Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a33353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a33353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          BNhjpgztOQPfKQT/CgjCzlDCnBIWL+eiuK7tbPxh9t4=
Subject key identifier:   56:C0:3A:C8:03:32:05:42:D7:C6:B4:14:1F:5D:E1:93:2E:99:12:38
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       1A4259546A22EFB38435BB42BD278216F540F4F4
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a33353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 00:35:02 +0000
ROA not before:           Sat 05 Feb 2022 00:30:02 +0000
ROA not after:            Sat 04 Feb 2023 00:35:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:35::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:42:59:54:6a:22:ef:b3:84:35:bb:42:bd:27:82:16:f5:40:f4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 00:30:02 2022 GMT
            Not After : Feb  4 00:35:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9e:60:30:7d:66:5f:37:55:11:41:c4:87:33:
                    d2:02:dd:3b:e8:14:23:64:25:b4:46:60:6c:36:21:
                    4a:3d:09:97:59:52:27:ef:41:e1:35:31:17:d5:d9:
                    41:56:6e:fe:5c:fd:cf:4b:56:0d:e5:a5:26:09:c4:
                    e0:85:ed:a8:bf:1b:f5:df:db:5c:ea:78:e4:10:86:
                    56:0b:bd:54:91:06:c6:cf:d8:53:b8:05:10:43:5b:
                    b1:b7:91:2a:8b:0d:0a:60:e7:23:b9:84:2e:48:36:
                    87:3e:0b:4e:f3:76:84:b2:b9:42:10:f5:7a:e5:34:
                    81:1b:3c:77:1d:21:7d:5b:c4:16:ae:e2:74:61:7e:
                    b6:7b:ef:ef:de:dd:27:b1:6a:70:0a:18:3c:3c:b5:
                    b1:83:cd:4e:2e:cc:60:bb:a2:66:25:0d:2a:be:23:
                    43:6f:33:2d:35:f5:98:30:5b:ad:38:1d:62:78:67:
                    c5:4d:39:39:7d:c1:3c:3d:1d:cf:64:8a:81:0d:a0:
                    33:9d:3b:c9:50:5b:f2:65:90:8f:2a:00:73:d8:43:
                    fa:2b:ce:9b:f5:a8:d3:66:54:25:f9:15:91:91:58:
                    1a:51:b5:33:4c:79:3e:d9:90:e7:a6:15:e3:ec:2c:
                    46:a1:3c:5c:b1:b1:ae:78:da:6d:f1:a7:c6:60:34:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C0:3A:C8:03:32:05:42:D7:C6:B4:14:1F:5D:E1:93:2E:99:12:38
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a33353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:35::/80

    Signature Algorithm: sha256WithRSAEncryption
         2b:57:90:92:54:1c:5a:4b:9d:af:fd:86:34:40:a1:df:d4:ee:
         04:e3:ee:24:c8:58:95:e8:0b:52:87:5f:6b:34:c1:a4:1b:63:
         63:76:0c:be:f9:a9:9e:50:c1:19:14:a5:ff:a3:f0:f2:58:3b:
         d4:a3:5d:d6:cd:5b:b4:79:e7:00:f0:aa:fb:fd:26:af:be:e2:
         16:92:14:02:41:73:85:e9:8e:db:fa:65:05:46:0f:a2:ec:92:
