Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3530353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230323a3530353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          nBhd2c4oKDve8nD89RSl+biagmqghQK7iYS0CIuFUcE=
Subject key identifier:   C8:2B:DF:0F:4C:D9:3D:C8:D2:10:52:76:47:05:86:CD:7B:24:AB:AC
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3DCD186943DFEF903065EDD2083D5976C884D7AE
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3530353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 02 Feb 2022 05:05:01 +0000
ROA not before:           Wed 02 Feb 2022 05:00:01 +0000
ROA not after:            Wed 01 Feb 2023 05:05:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:202:505::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cd:18:69:43:df:ef:90:30:65:ed:d2:08:3d:59:76:c8:84:d7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  2 05:00:01 2022 GMT
            Not After : Feb  1 05:05:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:4e:bc:78:7e:b6:ef:fe:5d:6c:f4:51:98:
                    cc:ab:61:79:9a:6b:b6:b9:5c:f2:70:ca:79:c6:c9:
                    cc:ef:d2:b9:34:91:f9:1e:96:6d:88:ab:fa:65:3e:
                    e1:19:ed:d5:c0:b9:ad:eb:d4:c8:29:01:d3:c3:67:
                    aa:9b:66:b3:ad:71:f2:de:27:98:a0:9b:3b:9e:88:
                    f7:cc:6a:0a:11:89:30:bb:08:3d:e1:4d:78:e7:f0:
                    be:dd:42:f0:f8:e0:68:3c:69:08:c3:11:23:14:3a:
                    73:ac:9b:9f:02:5d:30:b7:5b:2a:71:67:72:e7:a7:
                    b5:f2:39:24:64:e3:c1:a5:7b:28:ae:45:16:ec:69:
                    59:03:94:c0:79:9c:15:43:e9:f4:ea:fa:bf:11:b4:
                    b8:c0:b0:f9:b5:40:78:76:a0:61:3d:74:b4:3b:18:
                    3a:0c:45:ac:ae:d1:7b:3f:59:6d:79:62:9b:3b:32:
                    d4:be:fb:dc:c5:8b:ea:2f:ec:6c:f3:68:5d:69:dd:
                    b0:1a:a0:a2:fb:3e:8e:08:33:2c:f0:2e:37:db:17:
                    c4:c3:25:bf:a3:8f:8e:20:5e:8c:2b:f2:bc:42:64:
                    2c:d8:c4:15:90:4e:36:27:d5:38:5e:54:20:3f:04:
                    f2:e0:16:ea:53:94:25:c6:bc:ff:b2:5b:4b:46:99:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2B:DF:0F:4C:D9:3D:C8:D2:10:52:76:47:05:86:CD:7B:24:AB:AC
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230323a3530353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:202:505::/80

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:b2:31:66:62:21:12:7f:d9:1a:c4:8c:64:de:71:a8:6d:
         a4:fc:5f:8b:a9:0b:6f:07:2c:d4:74:3a:ab:06:93:81:03:46:
         f8:cc:cd:af:8b:cc:1d:a6:56:2b:09:fd:3f:da:b1:9d:e6:63:
         26:b7:35:b0:81:ce:05:76:76:59:c0:cd:0a:f5:ae:12:98:6c:
         5e:28:29:8b:8c:e2:6e:9f:a9:93:e0:8d:d0:6a:d3:f6:95:55:
         8c:56:26:23:00:a5:9d:71:6e:8e:34:a5:19:5a:f1:73:4a:a4:
         88:c8:0a:b6:2c:e3:12:67:63:68:75:d2:7b:c5:0f:65:47:94:
         ec:14:40:d9:90:4f:a4:c7:69:f9:9b:49:2e:e1:6d:7a:96:6a:
         49:6e:c9:38:fa:16:56:75:31:e7:1d:80:37:dd:9a:11:77:ee:
         54:ac:b5:61:52:8b:45:52:94:ef:6c:5d:fd:9d:6f:72:52:84:
         59:c9:07:29:62:0b:a1:0e:93:fd:28:27:97:e2:ec:34:d9:43:
         c1:99:74:77:11:23:1c:06:f7:b9:72:5d:33:7c:ab:17:fd:d4:
         5d:d0:28:4a:d2:24:e1:c2:b4:01:4c:55:a9:6d:d8:72:3b:c6:
         2e:14:64:75:00:07:e2:21:82:c4:f0:97:cd:65:ca:2a:4b:a4:
         67:23:5b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----