Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323232353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a323232353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Q99TbGXMk2yrj2xv7NX0NpNfJj5sooDS80st5Lcuz2k=
Subject key identifier:   B2:12:D7:A7:0A:C7:31:D7:14:DC:CA:6C:43:76:47:2C:78:07:EB:F5
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       05ECD8EFF8FECC5884D425B2FA0B7EF6F9716FC0
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323232353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 22:25:02 +0000
ROA not before:           Tue 01 Feb 2022 22:20:02 +0000
ROA not after:            Tue 31 Jan 2023 22:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:2225::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ec:d8:ef:f8:fe:cc:58:84:d4:25:b2:fa:0b:7e:f6:f9:71:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 22:20:02 2022 GMT
            Not After : Jan 31 22:25:02 2023 GMT
        Subject: CN=3082010A0282010100E1313E8D8512EE8AFAF3FC3E243EBC07ACD58B4E25ED560544758A8C9A8FFF1A6C3CAA94C008D0C5BA9610646DAB3EF83FC2B3A5FC144CFF7B72BC04A144A9995C94DAD5955C4AA86CCA9D0C2B43346321C171633EA8EB2C32861707741BCB27DD2D417B726A8F761E8894C0934023C43C84F2ACB9EE95048E07EDED162E319FCC628F16A2B0A366583539FA086F05073C9B0FBBDBFDF49758C5B4B9B3967595F91E54DEC8C2F562AA5ADBC05B55F98F23FDC00B956A42D2769ADDF5D07B93CAB0AB87C924BEEB2E514B1A9FD6EBF3890F73E1761A343408F97492DA8372FE3374DDA8DE7DF9F0068FA8B282523D40B956B1851C23A4F6A0981FE0A8DA85B4650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:31:3e:8d:85:12:ee:8a:fa:f3:fc:3e:24:3e:
                    bc:07:ac:d5:8b:4e:25:ed:56:05:44:75:8a:8c:9a:
                    8f:ff:1a:6c:3c:aa:94:c0:08:d0:c5:ba:96:10:64:
                    6d:ab:3e:f8:3f:c2:b3:a5:fc:14:4c:ff:7b:72:bc:
                    04:a1:44:a9:99:5c:94:da:d5:95:5c:4a:a8:6c:ca:
                    9d:0c:2b:43:34:63:21:c1:71:63:3e:a8:eb:2c:32:
                    86:17:07:74:1b:cb:27:dd:2d:41:7b:72:6a:8f:76:
                    1e:88:94:c0:93:40:23:c4:3c:84:f2:ac:b9:ee:95:
                    04:8e:07:ed:ed:16:2e:31:9f:cc:62:8f:16:a2:b0:
                    a3:66:58:35:39:fa:08:6f:05:07:3c:9b:0f:bb:db:
                    fd:f4:97:58:c5:b4:b9:b3:96:75:95:f9:1e:54:de:
                    c8:c2:f5:62:aa:5a:db:c0:5b:55:f9:8f:23:fd:c0:
                    0b:95:6a:42:d2:76:9a:dd:f5:d0:7b:93:ca:b0:ab:
                    87:c9:24:be:eb:2e:51:4b:1a:9f:d6:eb:f3:89:0f:
                    73:e1:76:1a:34:34:08:f9:74:92:da:83:72:fe:33:
                    74:dd:a8:de:7d:f9:f0:06:8f:a8:b2:82:52:3d:40:
                    b9:56:b1:85:1c:23:a4:f6:a0:98:1f:e0:a8:da:85:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:12:D7:A7:0A:C7:31:D7:14:DC:CA:6C:43:76:47:2C:78:07:EB:F5
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a323232353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:2225::/80

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:7f:42:37:9a:e7:c9:0f:04:cd:14:7c:7a:e3:f0:0f:42:
         81:de:c7:17:19:80:44:1c:f4:03:ae:67:e8:f7:f3:58:3b:d7:
         6c:f6:94:c5:53:00:9b:2b:9d:7c:b1:d0:e0:18:0b:9c:5e:bb:
         a3:df:d9:d7:7a:88:30:db:16:35:91:9c:dd:a2:8c:d2:30:27:
         bb:89:81:64:78:8f:78:d8:b2:e5:39:08:4c:85:13:ee:b2:11:
         af:0c:07:40:c9:dc:d3:05:72:01:c3:35:51:96:b6:e0:aa:17:
         83:b3:88:b3:5e:99:b8:91:cf:8a:a1:af:11:3a:a3:3c:91:21:
         e5:ac:36:d5:b8:41:b4:bf:11:20:20:4b:50:37:e1:98:66:c8:
         b0:4a:b5:83:3f:dc:49:23:1f:99:80:f5:d7:33:c9:cf:77:54:
         10:67:40:b9:3a:60:37:9f:b1:a5:54:13:d1:ee:b9:6f:db:a3:
         bc:8f:6a:44:0e:cd:81:c0:92:38:bd:76:f4:e3:f2:3e:7b:d0:
         e0:0a:d8:2e:9c:9c:8d:1d:97:35:0b:e2:05:08:c4:4f:8f:7a:
         79:a1:0c:55:36:01:2e:b6:3b:27:a7:ce:1f:79:cb:a2:9b:13:
         f4:6f:7b:51:35:7a:0f:84:8e:69:18:f5:44:6d:05:6d:e2:8c:
         fa:9d:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----