         7e:1f:ed:a6:6d:b9:9f:ad:37:d0:d5:c5:03:2b:4a:13:ac:a7:
         9d:c1:c4:e5:5e:2f:e7:ff:5f:e3:29:cf:54:64:8c:d0:d5:35:
         23:dc:96:0b:00:b1:ec:0e:04:4f:78:84:e2:d8:b1:ba:44:da:
         17:d7:08:0c:54:e3:54:b7:a9:01:c4:a9:85:20:65:74:ce:71:
         9e:8b:fd:ca:a2:ff:31:1b:a5:24:cb:f9:50:36:e8:0b:c7:5d:
         a8:7f:fd:9e:ed:da:0c:d8:87:3f:19:14:4a:8d:4e:92:37:91:
         93:13:25:f0:63:5e:f4:34:70:a0:cb:73:1b:72:34:f1:6e:48:
         d5:87:ce:32:5c:2b:90:84:cd:02:c6:12:4f:2d:ba:97:cd:46:
         f0:59:a5:b7:ec:92:5d:a2:28:ea:1f:37:85:4d:b1:41:d1:66:
         cb:8a:3d:6c
-----BEGIN CERTIFICATE-----
MIIHkzCCBnugAwIBAgIUGkJZVGoi77OENbtCvSeCFvVA9PQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA1MDAzMDAyWhcNMjMwMjA0MDAzNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI3OUU2MDMw
N0Q2NjVGMzc1NTExNDFDNDg3MzNEMjAyREQzQkU4MTQyMzY0MjVCNDQ2NjA2QzM2
MjE0QTNEMDk5NzU5NTIyN0VGNDFFMTM1MzExN0Q1RDk0MTU2NkVGRTVDRkRDRjRC
NTYwREU1QTUyNjA5QzRFMDg1RURBOEJGMUJGNURGREI1Q0VBNzhFNDEwODY1NjBC
QkQ1NDkxMDZDNkNGRDg1M0I4MDUxMDQzNUJCMUI3OTEyQThCMEQwQTYwRTcyM0I5
ODQyRTQ4MzY4NzNFMEI0RUYzNzY4NEIyQjk0MjEwRjU3QUU1MzQ4MTFCM0M3NzFE
MjE3RDVCQzQxNkFFRTI3NDYxN0VCNjdCRUZFRkRFREQyN0IxNkE3MDBBMTgzQzND
QjVCMTgzQ0Q0RTJFQ0M2MEJCQTI2NjI1MEQyQUJFMjM0MzZGMzMyRDM1RjU5ODMw
NUJBRDM4MUQ2Mjc4NjdDNTREMzkzOTdEQzEzQzNEMURDRjY0OEE4MTBEQTAzMzlE
M0JDOTUwNUJGMjY1OTA4RjJBMDA3M0Q4NDNGQTJCQ0U5QkY1QThEMzY2NTQyNUY5
MTU5MTkxNTgxQTUxQjUzMzRDNzkzRUQ5OTBFN0E2MTVFM0VDMkM0NkExM0M1Q0Ix
QjFBRTc4REE2REYxQTdDNjYwMzQ5NzJEMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALeeYDB9Zl83VRFBxIcz0gLdO+gUI2QltEZgbDYh
Sj0Jl1lSJ+9B4TUxF9XZQVZu/lz9z0tWDeWlJgnE4IXtqL8b9d/bXOp45BCGVgu9
VJEGxs/YU7gFEENbsbeRKosNCmDnI7mELkg2hz4LTvN2hLK5QhD1euU0gRs8dx0h
fVvEFq7idGF+tnvv797dJ7FqcAoYPDy1sYPNTi7MYLuiZiUNKr4jQ28zLTX1mDBb
rTgdYnhnxU05OX3BPD0dz2SKgQ2gM507yVBb8mWQjyoAc9hD+ivOm/Wo02ZUJfkV
kZFYGlG1M0x5PtmQ56YV4+wsRqE8XLGxrnjabfGnxmA0ly0CAwEAAaOCApcwggKT
MB0GA1UdDgQWBBRWwDrIAzIFQtfGtBQfXeGTLpkSODAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBnQYIKwYBBQUHAQsEgZAwgY0wgYoGCCsGAQUFBzALhn5yc3luYzovL3Jwa2ku
ZGF0YXBsYW5lLm9yZy9yZXBvL0RBVEFQTEFORS8wLzMyMzYzMDM2M2EzMzY1NjMz
MDNhMzIzMDMyMzIzYTMyMzAzNTNhMzMzNTNhM2EyZjM4MzAyZDM4MzAyMDNkM2Uy
MDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAmBggr
BgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIFADUwDQYJKoZIhvcNAQEL
BQADggEBACtXkJJUHFpLna/9hjRAod/U7gTj7iTIWJXoC1KHX2s0waQbY2N2DL75
qZ5QwRkUpf+j8PJYO9SjXdbNW7R55wDwqvv9Jq++4haSFAJBc4Xpjtv6ZQVGD6Ls
kn4f7aZtuZ+tN9DVxQMrShOsp53BxOVeL+f/X+Mpz1RkjNDVNSPclgsAsewOBE94
hOLYsbpE2hfXCAxU41S3qQHEqYUgZXTOcZ6L/cqi/zEbpSTL+VA26AvHXah//Z7t
2gzYhz8ZFEqNTpI3kZMTJfBjXvQ0cKDLcxtyNPFuSNWHzjJcK5CEzQLGEk8tupfN
RvBZpbfskl2iKOofN4VNsUHRZsuKPWw=
-----END CERTIFICATE-----