Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3433353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230353a3433353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          FiX1RQFgbfz7A1hgq6ursRyO7aS2rnIa4+qOScwRsJ8=
Subject key identifier:   7F:E1:2E:6B:C9:F7:48:24:A8:23:A2:29:06:CA:6C:F3:50:2A:5A:FE
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       2CFAB5C72CB378EBA8E2BE5A71BFA1F8344F13A5
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3433353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 05 Feb 2022 04:35:01 +0000
ROA not before:           Sat 05 Feb 2022 04:30:01 +0000
ROA not after:            Sat 04 Feb 2023 04:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:205:435::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fa:b5:c7:2c:b3:78:eb:a8:e2:be:5a:71:bf:a1:f8:34:4f:13:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  5 04:30:01 2022 GMT
            Not After : Feb  4 04:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:f7:9c:7e:64:32:f7:38:06:d5:5f:b5:8d:
                    95:ae:0e:08:51:dd:95:f3:41:e1:00:0e:3f:58:4f:
                    c7:a7:b5:ef:fa:b4:eb:88:aa:8c:a7:d9:e2:67:19:
                    d8:b3:47:c4:35:a0:ba:8e:30:0a:c7:11:74:6b:93:
                    01:55:99:e9:d6:dd:ab:84:84:40:e6:e6:72:f6:d7:
                    63:ff:ce:37:14:fa:0a:7e:ee:d4:64:35:63:bc:95:
                    13:8d:cb:c7:67:9e:0b:2b:2b:10:59:e7:62:a8:16:
                    63:ec:52:c6:71:3e:c4:fb:cc:e9:f8:c0:99:92:69:
                    19:71:7a:b0:a7:ac:13:78:da:4b:de:fe:8e:37:55:
                    f0:09:d7:d1:9a:e0:79:83:9d:71:ad:88:0d:0a:b5:
                    a3:52:4e:32:60:71:b8:f8:25:47:3d:05:4f:b5:ca:
                    6e:f7:b2:3f:f3:d6:df:91:76:01:9e:42:e4:5f:34:
                    a2:8a:9f:16:64:86:b3:d6:38:28:72:de:12:6e:d8:
                    22:d2:87:96:6f:91:0c:91:67:37:8c:36:55:4c:1e:
                    45:6c:4f:20:aa:40:ed:3d:3c:c8:f7:23:a7:8f:08:
                    4e:d2:3a:02:8e:ea:d4:92:d9:05:4d:77:6d:cc:ba:
                    03:9d:a6:33:87:65:f2:d9:da:96:05:eb:b2:90:83:
                    6b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E1:2E:6B:C9:F7:48:24:A8:23:A2:29:06:CA:6C:F3:50:2A:5A:FE
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230353a3433353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:205:435::/80

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:bc:86:85:fe:f6:37:79:f8:89:fb:6c:21:3f:ad:f0:61:
         a4:8a:36:da:4d:55:0d:54:d1:f8:02:55:72:f0:a8:ca:8a:bf:
         7b:92:48:8e:56:17:a9:3a:43:a7:b0:7d:97:92:e4:f2:45:29:
         b3:47:a1:0d:77:5b:5e:18:78:f8:7a:dc:5a:8c:f5:fa:c0:32:
         ea:57:e0:8e:c4:11:2f:8c:e8:30:00:78:34:f2:03:c5:29:23:
         d7:ba:ca:10:2f:00:91:36:4a:48:fa:05:c2:9b:19:42:0f:dc:
         3b:5c:03:b6:07:c0:69:25:b2:f4:06:c0:be:4c:b4:e1:ee:e6:
         cd:d7:9f:ec:f8:92:97:0b:0b:e8:92:4c:ab:25:e2:a5:ee:71:
         3d:96:98:14:0b:59:fe:44:93:ba:d9:2b:23:ce:2c:93:99:0e:
         78:ef:52:df:90:2e:98:e3:52:c0:c6:e1:15:a8:0a:dc:02:8a:
         9e:5d:09:b7:a0:85:f8:1c:1e:5d:d5:0b:a9:0a:9a:e5:26:0c:
         fa:2c:37:06:31:7c:8d:af:a5:43:03:5d:84:f8:89:08:db:52:
         8f:24:61:45:57:f1:e0:c9:77:f2:1e:11:c4:91:4e:2a:9a:91:
         54:d9:cb:20:f5:0f:0b:0e:dd:2b:d6:af:82:13:e6:cf:c3:8c:
         f4:0e:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----