Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3231303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a3231303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          t4ogiP516wzAHkdI2+g2w+td4ffr4/6CTxhQq/da//A=
Subject key identifier:   78:06:E8:8E:FF:1F:54:99:80:0A:C8:C7:0D:5B:E0:32:21:6A:A8:5A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       42E055BD2D5F7972FB9BA1E58F9EE0C543D5BE02
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3231303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 02:10:02 +0000
ROA not before:           Tue 01 Feb 2022 02:05:02 +0000
ROA not after:            Tue 31 Jan 2023 02:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:210::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:55:bd:2d:5f:79:72:fb:9b:a1:e5:8f:9e:e0:c5:43:d5:be:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 02:05:02 2022 GMT
            Not After : Jan 31 02:10:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:42:d2:8c:48:fa:4c:27:a3:db:e0:03:11:
                    f9:ec:08:ae:c6:bf:d2:e8:95:32:94:e7:ba:fc:d7:
                    f2:b2:f4:40:82:c9:9a:46:04:2b:c2:03:76:11:1f:
                    fa:0b:b8:06:10:4d:8a:72:70:76:f2:9e:8f:60:8e:
                    dc:83:22:b8:72:05:43:46:3b:7c:31:7c:1f:6f:61:
                    6b:c4:25:d7:49:40:03:de:52:83:0d:de:14:ab:67:
                    fd:fa:00:35:ed:f8:66:9f:a5:5d:16:40:e9:f3:41:
                    27:a9:5d:04:42:cc:40:49:58:48:bb:20:4b:4e:19:
                    85:1a:78:33:e3:05:2b:25:10:34:a2:e9:ea:05:f8:
                    cc:4f:3c:19:4e:3c:53:62:73:58:d4:3d:cf:e5:d7:
                    cd:fb:65:86:48:7a:a2:e8:5c:4d:a4:25:21:be:d8:
                    f7:ee:98:95:de:67:1d:3e:0c:78:80:fc:e3:6d:54:
                    07:b7:8e:b2:6b:bc:43:2e:4c:33:9a:f9:00:65:5c:
                    e3:ff:ff:a0:c3:90:ad:6a:00:ef:b6:b1:5e:8c:8a:
                    22:2c:6c:ca:09:54:9f:94:89:f1:ef:de:ae:eb:8b:
                    8c:b9:30:48:f9:5c:92:bc:12:79:ca:b0:51:26:d9:
                    25:b7:26:25:28:4b:fd:3e:ca:59:95:39:2e:5d:b5:
                    dd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:06:E8:8E:FF:1F:54:99:80:0A:C8:C7:0D:5B:E0:32:21:6A:A8:5A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3231303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:210::/80

    Signature Algorithm: sha256WithRSAEncryption
         6c:c1:7d:5f:c4:0b:26:2c:eb:92:e0:a9:ae:02:94:89:68:d4:
         d3:9a:b6:d5:34:c6:64:20:c3:f9:85:72:92:49:4e:3a:fb:00:
         9b:93:e8:d7:bd:15:06:a7:00:8c:6a:70:ef:4d:8c:d1:fc:4e:
