Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3532353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a3532353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          ZU9KBlAAiRabSAPNzRoBJSag1JkVbj+gu/8JEAcHrYY=
Subject key identifier:   9F:C5:41:70:21:43:FD:3B:A1:86:FB:05:EF:15:14:13:1E:37:85:30
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       367CB5BD5D2172287E69921C831383EDF91163D4
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3532353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 05:25:02 +0000
ROA not before:           Tue 01 Feb 2022 05:20:02 +0000
ROA not after:            Tue 31 Jan 2023 05:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:525::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7c:b5:bd:5d:21:72:28:7e:69:92:1c:83:13:83:ed:f9:11:63:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 05:20:02 2022 GMT
            Not After : Jan 31 05:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e9:0e:8f:d4:83:66:13:7b:b3:ac:98:8d:86:
                    42:70:6b:bc:c8:f8:59:e7:ae:36:6a:35:9b:9f:9c:
                    b6:4c:8c:30:de:15:48:dc:54:ae:c0:c5:a0:e3:60:
                    a2:ad:d8:3d:e5:e7:79:57:c6:6f:dc:02:c5:ad:79:
                    a5:36:bb:37:98:93:af:be:6f:72:e0:56:90:5a:24:
                    ae:f0:d0:3b:b3:cd:e4:f3:ce:53:7b:83:08:c0:4f:
                    6d:59:cc:fa:7c:1f:65:29:f0:b3:ee:00:fc:cd:03:
                    7a:31:df:45:c5:9e:fb:0b:5d:65:84:d4:f7:df:7b:
                    2c:3a:0d:29:67:37:27:d5:40:08:cf:f0:79:4e:b8:
                    a3:f9:5b:7c:f2:05:12:36:b6:2f:ce:4e:1b:9f:e3:
                    cb:34:21:82:eb:f9:a3:ae:32:ba:e8:d4:36:7d:b2:
                    a4:92:7b:bc:63:dd:51:7a:12:5e:1e:c8:88:dc:98:
                    4c:ce:62:fa:56:77:38:ec:1e:0e:57:89:07:f1:43:
                    01:2d:0d:97:88:51:f4:5a:d3:0d:dc:0f:c8:ed:61:
                    7d:db:f1:a0:ef:a1:54:07:0d:f6:87:e7:fe:a9:81:
                    4b:84:d3:96:aa:fd:26:87:2f:55:0e:55:ac:18:3c:
                    5a:61:4b:93:8e:c6:e0:88:7b:f4:b3:69:c4:ba:d0:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:41:70:21:43:FD:3B:A1:86:FB:05:EF:15:14:13:1E:37:85:30
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3532353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:525::/80

    Signature Algorithm: sha256WithRSAEncryption
         4e:2e:25:80:cb:4f:23:ab:ea:71:1d:a4:de:61:1c:64:b0:f1:
         bf:97:9a:32:30:07:3a:ff:4a:d5:81:47:81:5e:e5:4c:1d:ea:
         2f:91:a3:85:c5:24:ad:8b:84:ca:30:8d:85:24:1a:dd:61:2d:
         98:df:ac:6f:58:1a:78:74:b8:e6:89:bf:5a:0d:d3:a9:48:31:
         89:5e:b3:70:f7:9c:fd:ad:46:51:2c:86:d7:b7:2f:7c:60:3b:
         d2:f2:ec:cf:18:96:b3:50:c6:c4:74:7d:22:cb:b1:70:27:ff:
         8c:81:2e:f9:45:1a:b7:92:97:0e:ba:02:41:c4:39:17:1f:dd:
         f9:75:4a:e0:c4:5c:cb:33:50:47:16:07:3e:8e:42:8f:aa:21:
         b6:f8:5f:fd:7a:36:5f:a6:15:e7:83:d0:96:55:4c:a6:49:d7:
         2b:05:28:ac:f7:37:82:cc:02:20:eb:8a:71:02:73:4c:0c:bf:
         98:91:b8:d4:4d:a5:cc:ab:fe:df:07:a2:25:8f:ce:89:e8:f1:
         82:6a:99:18:81:8f:a8:f7:a3:9e:a3:5f:e3:c5:27:59:10:75:
         b8:6b:a3:25:3f:ec:66:7d:58:10:81:68:dc:22:54:dc:da:c6:
         a9:18:df:ab:2b:06:73:c6:5a:fe:67:fe:ce:dc:41:6e:fd:0c:
         81:d3:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----