Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3235353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a3235353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          7iB9sooAGIf3e8xKiCffNyqZktsAbEyfNmfFAji7jYM=
Subject key identifier:   1E:2E:8A:EC:60:D0:89:DA:58:A8:31:B5:F9:25:78:C1:0D:20:BB:E9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       19C3A901E0909D5BD7EB13DA5335902A1811F6E6
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3235353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 02:55:04 +0000
ROA not before:           Tue 01 Feb 2022 02:50:04 +0000
ROA not after:            Tue 31 Jan 2023 02:55:04 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:255::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c3:a9:01:e0:90:9d:5b:d7:eb:13:da:53:35:90:2a:18:11:f6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 02:50:04 2022 GMT
            Not After : Jan 31 02:55:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:d6:2b:ca:05:4c:d9:ca:ba:f5:db:21:95:
                    af:73:d1:5a:89:e5:0b:d7:97:89:81:45:6e:a7:e8:
                    b4:6a:4a:c0:7b:19:bc:e8:de:0c:1f:d0:00:1c:55:
                    9c:17:a4:01:c1:7b:fb:f7:36:1e:3d:b9:d3:7c:58:
                    77:bd:e3:cf:8a:36:63:ed:c2:ab:08:1b:49:40:14:
                    3c:3e:42:96:72:bc:42:7d:eb:ad:44:b2:59:8d:de:
                    a0:70:cc:71:b1:8e:43:d1:a2:43:1f:6f:ba:62:fe:
                    64:53:ea:ef:52:10:9c:82:0d:7d:c3:3f:d2:dc:b5:
                    9e:5c:ea:68:b5:53:df:05:a4:d6:25:5f:5f:40:89:
                    bd:e7:a9:a0:66:a3:e1:d6:e5:86:68:6d:4c:f5:00:
                    a1:e7:6c:7e:8e:3a:27:39:5b:4f:52:50:55:5a:b3:
                    b0:24:dd:11:e0:97:ef:ca:6f:cb:bd:26:9a:e2:ba:
                    74:8c:12:b9:3d:5f:6f:93:0e:88:60:05:22:e4:b7:
                    f7:d8:ef:32:2c:83:22:5e:f0:2a:22:41:24:6d:92:
                    de:ed:24:51:5e:46:ee:d0:61:20:ed:c0:b8:b9:f6:
                    ef:ce:e4:b4:92:8a:92:42:24:8d:2c:ee:d7:71:5b:
                    d5:ba:59:e7:ee:84:28:a2:5d:9e:a4:7d:22:54:f9:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2E:8A:EC:60:D0:89:DA:58:A8:31:B5:F9:25:78:C1:0D:20:BB:E9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3235353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:255::/80

    Signature Algorithm: sha256WithRSAEncryption
         b7:8f:4f:b1:28:87:fd:7d:0a:03:c6:1f:38:01:13:bf:14:e1:
         93:a6:0d:6b:15:0b:91:2e:af:08:fa:7a:ec:66:f7:c0:82:73:
         18:00:e4:5e:e9:31:92:05:8f:c0:9b:4f:51:be:4f:70:13:8a:
         fd:10:32:4f:8d:5e:b5:c8:f5:64:89:3a:27:fa:36:70:08:cb:
