Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a34353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a34353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          YglzpFw50csjFvSCiCErwlPVsBuhUqWvAwvJ21TZAMo=
Subject key identifier:   00:B4:7F:1B:F4:26:ED:D6:01:22:A7:5D:19:D2:45:1E:3B:79:8B:1E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       119396F59E3E5274B7669AEDFF9BCDEE095CBBCC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a34353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 00:45:01 +0000
ROA not before:           Tue 01 Feb 2022 00:40:01 +0000
ROA not after:            Tue 31 Jan 2023 00:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:45::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:93:96:f5:9e:3e:52:74:b7:66:9a:ed:ff:9b:cd:ee:09:5c:bb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 00:40:01 2022 GMT
            Not After : Jan 31 00:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:c4:99:59:0f:53:0c:4d:e6:d8:91:b5:80:
                    27:8b:61:b8:7c:86:05:fd:a0:7a:98:38:79:83:71:
                    69:58:f8:9d:ae:66:d6:a8:25:6d:7a:53:6b:52:cb:
                    c6:c8:39:87:46:06:6d:b5:3e:2c:68:f2:c9:2b:39:
                    36:4e:fb:70:12:ed:e7:6a:cf:22:8d:e3:4e:0a:39:
                    e8:2d:74:fc:ae:a0:77:22:f4:7d:0d:ba:a5:0d:2c:
                    7f:07:4e:c9:aa:74:48:17:32:a6:1e:42:d7:52:3f:
                    af:91:ba:52:f8:dc:d1:6c:92:91:68:4b:89:f8:1a:
                    d6:ca:ed:44:44:e4:24:79:d5:8c:89:b7:b6:b3:dd:
                    24:b0:08:a5:db:2d:ab:c0:c5:60:57:09:5b:21:da:
                    b0:e8:41:fe:69:ba:95:8d:81:60:00:e3:06:a2:5f:
                    48:8a:01:83:01:e9:d9:b7:3b:b7:af:c5:7e:8a:fb:
                    8b:6d:43:87:91:cd:67:a2:e1:b9:ff:25:cf:b6:1e:
                    fd:c9:dd:a0:b0:b3:bd:a6:7e:76:87:3e:e3:0a:53:
                    44:9c:4c:d3:4c:4e:33:b6:47:71:7f:e9:3d:de:91:
                    1a:df:7c:ab:91:8e:c9:69:f7:e8:0f:7c:59:20:6a:
                    6f:62:7a:ca:ac:ec:dd:67:2b:a1:9b:a6:32:51:9c:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:7F:1B:F4:26:ED:D6:01:22:A7:5D:19:D2:45:1E:3B:79:8B:1E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a34353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:45::/80

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:3a:84:79:46:a6:5b:14:48:b9:4b:5c:19:79:c3:c9:d3:
         0a:14:60:4b:05:52:c7:2a:9e:95:f7:80:d7:74:a0:9e:47:a2:
         7a:22:f6:55:93:73:f5:ab:05:fd:52:e3:0c:0c:4b:eb:2c:06:
         4b:11:d2:aa:16:7f:4a:a4:69:5f:18:d8:de:c9:ff:49:f4:2a:
         f9:3c:c0:5c:58:7f:7e:1a:d3:b2:14:66:46:a4:c7:38:a1:00:
         ed:ae:6c:9d:5b:36:d6:4f:98:46:b6:bd:9a:83:a1:e0:eb:5c:
         53:10:dd:dc:9d:ce:91:d7:cd:1f:c0:03:20:a0:a9:72:08:b6:
         6b:45:0f:c4:aa:6f:f3:96:46:c0:1f:a9:e9:66:be:03:e2:ac:
         9e:cd:a4:59:09:eb:f3:cd:56:d7:ee:8e:18:5f:ab:1c:0a:81:
         40:af:e6:b3:a5:44:f3:1b:e4:97:c8:0e:9c:15:36:ee:b3:8c:
         dd:85:41:7f:c2:d6:62:b0:a3:a7:44:1c:e6:33:c4:9e:9c:48:
         ab:7a:e3:0e:3f:c1:f5:23:b9:73:82:24:c5:3d:56:05:2e:4e:
         1b:3f:5f:74:1b:41:40:5e:3c:64:06:10:4e:74:28:49:6a:bf:
         97:e5:13:1b:fc:28:d7:d7:6b:41:a9:c6:f8:ac:7c:b7:34:2f:
         0a:86:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----