         98:6f:54:59:6f:3c:40:cc:0a:41:89:5d:a3:f3:df:f3:13:4b:
         2f:58:9a:5b:2e:82:ac:85:e2:58:c9:d9:9e:bd:85:a0:1c:03:
         37:3c:f1:b5:5e:53:06:2b:90:57:5f:6e:b7:d0:08:9f:9f:ba:
         71:e8:87:ca:24:49:e5:b3:e6:d7:0f:2b:77:a5:5c:1c:a0:54:
         33:3a:0c:b1:a6:8f:72:3b:c0:2a:ca:89:85:82:d3:e3:26:37:
         5f:2d:d3:d4:f0:16:70:b9:40:1f:18:0f:11:ef:98:ef:23:35:
         e5:31:1a:09:c0:53:50:a4:cc:ba:65:96:da:96:0b:3b:2f:57:
         55:85:6b:fa:54:47:76:5e:30:84:03:94:f1:10:95:6a:1d:fc:
         7f:71:88:57:6a:db:4d:eb:d6:0c:0a:a1:a8:ed:52:c5:89:62:
         79:f9:c8:54:e9:a8:35:b8:43:b3:52:fa:af:e5:dd:bc:09:e0:
         3a:0d:1e:c7:cb:48:92:fc:97:1d:8a:10:88:2e:93:90:0f:c3:
         60:ef:23:22
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUQuBVvS1feXL7m6Hlj57gxUPVvgIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAxMDIwNTAyWhcNMjMwMTMxMDIxMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMENGNDg0MkQy
OEM0OEZBNEMyN0EzREJFMDAzMTFGOUVDMDhBRUM2QkZEMkU4OTUzMjk0RTdCQUZD
RDdGMkIyRjQ0MDgyQzk5QTQ2MDQyQkMyMDM3NjExMUZGQTBCQjgwNjEwNEQ4QTcy
NzA3NkYyOUU4RjYwOEVEQzgzMjJCODcyMDU0MzQ2M0I3QzMxN0MxRjZGNjE2QkM0
MjVENzQ5NDAwM0RFNTI4MzBEREUxNEFCNjdGREZBMDAzNUVERjg2NjlGQTU1RDE2
NDBFOUYzNDEyN0E5NUQwNDQyQ0M0MDQ5NTg0OEJCMjA0QjRFMTk4NTFBNzgzM0Uz
MDUyQjI1MTAzNEEyRTlFQTA1RjhDQzRGM0MxOTRFM0M1MzYyNzM1OEQ0M0RDRkU1
RDdDREZCNjU4NjQ4N0FBMkU4NUM0REE0MjUyMUJFRDhGN0VFOTg5NURFNjcxRDNF
MEM3ODgwRkNFMzZENTQwN0I3OEVCMjZCQkM0MzJFNEMzMzlBRjkwMDY1NUNFM0ZG
RkZBMEMzOTBBRDZBMDBFRkI2QjE1RThDOEEyMjJDNkNDQTA5NTQ5Rjk0ODlGMUVG
REVBRUVCOEI4Q0I5MzA0OEY5NUM5MkJDMTI3OUNBQjA1MTI2RDkyNUI3MjYyNTI4
NEJGRDNFQ0E1OTk1MzkyRTVEQjVERDA3MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM9IQtKMSPpMJ6Pb4AMR+ewIrsa/0uiVMpTnuvzX
8rL0QILJmkYEK8IDdhEf+gu4BhBNinJwdvKej2CO3IMiuHIFQ0Y7fDF8H29ha8Ql
10lAA95Sgw3eFKtn/foANe34Zp+lXRZA6fNBJ6ldBELMQElYSLsgS04ZhRp4M+MF
KyUQNKLp6gX4zE88GU48U2JzWNQ9z+XXzftlhkh6ouhcTaQlIb7Y9+6Yld5nHT4M
eID8421UB7eOsmu8Qy5MM5r5AGVc4///oMOQrWoA77axXoyKIixsyglUn5SJ8e/e
ruuLjLkwSPlckrwSecqwUSbZJbcmJShL/T7KWZU5Ll213QcCAwEAAaOCApowggKW
MB0GA1UdDgQWBBR4BuiO/x9UmYAKyMcNW+AyIWqoWjAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzEzYTMyMzEzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIBAhAwDQYJKoZIhvcN
AQELBQADggEBAGzBfV/ECyYs65Lgqa4ClIlo1NOattU0xmQgw/mFcpJJTjr7AJuT
6Ne9FQanAIxqcO9NjNH8TphvVFlvPEDMCkGJXaPz3/MTSy9YmlsugqyF4ljJ2Z69
haAcAzc88bVeUwYrkFdfbrfQCJ+funHoh8okSeWz5tcPK3elXBygVDM6DLGmj3I7
wCrKiYWC0+MmN18t09TwFnC5QB8YDxHvmO8jNeUxGgnAU1CkzLplltqWCzsvV1WF
a/pUR3ZeMIQDlPEQlWod/H9xiFdq203r1gwKoajtUsWJYnn5yFTpqDW4Q7NS+q/l
3bwJ4DoNHsfLSJL8lx2KEIguk5APw2DvIyI=
-----END CERTIFICATE-----