Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a323332353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230323a323332353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          cybo1kGVi2Dde86YOSFh3jsANWLbKUl4kM2XZSG0tuQ=
Subject key identifier:   68:84:2C:43:E0:1A:59:58:5E:09:63:75:8B:7A:A0:26:72:EB:F5:DE
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       178285C1BEA71CC805779D17DC9DD74142F9399B
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a323332353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 02 Feb 2022 23:25:02 +0000
ROA not before:           Wed 02 Feb 2022 23:20:02 +0000
ROA not after:            Wed 01 Feb 2023 23:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:202:2325::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:82:85:c1:be:a7:1c:c8:05:77:9d:17:dc:9d:d7:41:42:f9:39:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  2 23:20:02 2022 GMT
            Not After : Feb  1 23:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:a5:f9:68:bc:c5:1c:cb:69:75:eb:e6:c3:
                    c8:1a:be:bf:b4:7a:ac:7c:c4:71:71:f5:a9:7e:cc:
                    d3:7c:98:a2:c2:91:e3:85:a8:cf:5b:7d:50:8a:f2:
                    ff:f6:2f:c9:29:a5:af:ba:59:3e:28:ac:b5:79:02:
                    a7:92:60:ad:22:ed:91:7f:8c:2c:17:f5:29:8d:c9:
                    dc:24:ea:28:07:0d:6f:83:74:ed:09:78:0e:d9:e6:
                    b0:25:89:8d:a1:03:25:e6:c7:9e:c6:c9:3b:3a:99:
                    ec:e6:ff:72:b3:0a:b1:99:ee:f4:92:d2:69:b8:6e:
                    fc:b6:58:fa:87:33:e8:78:e9:ce:21:1a:c7:56:5c:
                    65:ef:73:fe:2b:50:fd:3d:bd:94:de:03:ee:d9:d3:
                    55:c9:c6:f7:b2:e4:33:ea:5a:f1:ed:9e:26:9a:9a:
                    a1:18:2d:9e:9b:a4:b1:d7:ed:bb:2e:40:07:6d:70:
                    3a:8b:3a:39:82:bc:ab:6c:84:39:08:50:11:ef:26:
                    d3:ba:4b:0b:09:c7:6f:1e:bb:41:f8:60:55:f5:f5:
                    2b:98:5d:77:a8:22:d9:2d:02:7e:e2:8f:74:cd:e4:
                    8b:d7:c8:3b:c2:e7:08:e2:41:35:a3:fa:6c:bc:a1:
                    b5:69:fd:72:aa:ba:f9:a6:ee:a4:1b:46:86:e9:66:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:84:2C:43:E0:1A:59:58:5E:09:63:75:8B:7A:A0:26:72:EB:F5:DE
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a323332353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:202:2325::/80

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:6b:da:1c:8b:4f:49:3b:7b:23:9a:c9:35:86:49:07:84:
         75:10:31:9c:d4:38:ad:0b:cd:ab:6c:49:ca:c5:f3:88:4d:b3:
         af:63:d3:48:95:c7:15:c9:34:88:dc:a1:ca:56:a5:e0:1c:ad:
         65:74:70:97:d0:f7:48:61:1f:75:d7:9f:b0:14:c2:64:33:52:
         35:28:9f:4a:14:3f:90:dd:fe:d0:6e:2e:cd:cd:ed:39:91:f8:
         27:28:88:39:a0:1a:d1:18:b7:e7:b7:08:ca:f3:08:41:31:7e:
         4e:ce:74:ec:1b:0b:44:55:38:5a:a5:a0:5f:13:6f:44:f5:cb:
         4e:8f:75:e6:bc:ad:c9:44:9b:9c:c8:f6:78:06:70:53:c9:cb:
         28:00:38:bf:76:57:fb:bd:cb:22:15:01:9c:6b:41:12:78:03:
         05:b6:33:a4:12:b8:d4:70:26:73:b0:35:54:6c:46:a2:10:bb:
         59:cb:4f:69:62:7e:c0:a8:03:1f:57:2e:be:1a:06:06:ab:f5:
         39:8e:44:d2:5c:ca:65:d5:cd:d9:8b:7e:3e:c3:71:ba:97:60:
         03:44:3e:bd:13:58:65:b2:57:60:7d:b1:a9:fd:a9:5e:5d:1e:
         e0:40:53:87:b3:1e:00:0e:72:38:6e:09:ad:e7:99:df:e3:c4:
         4a:7f:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----