Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3631303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230313a3631303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /uQ9FqbHb35bOtRPqmIX9SnnAQPpV9aMkj7uZ7sC5Hk=
Subject key identifier:   D7:B2:AB:5A:2E:B9:A3:6B:53:6B:7B:28:EF:A4:46:94:45:F6:00:6F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       461101CB128B6F103E3E5CD2D5F28F21FA38924A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3631303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 01 Feb 2022 06:10:01 +0000
ROA not before:           Tue 01 Feb 2022 06:05:01 +0000
ROA not after:            Tue 31 Jan 2023 06:10:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:201:610::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:11:01:cb:12:8b:6f:10:3e:3e:5c:d2:d5:f2:8f:21:fa:38:92:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  1 06:05:01 2022 GMT
            Not After : Jan 31 06:10:01 2023 GMT
        Subject: CN=3082010A0282010100AE71C1AA912F5A8369E0A68031F9EAA78F3F484700F56FFF57B4E4EDCFF1643969FA65874055857EE6C09B434E2F64B44EF0206FCA00DB526A4683E78E1D232D2C39F3F31401432AA0BCFDB3AC0EEA5555BB0B9D7E8E1F3F5BA728F95A6546D56F97243F5A0838306792D68291A8520F51A230E1FFE5C7C30EF0D605B55E867C7DD8CB636A49E01E49FD44601A99D580DEEEBAC24A4301F3A3AAE35A1CF86998E33822CF09968887F7D3AACDACBFE6D7AE8E5C29D321A85095448FAA6B14AFE99E3BB9C078743355D21243C0E8C621E3A57E3C74051386EEECFCE885EA6C1B8D609268934383684F2F0C5E1A4E601C915BD8E625697BFB785523708639C76B9F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:c1:aa:91:2f:5a:83:69:e0:a6:80:31:f9:
                    ea:a7:8f:3f:48:47:00:f5:6f:ff:57:b4:e4:ed:cf:
                    f1:64:39:69:fa:65:87:40:55:85:7e:e6:c0:9b:43:
                    4e:2f:64:b4:4e:f0:20:6f:ca:00:db:52:6a:46:83:
                    e7:8e:1d:23:2d:2c:39:f3:f3:14:01:43:2a:a0:bc:
                    fd:b3:ac:0e:ea:55:55:bb:0b:9d:7e:8e:1f:3f:5b:
                    a7:28:f9:5a:65:46:d5:6f:97:24:3f:5a:08:38:30:
                    67:92:d6:82:91:a8:52:0f:51:a2:30:e1:ff:e5:c7:
                    c3:0e:f0:d6:05:b5:5e:86:7c:7d:d8:cb:63:6a:49:
                    e0:1e:49:fd:44:60:1a:99:d5:80:de:ee:ba:c2:4a:
                    43:01:f3:a3:aa:e3:5a:1c:f8:69:98:e3:38:22:cf:
                    09:96:88:87:f7:d3:aa:cd:ac:bf:e6:d7:ae:8e:5c:
                    29:d3:21:a8:50:95:44:8f:aa:6b:14:af:e9:9e:3b:
                    b9:c0:78:74:33:55:d2:12:43:c0:e8:c6:21:e3:a5:
                    7e:3c:74:05:13:86:ee:ec:fc:e8:85:ea:6c:1b:8d:
                    60:92:68:93:43:83:68:4f:2f:0c:5e:1a:4e:60:1c:
                    91:5b:d8:e6:25:69:7b:fb:78:55:23:70:86:39:c7:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B2:AB:5A:2E:B9:A3:6B:53:6B:7B:28:EF:A4:46:94:45:F6:00:6F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230313a3631303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:201:610::/80

