Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a313432353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230323a313432353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          XQ2aGcqLV32hpO3thRJnvFlneJYcr2W5scZedjHfNm0=
Subject key identifier:   C9:73:CE:FB:B9:F3:11:FE:31:A7:E9:5F:ED:6B:EA:74:86:27:83:3D
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       097F3280830681AB0A8EA65AF5491DC3171914D9
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a313432353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 02 Feb 2022 14:25:01 +0000
ROA not before:           Wed 02 Feb 2022 14:20:01 +0000
ROA not after:            Wed 01 Feb 2023 14:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:202:1425::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7f:32:80:83:06:81:ab:0a:8e:a6:5a:f5:49:1d:c3:17:19:14:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  2 14:20:01 2022 GMT
            Not After : Feb  1 14:25:01 2023 GMT
        Subject: CN=3082010A0282010100D3E1B1A802B1BE6459EA741DAA3C9DBA97382C102ACE22A033522C4BE19DA15E0C844C222E6FC2CE83A6EF07891150809524F011A3518CAB21A03F3E4AB58D8173706980B127451A890A962E05F9253FC0CD65C1A6E79BA0E42AAA15A64EF33F5757787154ACE0DFB6AC766F867EBADD8B67165AF590EDF9BF6DC1123174526368DE29599AB9B03011AD1CF4AD020128CB92D3141A8D7921B8C83EF0D26F9B49F6F97AA7D3A69798E1339DEE6D021DD60BBD6149A2666BB49C3D609F3FB1F396DB0FCCBB45BB5F54B6097FBAD76916A18F58AB9CF159807788DD648384A7AD1FEC1F37D5D89836FAADA6493F9E8D87C5E63913C6741DA7280E9DF1EE6A1A484B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:b1:a8:02:b1:be:64:59:ea:74:1d:aa:3c:
                    9d:ba:97:38:2c:10:2a:ce:22:a0:33:52:2c:4b:e1:
                    9d:a1:5e:0c:84:4c:22:2e:6f:c2:ce:83:a6:ef:07:
                    89:11:50:80:95:24:f0:11:a3:51:8c:ab:21:a0:3f:
                    3e:4a:b5:8d:81:73:70:69:80:b1:27:45:1a:89:0a:
                    96:2e:05:f9:25:3f:c0:cd:65:c1:a6:e7:9b:a0:e4:
                    2a:aa:15:a6:4e:f3:3f:57:57:78:71:54:ac:e0:df:
                    b6:ac:76:6f:86:7e:ba:dd:8b:67:16:5a:f5:90:ed:
                    f9:bf:6d:c1:12:31:74:52:63:68:de:29:59:9a:b9:
                    b0:30:11:ad:1c:f4:ad:02:01:28:cb:92:d3:14:1a:
                    8d:79:21:b8:c8:3e:f0:d2:6f:9b:49:f6:f9:7a:a7:
                    d3:a6:97:98:e1:33:9d:ee:6d:02:1d:d6:0b:bd:61:
                    49:a2:66:6b:b4:9c:3d:60:9f:3f:b1:f3:96:db:0f:
                    cc:bb:45:bb:5f:54:b6:09:7f:ba:d7:69:16:a1:8f:
                    58:ab:9c:f1:59:80:77:88:dd:64:83:84:a7:ad:1f:
                    ec:1f:37:d5:d8:98:36:fa:ad:a6:49:3f:9e:8d:87:
                    c5:e6:39:13:c6:74:1d:a7:28:0e:9d:f1:ee:6a:1a:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:73:CE:FB:B9:F3:11:FE:31:A7:E9:5F:ED:6B:EA:74:86:27:83:3D
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a313432353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:202:1425::/80

    Signature Algorithm: sha256WithRSAEncryption
         3c:0d:13:19:f8:38:cf:03:52:c5:11:88:53:0d:98:a0:64:13:
         cd:c4:ab:f7:1b:1b:98:a9:49:57:94:69:3f:03:0c:65:69:5e:
         11:74:dc:fe:1f:2b:8d:2a:ee:c7:1c:19:64:e8:75:b6:3f:99:
         b6:34:ad:3c:16:4d:ea:8d:fc:06:2f:50:92:6e:f9:ec:46:bb:
         a5:45:8d:20:21:79:5f:a0:84:f4:37:b1:fe:99:b4:33:c2:b5:
         6a:53:7c:33:5b:80:24:89:c7:a6:c9:ff:06:f9:b5:5f:43:42:
         62:9b:9d:93:ce:0a:4c:fb:0f:7f:01:3f:67:50:e5:72:fa:76:
         35:3b:cf:c6:26:66:29:f2:45:56:97:e4:36:e1:76:47:6c:f1:
         0d:2b:ae:48:2c:02:2c:59:2d:41:e2:85:cc:63:c5:11:af:e1:
         6a:a9:ae:7f:75:d6:85:6b:a0:53:4c:f7:ad:f0:8c:60:c4:7c:
         dd:48:85:0d:5c:c1:4f:fb:a4:43:18:f4:df:08:f1:d7:1c:61:
         d6:8b:78:68:ad:1c:46:d0:40:48:2e:cb:4a:0b:a3:6a:61:d8:
         0e:91:dc:6f:a8:63:23:88:7d:68:d1:6e:66:7a:dd:a4:37:88:
         c9:26:97:42:ed:31:50:f2:07:91:1f:5c:9f:08:15:5f:21:36:
         eb:ec:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----