Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313533353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a313533353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          xgN7XIgAOxzKc03bAboeqwI0YoTz9kkeZUYUNSxuNuQ=
Subject key identifier:   9F:0E:D4:64:CE:73:2B:CB:CF:24:5F:96:1B:25:CC:99:19:0D:11:5A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4D8EF8337A264AD602BF97E7CD0C1026E7D43214
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313533353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 15:35:01 +0000
ROA not before:           Tue 01 Feb 2022 15:30:01 +0000
ROA not after:            Tue 31 Jan 2023 15:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:1535::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8e:f8:33:7a:26:4a:d6:02:bf:97:e7:cd:0c:10:26:e7:d4:32:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 15:30:01 2022 GMT
            Not After : Jan 31 15:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:46:c3:a2:f3:83:fc:5b:7d:e1:fc:54:9a:7f:
                    df:ee:c6:9d:b9:d3:bb:e4:ea:d0:43:ff:77:fb:1f:
                    a1:5b:1e:67:92:4e:36:f9:69:10:8c:ab:26:82:30:
                    76:40:58:79:33:8f:b9:20:e2:f6:4a:17:14:7b:1a:
                    63:1d:02:27:cb:0b:ad:bd:65:d6:70:12:de:01:b5:
                    fe:c2:ce:1d:7c:b2:65:34:a6:93:f4:55:68:84:6e:
                    67:68:3f:00:e8:51:b4:8b:07:c0:f7:c0:34:f5:7c:
                    0f:60:48:e2:ae:e9:d6:4b:62:ec:fb:ef:96:1c:95:
                    56:52:a8:c9:11:aa:d2:80:e2:60:eb:a1:88:97:99:
                    3f:af:41:3e:3d:8a:18:ef:6e:1e:62:c2:21:e1:c1:
                    a5:ae:14:0a:a5:f2:a9:1a:78:12:84:c6:f9:e0:67:
                    b3:86:33:d1:43:d5:12:58:b0:47:6d:b2:11:e6:3f:
                    44:09:64:5c:2b:15:fa:6e:53:e3:ae:5c:63:6e:0c:
                    c5:48:3a:95:1b:10:3e:9a:f2:25:8e:58:7f:4a:77:
                    09:5b:38:a4:4e:64:80:4f:86:51:54:a0:11:17:98:
                    91:a1:8b:cb:1a:40:22:d4:98:8f:76:df:e7:6e:45:
                    7e:6e:15:db:de:1e:fe:55:22:e6:4b:17:a0:b2:da:
                    1a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0E:D4:64:CE:73:2B:CB:CF:24:5F:96:1B:25:CC:99:19:0D:11:5A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313533353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:1535::/80

    Signature Algorithm: sha256WithRSAEncryption
         33:2b:0f:77:8b:99:ba:52:e2:8c:18:02:d1:72:5a:b9:8c:63:
         b1:66:ee:30:1e:46:a2:d4:a5:fa:0d:6d:61:a7:50:a1:29:05:
         34:6a:7e:bb:5f:6d:29:3e:c4:45:44:f1:6d:6a:a1:44:fd:d8:
         6b:e3:11:fc:f2:6a:20:4c:dc:c3:71:8f:20:06:bc:bf:9c:26:
         07:3e:7c:17:88:1d:c2:5e:78:4e:38:04:6c:69:2e:b5:ee:f5:
         ae:7e:73:76:9a:bf:50:19:04:56:bb:62:da:d1:ba:6a:f4:ed:
         f0:bd:fb:51:76:c7:df:84:18:8b:a1:1e:cf:0c:03:fe:2b:ac:
         8e:0a:92:9f:dd:c8:fe:f1:23:8e:a3:2c:8c:5c:27:3e:e9:d4:
         a7:54:f3:46:65:98:61:bb:fd:70:8b:4c:40:da:b9:b3:ea:2c:
         6d:b3:a1:0a:a1:e9:35:5a:e8:cb:f3:48:8e:67:27:7e:9e:5e:
         65:65:03:5b:ca:a1:3a:18:63:69:e4:d9:4a:a3:3e:48:ca:f3:
         94:3b:1c:9b:4e:37:43:cb:fb:be:4c:46:85:75:45:99:95:01:
         87:9b:10:0f:f9:d7:d5:bf:b1:c4:24:be:d2:b6:ec:36:40:29:
         a4:08:a8:db:6d:38:c2:25:19:83:bc:93:82:a4:2c:89:b5:aa:
         05:56:25:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----