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:2f:ca:3e:e3:09:dc:95:39:23:4c:7b:16:19:c1:c0:99:
         5f:e2:da:7d:e3:95:ef:ca:1d:0d:30:a6:22:3f:a7:c4:39:ff:
         8a:6e:68:97:9f:79:07:32:57:aa:fd:c7:ac:93:ad:e1:45:0f:
         3b:d3:f8:5a:20:ea:63:5f:2c:31:07:46:eb:b2:44:ef:8f:b6:
         35:5c:d4:e0:25:6b:ed:ac:9d:91:94:74:bc:6c:c9:7c:6d:1d:
         f3:2c:55:31:01:45:e5:a1:d8:9e:b6:24:98:41:e6:8e:1a:39:
         15:cb:aa:26:bd:ae:21:75:f9:8d:2a:08:77:82:88:70:4f:c8:
         2a:84:b9:29:a0:83:45:aa:9a:2e:40:20:97:ee:9d:98:07:74:
         d3:3d:89:e9:83:2e:e7:1f:52:f4:0c:c6:bd:ce:97:ef:57:e8:
         ae:b6:53:2b:e5:66:e6:90:d5:91:20:d6:5c:e4:4f:7d:28:45:
         7b:86:36:6e:1c:01:44:15:cc:ed:1c:ce:7f:a6:63:02:1f:af:
         cc:44:cb:d2:8d:d2:b1:70:ce:e1:d2:7e:39:5b:4d:b7:e4:bb:
         28:a5:9f:c9:05:23:56:13:56:4f:a0:bb:f0:56:20:48:26:cf:
         5a:d2:d7:02:38:12:81:25:79:e8:22:47:b1:4d:e7:e4:d9:5f:
         a8:e3:09:fd
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIURhEByxKLbxA+PlzS1fKPIfo4kkowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAxMDYwNTAxWhcNMjMwMTMxMDYxMDAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEFFNzFDMUFB
OTEyRjVBODM2OUUwQTY4MDMxRjlFQUE3OEYzRjQ4NDcwMEY1NkZGRjU3QjRFNEVE
Q0ZGMTY0Mzk2OUZBNjU4NzQwNTU4NTdFRTZDMDlCNDM0RTJGNjRCNDRFRjAyMDZG
Q0EwMERCNTI2QTQ2ODNFNzhFMUQyMzJEMkMzOUYzRjMxNDAxNDMyQUEwQkNGREIz
QUMwRUVBNTU1NUJCMEI5RDdFOEUxRjNGNUJBNzI4Rjk1QTY1NDZENTZGOTcyNDNG
NUEwODM4MzA2NzkyRDY4MjkxQTg1MjBGNTFBMjMwRTFGRkU1QzdDMzBFRjBENjA1
QjU1RTg2N0M3REQ4Q0I2MzZBNDlFMDFFNDlGRDQ0NjAxQTk5RDU4MERFRUVCQUMy
NEE0MzAxRjNBM0FBRTM1QTFDRjg2OTk4RTMzODIyQ0YwOTk2ODg4N0Y3RDNBQUNE
QUNCRkU2RDdBRThFNUMyOUQzMjFBODUwOTU0NDhGQUE2QjE0QUZFOTlFM0JCOUMw
Nzg3NDMzNTVEMjEyNDNDMEU4QzYyMUUzQTU3RTNDNzQwNTEzODZFRUVDRkNFODg1
RUE2QzFCOEQ2MDkyNjg5MzQzODM2ODRGMkYwQzVFMUE0RTYwMUM5MTVCRDhFNjI1
Njk3QkZCNzg1NTIzNzA4NjM5Qzc2QjlGMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAK5xwaqRL1qDaeCmgDH56qePP0hHAPVv/1e05O3P
8WQ5afplh0BVhX7mwJtDTi9ktE7wIG/KANtSakaD544dIy0sOfPzFAFDKqC8/bOs
DupVVbsLnX6OHz9bpyj5WmVG1W+XJD9aCDgwZ5LWgpGoUg9RojDh/+XHww7w1gW1
XoZ8fdjLY2pJ4B5J/URgGpnVgN7uusJKQwHzo6rjWhz4aZjjOCLPCZaIh/fTqs2s
v+bXro5cKdMhqFCVRI+qaxSv6Z47ucB4dDNV0hJDwOjGIeOlfjx0BROG7uz86IXq
bBuNYJJok0ODaE8vDF4aTmAckVvY5iVpe/t4VSNwhjnHa58CAwEAAaOCApowggKW
MB0GA1UdDgQWBBTXsqtaLrmja1NreyjvpEaURfYAbzAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzEzYTM2MzEzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIBBhAwDQYJKoZIhvcN
AQELBQADggEBAD24L8o+4wnclTkjTHsWGcHAmV/i2n3jle/KHQ0wpiI/p8Q5/4pu
aJefeQcyV6r9x6yTreFFDzvT+Fog6mNfLDEHRuuyRO+PtjVc1OAla+2snZGUdLxs
yXxtHfMsVTEBReWh2J62JJhB5o4aORXLqia9riF1+Y0qCHeCiHBPyCqEuSmgg0Wq
mi5AIJfunZgHdNM9iemDLucfUvQMxr3Ol+9X6K62UyvlZuaQ1ZEg1lzkT30oRXuG
Nm4cAUQVzO0czn+mYwIfr8xEy9KN0rFwzuHSfjlbTbfkuyiln8kFI1YTVk+gu/BW
IEgmz1rS1wI4EoEleegiR7FN5+TZX6jjCf0=
-----END CERTIFICATE-----