Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a313634353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230323a313634353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          e0gfJ2oCSMqLPyDl/pnX4IZflJDxkaOxoFbqwaWlEgk=
Subject key identifier:   CB:F8:39:D6:8D:F7:9A:34:06:C2:08:D7:99:ED:E2:3E:2D:D6:B8:7E
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       4539ECEBB2056CED5C1971A55C613887D1017BEB
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a313634353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 02 Feb 2022 16:45:01 +0000
ROA not before:           Wed 02 Feb 2022 16:40:01 +0000
ROA not after:            Wed 01 Feb 2023 16:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:202:1645::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:39:ec:eb:b2:05:6c:ed:5c:19:71:a5:5c:61:38:87:d1:01:7b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  2 16:40:01 2022 GMT
            Not After : Feb  1 16:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:ea:49:b0:91:bf:00:37:24:bb:47:18:f0:
                    09:6b:be:26:d8:05:8d:71:e4:bd:5c:f9:58:f3:c9:
                    df:d4:a0:91:d5:08:99:c2:32:7b:93:8f:74:ed:b5:
                    ed:ea:f3:4c:b2:01:0d:7a:f5:15:4d:66:0b:70:06:
                    00:66:8f:86:a7:e3:12:ba:db:6f:1c:2b:1d:64:7a:
                    94:3c:f0:19:27:1a:3b:ec:c3:ae:8e:99:a0:b4:32:
                    92:e9:a8:7b:bb:b0:9f:7d:af:c0:b0:d8:0f:20:8c:
                    4f:d9:45:f6:4c:49:07:b1:7b:1b:cd:b2:ae:ab:ed:
                    c1:ab:d5:be:5f:b2:48:1f:55:b1:2a:3c:f2:79:9b:
                    52:de:3c:93:85:62:4d:91:1a:34:1b:40:cd:f2:97:
                    cf:6f:11:eb:56:bd:dd:0a:bf:25:a1:a7:a7:41:ab:
                    07:8d:75:95:13:f3:c9:45:c5:a3:bd:43:9d:07:07:
                    7b:5a:37:60:3a:a0:84:b9:d7:f8:e0:22:de:50:e8:
                    c1:a6:84:40:8e:93:d6:23:62:9f:ef:fe:47:2a:1a:
                    c3:80:a8:3c:61:c9:c6:d6:35:af:4f:6a:7a:86:d5:
                    8d:48:d0:44:12:3c:13:5e:5f:49:9a:16:7f:ea:2c:
                    f7:4c:33:60:e0:8b:1e:64:cb:c6:d1:09:57:78:62:
                    29:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F8:39:D6:8D:F7:9A:34:06:C2:08:D7:99:ED:E2:3E:2D:D6:B8:7E
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a313634353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:202:1645::/80

    Signature Algorithm: sha256WithRSAEncryption
         77:de:0d:7c:7d:ff:24:de:bf:7f:d7:a5:7f:1c:c5:82:62:f3:
         9c:0d:8a:28:07:3d:aa:75:f0:af:42:b6:21:06:3d:24:69:29:
         e2:cf:65:95:b9:af:b1:4f:9d:36:4e:ee:3d:91:72:a2:20:82:
         f7:59:18:6e:2d:b8:ee:6f:e2:9b:b0:26:24:72:f4:21:0f:f3:
         72:f4:71:a6:43:00:b8:2a:4a:90:a7:cf:e0:5e:82:0d:d7:a7:
         52:b6:39:5c:19:a3:60:2d:04:66:e3:50:41:67:a5:fa:48:64:
         a0:d2:72:b2:c6:97:e1:d5:fd:04:73:3a:e4:a8:ff:f1:b2:87:
         c1:23:3a:c6:02:3e:ab:2d:6d:49:02:09:49:c0:e0:76:8b:e0:
         cf:cf:8e:58:6d:88:5a:3c:df:04:69:b5:99:73:d4:12:68:e1:
         0d:b6:2a:61:21:87:3a:25:10:6d:d7:6a:9a:af:57:2d:7d:2f:
         3c:80:90:80:9a:59:be:e8:6e:69:d9:d2:41:16:39:fc:78:88:
         42:31:72:97:93:76:51:a2:44:e8:a0:02:2c:5b:a8:58:bf:6a:
         ad:fb:c4:81:b3:e6:e2:74:22:8b:89:cc:63:0f:ff:41:93:ea:
         d3:58:9a:fb:7e:89:90:57:35:95:50:fd:4c:8b:5d:85:2d:e2:
         7a:a3:71:dc
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIURTns67IFbO1cGXGlXGE4h9EBe+swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAyMTY0MDAxWhcNMjMwMjAxMTY0NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI4NjVFQTQ5
QjA5MUJGMDAzNzI0QkI0NzE4RjAwOTZCQkUyNkQ4MDU4RDcxRTRCRDVDRjk1OEYz
QzlERkQ0QTA5MUQ1MDg5OUMyMzI3QjkzOEY3NEVEQjVFREVBRjM0Q0IyMDEwRDdB
RjUxNTRENjYwQjcwMDYwMDY2OEY4NkE3RTMxMkJBREI2RjFDMkIxRDY0N0E5NDND
RjAxOTI3MUEzQkVDQzNBRThFOTlBMEI0MzI5MkU5QTg3QkJCQjA5RjdEQUZDMEIw
RDgwRjIwOEM0RkQ5NDVGNjRDNDkwN0IxN0IxQkNEQjJBRUFCRURDMUFCRDVCRTVG
QjI0ODFGNTVCMTJBM0NGMjc5OUI1MkRFM0M5Mzg1NjI0RDkxMUEzNDFCNDBDREYy
OTdDRjZGMTFFQjU2QkRERDBBQkYyNUExQTdBNzQxQUIwNzhENzU5NTEzRjNDOTQ1
QzVBM0JENDM5RDA3MDc3QjVBMzc2MDNBQTA4NEI5RDdGOEUwMjJERTUwRThDMUE2
ODQ0MDhFOTNENjIzNjI5RkVGRkU0NzJBMUFDMzgwQTgzQzYxQzlDNkQ2MzVBRjRG
NkE3QTg2RDU4RDQ4RDA0NDEyM0MxMzVFNUY0OTlBMTY3RkVBMkNGNzRDMzM2MEUw
OEIxRTY0Q0JDNkQxMDk1Nzc4NjIyOTk1MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALhl6kmwkb8ANyS7RxjwCWu+JtgFjXHkvVz5WPPJ
39SgkdUImcIye5OPdO217erzTLIBDXr1FU1mC3AGAGaPhqfjErrbbxwrHWR6lDzw
GScaO+zDro6ZoLQykumoe7uwn32vwLDYDyCMT9lF9kxJB7F7G82yrqvtwavVvl+y
SB9VsSo88nmbUt48k4ViTZEaNBtAzfKXz28R61a93Qq/JaGnp0GrB411lRPzyUXF
o71DnQcHe1o3YDqghLnX+OAi3lDowaaEQI6T1iNin+/+Ryoaw4CoPGHJxtY1r09q
eobVjUjQRBI8E15fSZoWf+os90wzYOCLHmTLxtEJV3hiKZUCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBTL+DnWjfeaNAbCCNeZ7eI+Lda4fjAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzIzYTMxMzYzNDM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAgIWRTANBgkqhkiG
9w0BAQsFAAOCAQEAd94NfH3/JN6/f9elfxzFgmLznA2KKAc9qnXwr0K2IQY9JGkp
4s9llbmvsU+dNk7uPZFyoiCC91kYbi247m/im7AmJHL0IQ/zcvRxpkMAuCpKkKfP
4F6CDdenUrY5XBmjYC0EZuNQQWel+khkoNJyssaX4dX9BHM65Kj/8bKHwSM6xgI+
qy1tSQIJScDgdovgz8+OWG2IWjzfBGm1mXPUEmjhDbYqYSGHOiUQbddqmq9XLX0v
PICQgJpZvuhuadnSQRY5/HiIQjFyl5N2UaJE6KACLFuoWL9qrfvEgbPm4nQii4nM
Yw//QZPq01ia+36JkFc1lVD9TItdhS3ieqNx3A==
-----END CERTIFICATE-----