Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313935353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230333a313935353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          /1kMIT0IKAg9UMuUT4wxxcfyNr1iKoQAIA2RqlTZb5o=
Subject key identifier:   4C:2D:62:42:CE:45:DD:52:CA:2B:7F:8F:5A:6A:25:B4:B3:57:C4:89
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       48A79971C4119E19092C71769ED74C915D4CF334
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313935353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Thu 03 Feb 2022 19:55:01 +0000
ROA not before:           Thu 03 Feb 2022 19:50:01 +0000
ROA not after:            Thu 02 Feb 2023 19:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:203:1955::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a7:99:71:c4:11:9e:19:09:2c:71:76:9e:d7:4c:91:5d:4c:f3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  3 19:50:01 2022 GMT
            Not After : Feb  2 19:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:af:d4:23:6e:0a:e0:17:ca:43:4f:ea:cf:43:
                    a0:15:ac:90:fb:87:33:2e:91:4b:72:f6:f4:68:0d:
                    00:a9:31:f4:1d:2a:e9:40:3f:ad:99:4e:55:6f:86:
                    70:8b:bd:ac:58:ed:27:3f:8f:d7:72:ec:46:90:61:
                    64:7f:61:d0:4c:4a:77:a0:2e:ed:b4:1b:1e:ea:b2:
                    0a:0b:a3:da:b6:7d:26:7f:b6:44:2f:19:bc:2a:88:
                    41:c7:a1:bd:ff:96:81:77:4e:1f:ce:fc:07:a2:2d:
                    64:17:54:de:5e:11:b0:5e:75:ec:1c:a3:66:1a:d3:
                    b8:61:ad:ff:61:ff:9f:60:ad:68:de:6f:ec:0f:ba:
                    a0:48:e2:f2:f4:dd:45:19:d7:65:17:92:9a:2e:d2:
                    e7:35:6e:8f:4d:b5:d3:92:94:88:6f:ef:27:d6:3a:
                    9f:a5:1f:23:18:e2:b9:b6:76:b7:f6:48:43:a5:cb:
                    fb:be:44:83:92:f3:1f:b1:48:40:8a:59:d5:dd:60:
                    71:f6:4a:9f:c7:2b:d3:3e:c3:ca:44:68:64:b4:47:
                    7f:19:df:2a:2b:d0:ed:2f:12:22:21:65:cd:6a:eb:
                    44:b1:63:15:f1:92:60:79:2e:3f:cc:d4:b2:fb:80:
                    1b:b0:89:c7:37:56:aa:58:29:ae:42:fb:e3:27:e5:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2D:62:42:CE:45:DD:52:CA:2B:7F:8F:5A:6A:25:B4:B3:57:C4:89
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230333a313935353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:203:1955::/80

    Signature Algorithm: sha256WithRSAEncryption
         0c:41:95:ac:03:f8:7b:e1:d0:1c:48:a9:fc:17:da:0c:f9:91:
         cd:f6:0d:f2:e1:21:8f:ac:6f:24:8e:f6:ca:41:d9:5a:cd:02:
         14:1a:86:eb:55:df:7e:92:2d:fb:cb:fe:5f:1b:ee:d1:81:4e:
         6d:fd:50:8c:c5:df:34:b9:89:e8:3f:ff:b5:db:31:1c:d3:a3:
         a3:e9:49:ea:97:60:2f:70:61:ac:43:61:71:c8:c9:b0:23:e3:
         59:9f:46:72:c7:f7:0b:ca:56:30:28:48:53:76:e9:c6:3d:45:
         7a:08:cc:60:f6:07:3b:89:e5:a0:1b:f6:65:75:74:3c:27:fb:
         16:69:90:b0:41:4d:03:26:4a:83:00:8d:f5:6f:61:dc:f8:d5:
         7c:10:e3:2c:32:c4:83:cc:b3:7a:87:27:17:9e:41:dc:5b:a5:
         d1:b4:14:cd:40:fa:40:7d:db:a4:9b:03:16:83:26:66:9a:c3:
         02:08:51:75:a7:2b:44:47:52:ff:1e:06:54:9a:1d:f5:55:65:
         7b:de:fc:39:19:b9:97:27:98:17:34:3a:03:95:ff:3b:e5:f5:
         42:03:3f:62:06:34:fc:2e:dc:a0:5c:34:cc:ef:69:ee:58:c3:
         f9:73:9e:d7:36:f4:6b:03:71:0a:38:ed:c6:b8:46:1b:b3:60:
         26:62:88:c7
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUSKeZccQRnhkJLHF2ntdMkV1M8zQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjAzMTk1MDAxWhcNMjMwMjAyMTk1NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEU2QUZENDIz
NkUwQUUwMTdDQTQzNEZFQUNGNDNBMDE1QUM5MEZCODczMzJFOTE0QjcyRjZGNDY4
MEQwMEE5MzFGNDFEMkFFOTQwM0ZBRDk5NEU1NTZGODY3MDhCQkRBQzU4RUQyNzNG
OEZENzcyRUM0NjkwNjE2NDdGNjFEMDRDNEE3N0EwMkVFREI0MUIxRUVBQjIwQTBC
QTNEQUI2N0QyNjdGQjY0NDJGMTlCQzJBODg0MUM3QTFCREZGOTY4MTc3NEUxRkNF
RkMwN0EyMkQ2NDE3NTRERTVFMTFCMDVFNzVFQzFDQTM2NjFBRDNCODYxQURGRjYx
RkY5RjYwQUQ2OERFNkZFQzBGQkFBMDQ4RTJGMkY0REQ0NTE5RDc2NTE3OTI5QTJF
RDJFNzM1NkU4RjREQjVEMzkyOTQ4ODZGRUYyN0Q2M0E5RkE1MUYyMzE4RTJCOUI2
NzZCN0Y2NDg0M0E1Q0JGQkJFNDQ4MzkyRjMxRkIxNDg0MDhBNTlENURENjA3MUY2
NEE5RkM3MkJEMzNFQzNDQTQ0Njg2NEI0NDc3RjE5REYyQTJCRDBFRDJGMTIyMjIx
NjVDRDZBRUI0NEIxNjMxNUYxOTI2MDc5MkUzRkNDRDRCMkZCODAxQkIwODlDNzM3
NTZBQTU4MjlBRTQyRkJFMzI3RTU0QTRCMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOav1CNuCuAXykNP6s9DoBWskPuHMy6RS3L29GgN
AKkx9B0q6UA/rZlOVW+GcIu9rFjtJz+P13LsRpBhZH9h0ExKd6Au7bQbHuqyCguj
2rZ9Jn+2RC8ZvCqIQcehvf+WgXdOH878B6ItZBdU3l4RsF517ByjZhrTuGGt/2H/
n2CtaN5v7A+6oEji8vTdRRnXZReSmi7S5zVuj02105KUiG/vJ9Y6n6UfIxjiubZ2
t/ZIQ6XL+75Eg5LzH7FIQIpZ1d1gcfZKn8cr0z7DykRoZLRHfxnfKivQ7S8SIiFl
zWrrRLFjFfGSYHkuP8zUsvuAG7CJxzdWqlgprkL74yflSksCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBRMLWJCzkXdUsorf49aaiW0s1fEiTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzMzYTMxMzkzNTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAgMZVTANBgkqhkiG
9w0BAQsFAAOCAQEADEGVrAP4e+HQHEip/BfaDPmRzfYN8uEhj6xvJI72ykHZWs0C
FBqG61XffpIt+8v+Xxvu0YFObf1QjMXfNLmJ6D//tdsxHNOjo+lJ6pdgL3BhrENh
ccjJsCPjWZ9Gcsf3C8pWMChIU3bpxj1FegjMYPYHO4nloBv2ZXV0PCf7FmmQsEFN
AyZKgwCN9W9h3PjVfBDjLDLEg8yzeocnF55B3Ful0bQUzUD6QH3bpJsDFoMmZprD
AghRdacrREdS/x4GVJod9VVle978ORm5lyeYFzQ6A5X/O+X1QgM/YgY0/C7coFw0
zO9p7ljD+XOe1zb0awNxCjjtxrhGG7NgJmKIxw==
-----END CERTIFICATE-----