         1f:1d:75:43:42:ef:8d:fa:3d:62:fa:b7:e2:72:63:bf:ea:24:
         3a:67:e4:e0:79:2b:d2:f2:86:08:2a:c4:84:65:f0:28:f3:f3:
         e0:30:18:dc:06:e8:aa:1c:27:a1:56:fd:03:e7:f4:63:97:29:
         76:e0:e0:30:56:19:27:c3:03:38:f9:c4:39:a4:71:22:95:fe:
         88:20:99:e2:b0:a0:56:59:54:66:65:d6:d4:94:35:2c:7d:86:
         af:e9:1f:66:45:50:78:4b:2f:08:34:de:7a:e7:43:13:b6:a0:
         16:e9:a9:e0:8c:3e:74:ed:19:6c:54:24:2b:f6:99:99:46:e8:
         18:c0:ab:1a:3c:0c:ec:3c:20:d8:9e:ae:6a:2b:70:41:9f:43:
         06:93:99:5e:2d:ba:eb:6f:5f:fc:64:b5:a9:9f:cc:68:3d:44:
         a7:b6:39:fe:dd:91:3a:86:b3:bb:b4:68:5e:7d:a7:5b:25:20:
         d4:70:7d:3e
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUGcOpAeCQnVvX6xPaUzWQKhgR9uYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAxMDI1MDA0WhcNMjMwMTMxMDI1NTA0
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEMyQzdENjJC
Q0EwNTRDRDlDQUJBRjVEQjIxOTVBRjczRDE1QTg5RTUwQkQ3OTc4OTgxNDU2RUE3
RThCNDZBNEFDMDdCMTlCQ0U4REUwQzFGRDAwMDFDNTU5QzE3QTQwMUMxN0JGQkY3
MzYxRTNEQjlEMzdDNTg3N0JERTNDRjhBMzY2M0VEQzJBQjA4MUI0OTQwMTQzQzNF
NDI5NjcyQkM0MjdERUJBRDQ0QjI1OThEREVBMDcwQ0M3MUIxOEU0M0QxQTI0MzFG
NkZCQTYyRkU2NDUzRUFFRjUyMTA5QzgyMEQ3REMzM0ZEMkRDQjU5RTVDRUE2OEI1
NTNERjA1QTRENjI1NUY1RjQwODlCREU3QTlBMDY2QTNFMUQ2RTU4NjY4NkQ0Q0Y1
MDBBMUU3NkM3RThFM0EyNzM5NUI0RjUyNTA1NTVBQjNCMDI0REQxMUUwOTdFRkNB
NkZDQkJEMjY5QUUyQkE3NDhDMTJCOTNENUY2RjkzMEU4ODYwMDUyMkU0QjdGN0Q4
RUYzMjJDODMyMjVFRjAyQTIyNDEyNDZEOTJERUVEMjQ1MTVFNDZFRUQwNjEyMEVE
QzBCOEI5RjZFRkNFRTRCNDkyOEE5MjQyMjQ4RDJDRUVENzcxNUJENUJBNTlFN0VF
ODQyOEEyNUQ5RUE0N0QyMjU0RjlBMkIzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMLH1ivKBUzZyrr12yGVr3PRWonlC9eXiYFFbqfo
tGpKwHsZvOjeDB/QABxVnBekAcF7+/c2Hj2503xYd73jz4o2Y+3CqwgbSUAUPD5C
lnK8Qn3rrUSyWY3eoHDMcbGOQ9GiQx9vumL+ZFPq71IQnIINfcM/0ty1nlzqaLVT
3wWk1iVfX0CJveepoGaj4dblhmhtTPUAoedsfo46JzlbT1JQVVqzsCTdEeCX78pv
y70mmuK6dIwSuT1fb5MOiGAFIuS399jvMiyDIl7wKiJBJG2S3u0kUV5G7tBhIO3A
uLn2787ktJKKkkIkjSzu13Fb1bpZ5+6EKKJdnqR9IlT5orMCAwEAAaOCApowggKW
MB0GA1UdDgQWBBQeLorsYNCJ2lioMbX5JXjBDSC76TAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzEzYTMyMzUzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIBAlUwDQYJKoZIhvcN
AQELBQADggEBALePT7Eoh/19CgPGHzgBE78U4ZOmDWsVC5Eurwj6euxm98CCcxgA
5F7pMZIFj8CbT1G+T3ATiv0QMk+NXrXI9WSJOif6NnAIyx8ddUNC7436PWL6t+Jy
Y7/qJDpn5OB5K9LyhggqxIRl8Cjz8+AwGNwG6KocJ6FW/QPn9GOXKXbg4DBWGSfD
Azj5xDmkcSKV/oggmeKwoFZZVGZl1tSUNSx9hq/pH2ZFUHhLLwg03nrnQxO2oBbp
qeCMPnTtGWxUJCv2mZlG6BjAqxo8DOw8INiermorcEGfQwaTmV4tuutvX/xktamf
zGg9RKe2Of7dkTqGs7u0aF59p1slINRwfT4=
-----END CERTIFICATE-----