Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a313332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          IBmomJom8BaXLrVcjbSseu6e10MljbdCqGAgdBGc11Y=
Subject key identifier:   E7:CF:8D:AB:08:39:AE:F1:26:7D:AB:B4:25:01:42:28:CB:4A:36:FA
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       71F4F4FF81B918A9A4BC9696CF4155BFE036A258
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 13:25:02 +0000
ROA not before:           Tue 01 Feb 2022 13:20:02 +0000
ROA not after:            Tue 31 Jan 2023 13:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:1325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f4:f4:ff:81:b9:18:a9:a4:bc:96:96:cf:41:55:bf:e0:36:a2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 13:20:02 2022 GMT
            Not After : Jan 31 13:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:fe:8b:94:02:a0:4d:31:dd:bd:78:9c:a2:
                    cc:1a:4b:0c:49:80:1d:8a:0d:91:8b:09:38:f7:30:
                    31:17:2d:2f:22:b0:a2:35:f4:ef:89:7d:fb:15:f5:
                    b8:15:72:f1:b3:73:9f:e4:0b:36:3b:a0:21:06:31:
                    89:d3:b2:8e:c7:1b:c7:e4:a9:86:69:06:08:47:04:
                    4a:3a:e9:c7:ea:c6:8d:2b:29:8c:91:18:35:d1:ee:
                    4f:d8:4b:bd:a3:8b:46:88:84:1c:72:de:06:9e:23:
                    6f:95:ea:fc:2f:e4:be:e4:ec:d3:43:01:80:04:47:
                    99:20:1f:b6:92:61:93:8a:57:98:c1:c0:5c:8e:2c:
                    c6:48:d9:d4:f8:a3:c5:e9:19:98:b0:02:36:2e:7e:
                    b9:f5:a0:76:f0:ce:bc:aa:a5:98:be:7c:68:2d:b0:
                    91:14:df:2a:8b:41:f9:89:78:13:8f:80:e6:02:10:
                    f4:10:9b:72:46:21:e3:6a:fb:3d:93:d4:a6:de:1b:
                    bb:89:cd:68:8a:3b:34:72:3b:25:af:38:95:39:32:
                    bf:e7:af:75:5c:41:36:6a:f1:fa:56:df:d5:0b:74:
                    10:4a:bb:96:5c:84:7a:2d:3c:18:9a:90:d7:28:05:
                    16:19:33:a8:a4:59:04:57:dc:a3:92:9d:cb:9d:ad:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CF:8D:AB:08:39:AE:F1:26:7D:AB:B4:25:01:42:28:CB:4A:36:FA
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:1325::/80

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:61:14:c8:46:26:42:65:22:3c:51:70:88:a2:fe:5a:a3:
         d4:09:06:50:d7:d8:99:b5:62:d4:a4:a0:c4:56:5a:0e:a5:01:
         98:1c:b9:38:d4:f0:1a:89:f2:52:35:6f:2e:87:8a:b5:9d:51:
         a9:c4:de:20:a0:1a:79:78:d5:71:ca:08:01:f4:ef:97:f8:63:
         41:c1:3d:5a:8b:c3:29:d1:fa:1f:d5:6b:98:96:6c:c7:09:fa:
         51:d7:c6:fc:51:e3:6f:aa:26:b8:c9:6b:66:6b:1a:bc:b7:b6:
         d1:5e:95:d5:14:0b:cb:2a:e0:6c:e1:84:36:61:ce:73:8e:27:
         32:7d:de:a6:a0:88:51:bc:fb:9f:ac:f1:1c:b2:d1:be:b0:73:
         6e:67:65:b1:79:cb:a9:db:49:e5:01:ca:2a:90:2d:f4:4a:5b:
         99:1e:1a:0e:6b:3b:69:36:0f:04:c4:6e:de:50:04:a7:53:9e:
         1c:6e:da:04:78:66:c4:ae:e8:c0:68:8a:5f:17:81:f4:5e:80:
         51:bf:3e:d1:4d:2e:1c:03:16:55:75:77:d0:c7:d8:40:92:35:
         03:24:4d:a3:e8:a1:ed:54:c6:1c:11:99:1b:6e:89:1c:2d:01:
         e5:b5:da:d3:ca:82:20:3a:65:00:ef:f6:24:99:23:93:d8:8f:
         97:bc:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----