Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313130303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a313130303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Yj0mtWLFU25PBGl41xHelYWAmYwSkIatbFNbGYzezlQ=
Subject key identifier:   32:17:52:04:13:5A:7A:14:9D:EE:40:F0:CD:E8:42:DC:5F:D5:DF:25
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       627920F2AE4CAA296A5CD34DAFCD77D19D56E878
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313130303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 11:00:02 +0000
ROA not before:           Thu 03 Feb 2022 10:55:02 +0000
ROA not after:            Thu 02 Feb 2023 11:00:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:1100::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:20:f2:ae:4c:aa:29:6a:5c:d3:4d:af:cd:77:d1:9d:56:e8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 10:55:02 2022 GMT
            Not After : Feb  2 11:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:eb:53:d2:4a:31:9a:6d:d7:d5:ef:75:2c:
                    c0:06:25:aa:a5:42:4e:4f:00:2d:bc:18:2f:c9:9b:
                    68:d9:61:8c:fe:bb:5e:35:b9:d8:c8:5b:bf:8e:d4:
                    2d:2c:9b:3f:d1:40:e3:23:8b:a6:99:8c:a3:57:51:
                    28:2e:44:bf:5e:f1:62:66:08:ce:03:99:d8:56:7b:
                    6f:e9:d4:cb:f0:cc:a1:3e:7c:d7:2f:7f:e2:18:ef:
                    00:7d:52:17:84:c9:04:e9:af:86:46:7b:7e:ed:54:
                    87:e3:5d:c3:06:c3:68:ca:b9:82:79:dd:3a:b8:e5:
                    b9:70:ce:8a:c8:3c:0a:10:c2:8d:2a:a9:d2:57:1a:
                    d3:48:19:20:84:47:b6:5a:a7:4b:e4:44:f2:bd:05:
                    c6:7c:7c:04:09:f6:d6:da:ab:bb:07:d6:48:1d:b1:
                    aa:5d:f1:12:3c:02:d1:9b:39:47:3e:df:02:dc:55:
                    a7:1f:56:69:68:0f:61:43:69:01:c3:ec:6f:6c:70:
                    72:b0:76:00:d9:69:a6:c8:b1:6f:29:40:29:8a:f8:
                    e3:f5:7f:ff:57:3e:22:9d:4c:d8:d9:40:c9:b8:8f:
                    1c:98:85:bc:dc:7e:02:d6:0a:c8:0c:42:54:8b:a5:
                    17:35:de:a2:34:67:2a:45:66:ae:1b:bb:5c:98:13:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:17:52:04:13:5A:7A:14:9D:EE:40:F0:CD:E8:42:DC:5F:D5:DF:25
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313130303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:1100::/80

    Signature Algorithm: sha256WithRSAEncryption
         43:46:ed:8a:88:e4:cf:18:ca:85:a4:c6:22:51:c4:b3:40:be:
         78:ab:05:6c:0f:26:0d:5c:82:19:67:c0:f6:3f:9a:37:ec:1e:
         b6:17:8c:6f:93:fa:6b:b5:96:d5:08:e4:70:cf:fb:15:8e:4a:
         5d:32:ec:87:e9:46:2a:dd:d5:24:e7:29:cc:7a:58:46:1d:7e:
         1a:fd:60:fb:da:1f:6d:bf:5e:21:cb:8d:ea:2a:99:09:37:b4:
         d0:a9:bb:b4:a8:ff:77:bb:db:35:b4:77:8d:da:ea:43:50:dd:
         26:07:12:62:3c:cb:8f:78:f8:46:bf:14:3b:af:ba:f9:d1:90:
         12:bc:68:e8:58:63:4c:5e:4d:8e:d9:f3:97:a2:3d:9b:cb:22:
         44:f5:4b:fd:39:bb:76:93:5d:50:04:b5:a5:21:de:e7:45:02:
         f7:1f:3c:ad:6f:e0:43:8d:96:db:ce:d5:cf:bb:7e:99:7a:49:
         ea:98:99:c3:38:dd:ff:f5:72:77:3f:40:1c:90:31:b1:e6:a0:
         7e:e8:ac:4f:3c:53:59:95:5c:79:04:71:8e:55:8f:99:be:68:
         db:ad:02:05:2e:3d:86:ac:b1:dc:30:b8:c4:c4:04:db:2e:6c:
         bc:00:9d:e1:f7:81:ab:9b:15:17:a6:04:46:a5:6b:b4:04:ae:
         2c:d5:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----