:a9:ad:14:de:d8:ec:44:
                    e5:8b:42:b8:15:8a:13:e1:9f:16:32:54:cd:68:52:
                    e5:8d:12:e7:80:1b:c1:4b:28:39:98:22:db:6e:c1:
                    ea:25:55:3a:b6:2e:4c:e3:64:d4:7e:b3:3e:f3:bc:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5F:EB:18:9E:5C:2C:FA:EB:6C:BD:45:E2:36:49:91:BE:D3:EB:0F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a323335353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:2355::/80

    Signature Algorithm: sha256WithRSAEncryption
         25:0d:9e:96:d7:11:04:ac:7f:47:54:65:01:8f:8e:dd:6a:7d:
         b1:dd:22:6b:81:62:fd:59:f7:e8:d9:b0:a2:e9:96:05:86:c7:
         9b:42:85:08:e9:91:f3:e9:62:69:87:5b:3e:fd:c9:93:b3:32:
         4e:cd:b4:9d:06:ac:35:6a:3b:c8:f3:df:b7:d7:a3:fd:2f:3f:
         e9:d0:c5:78:20:31:af:a6:25:cc:db:4a:20:66:5e:64:bb:be:
         df:5f:9b:13:93:db:7f:18:4b:6f:78:76:c0:44:52:53:ec:0b:
         8f:58:40:76:e0:b0:e6:b1:9a:ee:33:3e:13:c0:19:72:b9:d2:
         ac:33:18:e1:34:3d:58:62:48:36:84:53:d8:82:d7:fe:9b:5c:
         d3:3a:34:5f:da:83:46:b9:5b:a1:94:dd:ac:97:2d:7b:35:35:
         a6:9f:4f:a6:12:28:ca:3b:98:92:51:89:ca:54:88:82:b3:41:
         4f:bf:9b:0f:90:51:d7:b6:25:b2:2b:de:2d:8b:c2:6e:20:f5:
         69:2f:03:00:54:bb:f5:0f:18:a5:b6:f2:70:6e:47:5e:a1:5e:
         78:20:88:a7:f6:24:a3:5d:af:db:ec:98:d0:d8:85:5f:bf:d1:
         a2:6f:61:17:e7:ba:be:22:1f:4a:d1:e4:26:02:6b:f2:28:6e:
         2e:0f:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----