Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a3430353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3133313a3430353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          4qHl+a+HXwK4IDJVD/J/JBCCfJyMhJgcuesHkBLDcA4=
Subject key identifier:   82:81:F2:1D:EB:13:BD:1B:E5:1F:0B:4F:AF:45:14:7D:58:CD:80:88
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5B2CB7AF60EC338C7A0E3749E9C4EDAED04AC6D7
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a3430353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 31 Jan 2022 04:05:02 +0000
ROA not before:           Mon 31 Jan 2022 04:00:02 +0000
ROA not after:            Mon 30 Jan 2023 04:05:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:131:405::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2c:b7:af:60:ec:33:8c:7a:0e:37:49:e9:c4:ed:ae:d0:4a:c6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Jan 31 04:00:02 2022 GMT
            Not After : Jan 30 04:05:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:08:f5:c6:da:fb:7c:11:77:7f:41:0e:f5:
                    26:3c:07:5e:9a:f2:12:88:db:c9:40:3a:3c:3d:e1:
                    d8:f4:bf:15:a5:2e:3d:cc:d9:0e:d3:e5:a9:54:5e:
                    52:16:25:8a:82:07:fd:ed:0f:95:99:c3:2b:52:3a:
                    da:28:cc:74:97:f7:23:b8:71:38:a0:89:30:6b:a2:
                    c1:6a:36:68:ae:cb:1f:c8:43:2d:b4:16:87:ce:37:
                    b8:e4:75:62:37:35:94:e4:30:ab:50:19:be:62:ed:
                    19:23:42:31:52:57:b1:a0:41:6c:f5:d9:bb:a2:9a:
                    4c:dc:ad:9d:27:53:a1:91:bd:30:f8:0f:df:ba:10:
                    16:46:fd:a1:ae:78:ba:41:9d:a3:4a:a7:9f:0a:2f:
                    e1:74:54:9d:d5:28:61:f3:25:a9:1d:24:b0:f1:70:
                    ad:90:a3:59:bf:a7:df:d7:9f:74:8e:80:61:36:43:
                    8b:e3:67:03:81:b3:b7:06:33:47:ca:21:81:8c:fd:
                    5d:b6:6f:11:eb:0b:55:62:e2:0a:60:1a:66:d7:9e:
                    e6:33:16:5e:83:cc:2f:17:83:c1:52:6c:d1:e9:98:
                    50:28:ab:a6:62:ea:cd:cc:25:85:d4:b8:24:b5:f3:
                    d7:6d:38:15:c0:4a:d0:32:3f:49:51:e4:95:d8:79:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:F2:1D:EB:13:BD:1B:E5:1F:0B:4F:AF:45:14:7D:58:CD:80:88
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3133313a3430353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:131:405::/80

    Signature Algorithm: sha256WithRSAEncryption
         d0:d2:7b:0d:62:87:c8:e2:ea:6c:65:50:6e:c7:4b:0a:59:38:
         3a:05:80:7c:1b:b3:6b:d4:45:c5:da:8e:e0:e5:69:4d:a8:a1:
         f0:56:ba:55:42:2f:5e:3f:a7:f1:b9:26:e3:ec:f2:9e:35:f2:
         9d:f1:66:18:0b:98:a6:7a:7e:64:95:d6:e6:eb:a6:3c:bc:d1:
         1c:3b:df:42:64:b9:4e:90:9e:c5:68:11:7d:ad:bf:38:04:e5:
         b6:02:80:b0:df:be:04:7d:29:c6:28:ed:bf:6c:60:7c:fc:f9:
         77:aa:88:4d:b8:89:51:c3:ff:72:27:35:2c:7f:b9:2a:a4:1c:
         4f:6a:62:62:33:66:62:2a:e4:8f:20:dd:a1:11:47:54:d1:54:
         b9:92:5b:b9:a3:7c:7f:f6:82:b4:d0:fb:30:da:f5:6d:6d:6b:
         d6:4c:e3:91:cb:af:4b:bf:9e:70:de:d0:6f:76:31:55:d5:4f:
         cc:42:64:a1:29:8c:6e:35:ce:bd:b2:c2:1d:7a:95:18:4f:83:
         b1:2d:62:7d:f4:e8:fb:5e:59:7e:25:0b:58:ab:eb:8f:4a:4c:
         57:07:06:d6:f5:3b:49:27:cc:eb:42:ae:1e:32:8b:c8:f5:ba:
         5c:07:91:8c:67:e4:33:4b:5c:09:34:87:83:a8:12:11:08:c6:
         77:50:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----