Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313734353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a313734353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          0NdZHjs8S4ufGZ97LuCvLXefzF0dPDSzwMZOvhyoyvM=
Subject key identifier:   BD:7F:B6:E9:7A:31:DB:8A:9C:58:66:21:DF:B8:59:3D:E3:51:EF:62
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       57A8EA6AEFBAD0CDB6E576CFA160F99E8391D365
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313734353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 17:45:02 +0000
ROA not before:           Tue 01 Feb 2022 17:40:02 +0000
ROA not after:            Tue 31 Jan 2023 17:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:1745::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a8:ea:6a:ef:ba:d0:cd:b6:e5:76:cf:a1:60:f9:9e:83:91:d3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 17:40:02 2022 GMT
            Not After : Jan 31 17:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:86:dd:49:13:4c:32:75:a6:37:ce:0a:65:
                    94:0e:dc:3c:51:a2:a8:b0:dc:06:2e:17:10:2e:9d:
                    a7:61:f9:2c:dd:5b:6d:aa:66:57:0c:67:84:02:06:
                    76:2b:1b:f6:25:5d:ad:55:a6:e0:0e:fe:08:c7:5f:
                    fb:bf:15:f4:26:4c:5b:06:4f:21:78:f5:2a:64:30:
                    3c:37:7e:ce:32:78:86:ea:ea:8b:12:e6:79:e7:8c:
                    58:80:15:5d:13:49:ad:79:ee:54:1d:49:9c:b7:f8:
                    aa:6d:cd:02:76:b9:33:df:a8:ea:b9:f8:2d:4e:6f:
                    c8:b8:5e:9f:79:e1:bd:ea:08:e3:fa:9d:db:66:34:
                    53:64:aa:1c:33:77:82:57:c3:a9:f0:5b:d6:1e:4f:
                    04:63:a0:2f:28:6e:40:da:40:49:66:26:6a:8e:a2:
                    d8:53:83:df:ca:25:ef:db:88:50:0c:a8:c3:58:03:
                    17:84:5b:4f:cd:00:38:1c:75:90:36:5b:7c:1c:db:
                    08:d8:af:d4:f2:06:6a:76:61:67:97:5c:39:ea:b9:
                    c7:77:92:69:ae:d3:67:e1:16:9a:c3:95:a3:bd:52:
                    8a:9d:6f:c4:d7:25:69:aa:72:6e:52:0c:c6:23:ab:
                    3a:fb:32:8e:13:fe:d2:b2:f6:a2:2a:7a:1c:3f:ba:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7F:B6:E9:7A:31:DB:8A:9C:58:66:21:DF:B8:59:3D:E3:51:EF:62
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a313734353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:1745::/80

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:e9:8b:4b:71:1f:e3:ef:7b:fe:b8:c7:3f:71:c8:0e:0d:
         15:44:b7:eb:63:5f:45:75:3f:4f:6c:0d:45:f4:12:1e:c9:d2:
         c9:cb:75:d0:a2:c9:60:7f:0f:59:c0:5d:11:a3:c5:cd:84:3c:
         5e:62:be:a9:1a:a2:83:8d:2c:ba:23:f2:65:10:e7:68:0c:83:
         9d:e8:ac:1c:1f:6e:09:14:4c:15:2b:c5:15:26:3d:25:cf:02:
         b0:19:de:9e:0f:33:7e:55:2d:66:80:e7:d4:6b:ac:f5:32:24:
         83:34:1b:ef:24:26:ac:3c:57:51:d9:95:cd:fd:47:72:28:90:
         6d:5f:d3:a4:14:71:e7:e1:05:89:a4:9b:a9:12:c9:4d:64:a2:
         26:5e:34:cf:26:68:bb:a7:91:66:9e:93:54:19:ba:79:2e:c8:
         c7:3b:3b:07:44:85:76:85:4d:c2:e9:8c:c0:c9:c0:09:0b:4d:
         47:27:c5:4e:54:4c:75:eb:65:a8:92:2e:67:0f:f2:35:9f:49:
         83:07:c0:3d:b9:bc:99:97:dd:60:f4:bc:48:6a:60:09:5d:6b:
         bb:e6:a2:89:86:b2:45:82:88:35:68:31:3c:be:f2:54:79:35:
         c7:7b:60:07:46:e1:eb:c0:b3:94:8c:17:7e:be:a9:8e:5c:34:
         42:72:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----