Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a323134353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a323134353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          qXbZcjTXRnkuoxNvdIJGOvabtcsofinI1iWpif2H7gg=
Subject key identifier:   74:99:FC:96:EE:31:FC:1F:08:36:22:C9:66:B5:EB:0A:F1:CF:E6:69
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       78DCBF0AEBA6EA3B2966B65B7363B5A70FF138CC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a323134353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 21:45:02 +0000
ROA not before:           Sat 05 Feb 2022 21:40:02 +0000
ROA not after:            Sat 04 Feb 2023 21:45:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:2145::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dc:bf:0a:eb:a6:ea:3b:29:66:b6:5b:73:63:b5:a7:0f:f1:38:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 21:40:02 2022 GMT
            Not After : Feb  4 21:45:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ab:81:c8:23:ce:12:0f:e4:59:1a:2a:7a:7f:
                    6f:6f:2c:9b:fb:5a:e7:bd:ad:01:3a:ff:65:71:ad:
                    86:5b:52:9d:81:d0:97:8f:7d:2b:c7:a3:6b:3e:96:
                    62:7b:b2:80:1c:b1:41:92:7f:da:a0:4a:dc:b8:57:
                    0c:1b:30:00:9d:00:7e:f4:44:dc:c1:7b:3a:df:28:
                    9a:77:fa:a2:4c:b8:42:44:5c:ec:a1:d4:9a:66:ab:
                    61:0d:5b:20:7b:21:08:a1:3b:2e:e0:f6:e9:d4:6d:
                    2b:ac:25:5f:a4:89:97:4e:a5:12:60:1d:a1:80:f6:
                    bb:7b:08:74:cd:d0:fe:60:b3:c2:41:6a:9a:c5:55:
                    31:88:f0:19:c3:51:01:65:3e:c3:08:f8:d1:c3:90:
                    26:2b:89:9c:3a:0f:3b:9a:b2:e6:0e:82:fc:3d:30:
                    56:b1:3a:9d:b3:27:fa:24:ad:4f:af:f3:f9:0d:f2:
                    31:2f:5a:dd:9d:a7:f3:e6:bc:d5:8c:36:f8:1b:31:
                    f2:95:05:20:3f:67:ee:4e:eb:9b:eb:2e:13:55:b9:
                    3d:8d:13:b6:f9:00:55:27:84:e3:83:fd:5f:75:c2:
                    97:0b:20:d5:8b:b9:e5:cd:38:06:1c:8e:ff:95:e1:
                    ea:81:bb:c7:ef:0c:cc:67:27:8b:cb:fc:a8:3d:75:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:FC:96:EE:31:FC:1F:08:36:22:C9:66:B5:EB:0A:F1:CF:E6:69
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a323134353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:2145::/80

    Signature Algorithm: sha256WithRSAEncryption
         1f:d4:9c:51:e9:5a:71:b7:f4:53:b9:ae:76:c0:f3:03:cc:d1:
         29:32:27:47:aa:a4:78:e3:7b:46:ed:c1:d3:3e:a3:7f:43:fc:
         48:88:fb:b0:a6:18:42:8c:da:1e:7a:df:a2:dc:a7:0f:51:22:
         54:3a:34:5b:e4:0e:8b:a5:fa:6a:f0:30:19:76:83:7b:0c:c0:
         1d:ed:9c:b6:04:fb:f3:32:73:2b:5f:d7:04:c5:76:5e:30:0e:
         f6:10:7e:e4:a1:5f:3d:29:15:59:a8:59:87:78:7d:e1:e0:8a:
         f4:07:8b:48:4f:f0:40:02:a8:c7:4c:da:87:9c:b2:64:06:43:
         e3:79:df:51:80:c5:a0:7c:ea:7e:6c:70:80:a1:ed:bf:c1:58:
         cd:11:58:06:b2:f6:9e:45:ba:23:eb:56:85:56:49:8e:92:21:
         9a:40:b4:4f:08:7a:31:f8:e0:a1:03:f5:c8:57:20:5c:2a:d2:
         4b:a5:9a:ff:c3:39:a9:b4:7b:93:5a:bc:6e:e5:87:cb:c5:a0:
         94:18:a7:a2:7f:fc:a4:af:61:6a:f1:54:05:ff:ee:8a:b9:51:
         11:ca:d5:eb:56:31:02:28:13:3c:2f:90:96:a9:5f:43:f9:40:
         8e:58:b8:db:b1:d5:c7:bb:da:3d:36:5f:92:f5:9c:d6:e7:2d:
         0d:84:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----