Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3231303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a3231303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          YT3QO59jHNRpeCL7xrZDfCcsTP3Zqb2uxIPiU/LLRKQ=
Subject key identifier:   82:B6:B3:29:9C:9D:64:FC:ED:D9:65:86:97:F5:86:5E:AA:8C:F4:F3
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       027B09438B748C9DA2AD31F2041B2B6B204C7A16
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3231303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 02:10:02 +0000
ROA not before:           Sun 06 Feb 2022 02:05:02 +0000
ROA not after:            Sun 05 Feb 2023 02:10:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:210::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7b:09:43:8b:74:8c:9d:a2:ad:31:f2:04:1b:2b:6b:20:4c:7a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 02:05:02 2022 GMT
            Not After : Feb  5 02:10:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:60:26:08:e7:3b:46:29:a7:5c:02:f5:12:
                    f9:27:f4:01:94:f4:99:dd:48:30:2e:94:54:d0:97:
                    b1:ac:a9:81:7a:da:e2:13:bc:91:03:c3:7e:0d:bd:
                    95:3e:bd:81:b1:d5:b2:ef:42:fe:61:65:3f:dd:f8:
                    63:89:e8:92:d3:45:dc:58:57:12:96:77:3f:a9:33:
                    ce:73:a0:12:36:49:3d:85:f9:54:85:42:b3:b0:f6:
                    e7:b2:96:d3:3d:71:b5:29:60:3c:12:fc:a0:cc:d5:
                    2d:ea:15:f6:52:28:b8:1e:be:85:84:93:5f:c7:cd:
                    17:5f:b9:5d:79:50:07:b4:c2:ec:6e:92:20:26:48:
                    7e:88:87:16:30:bb:8f:c7:54:bf:f4:bf:ba:58:20:
                    7d:7e:b4:fb:1d:1f:ad:88:95:b7:f5:df:bc:22:b4:
                    db:eb:55:7e:aa:7b:a4:4a:cd:9f:32:d3:ad:58:de:
                    98:14:1e:97:c1:5c:9f:f5:af:cf:a7:7c:3e:c8:e5:
                    3d:e4:79:87:b4:b2:76:73:ec:a4:33:9c:d4:a2:6a:
                    94:b6:6f:54:6a:bf:19:c2:a1:b8:33:1c:24:15:16:
                    bc:6e:22:a6:4e:76:2b:ee:3d:48:73:53:07:0c:6c:
                    f5:56:13:e1:0a:ab:ee:90:bc:a2:0f:ec:12:4c:d8:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B6:B3:29:9C:9D:64:FC:ED:D9:65:86:97:F5:86:5E:AA:8C:F4:F3
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3231303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:210::/80

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:d1:8f:ca:b9:c0:09:c2:3f:eb:f2:7e:ec:b0:96:b2:74:
         d1:46:7f:45:dc:70:dc:bb:05:77:30:17:16:2c:2e:ed:cc:aa:
         f7:b1:fb:7f:d9:d5:5e:12:7f:2c:13:9a:21:1f:6b:76:b0:9e:
         7f:de:a7:2d:ff:2c:55:a5:6e:14:ea:2a:4e:d8:be:0d:a6:41:
         26:d2:28:b8:5e:00:cc:ee:0d:af:34:fd:30:a1:bb:a9:d8:c1:
         12:b6:40:9d:95:e4:65:21:07:c1:e3:a7:35:ce:98:1b:cb:57:
         2c:7a:1b:88:c1:a0:da:ed:64:07:d1:1a:eb:67:91:44:6b:22:
         d3:fd:4c:4f:19:85:1c:57:d5:32:31:50:01:c2:5f:a6:eb:83:
         c8:82:43:ce:b6:60:6a:e4:a8:57:bf:8e:0f:7c:78:b1:20:7b:
         d2:64:ae:17:8c:c8:a8:b1:0d:a9:cd:a9:b5:86:c2:26:ba:c2:
         23:1e:c0:15:12:1d:c8:43:cc:92:57:59:ce:53:8e:d8:2a:c4:
         b9:a2:2d:c0:1b:de:9d:20:4e:22:c0:9b:9c:62:03:eb:95:5b:
         27:fc:08:67:d1:a1:2e:7a:91:b6:63:26:d8:f5:3c:17:0f:c6:
         90:5b:29:23:21:37:c6:41:b0:e2:86:e6:47:e4:e0:f8:77:cf:
         f7:03:e6:f2
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUAnsJQ4t0jJ2irTHyBBsrayBMehYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA2MDIwNTAyWhcNMjMwMjA1MDIxMDAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEMxMDc2MDI2
MDhFNzNCNDYyOUE3NUMwMkY1MTJGOTI3RjQwMTk0RjQ5OURENDgzMDJFOTQ1NEQw
OTdCMUFDQTk4MTdBREFFMjEzQkM5MTAzQzM3RTBEQkQ5NTNFQkQ4MUIxRDVCMkVG
NDJGRTYxNjUzRkRERjg2Mzg5RTg5MkQzNDVEQzU4NTcxMjk2NzczRkE5MzNDRTcz
QTAxMjM2NDkzRDg1Rjk1NDg1NDJCM0IwRjZFN0IyOTZEMzNENzFCNTI5NjAzQzEy
RkNBMENDRDUyREVBMTVGNjUyMjhCODFFQkU4NTg0OTM1RkM3Q0QxNzVGQjk1RDc5
NTAwN0I0QzJFQzZFOTIyMDI2NDg3RTg4ODcxNjMwQkI4RkM3NTRCRkY0QkZCQTU4
MjA3RDdFQjRGQjFEMUZBRDg4OTVCN0Y1REZCQzIyQjREQkVCNTU3RUFBN0JBNDRB
Q0Q5RjMyRDNBRDU4REU5ODE0MUU5N0MxNUM5RkY1QUZDRkE3N0MzRUM4RTUzREU0
Nzk4N0I0QjI3NjczRUNBNDMzOUNENEEyNkE5NEI2NkY1NDZBQkYxOUMyQTFCODMz
MUMyNDE1MTZCQzZFMjJBNjRFNzYyQkVFM0Q0ODczNTMwNzBDNkNGNTU2MTNFMTBB
QUJFRTkwQkNBMjBGRUMxMjRDRDhGQ0Y5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMEHYCYI5ztGKadcAvUS+Sf0AZT0md1IMC6UVNCX
saypgXra4hO8kQPDfg29lT69gbHVsu9C/mFlP934Y4noktNF3FhXEpZ3P6kzznOg
EjZJPYX5VIVCs7D257KW0z1xtSlgPBL8oMzVLeoV9lIouB6+hYSTX8fNF1+5XXlQ
B7TC7G6SICZIfoiHFjC7j8dUv/S/ulggfX60+x0frYiVt/XfvCK02+tVfqp7pErN
nzLTrVjemBQel8Fcn/Wvz6d8PsjlPeR5h7SydnPspDOc1KJqlLZvVGq/GcKhuDMc
JBUWvG4ipk52K+49SHNTBwxs9VYT4Qqr7pC8og/sEkzY/PkCAwEAAaOCApowggKW
MB0GA1UdDgQWBBSCtrMpnJ1k/O3ZZYaX9YZeqoz08zAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzYzYTMyMzEzMDNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIGAhAwDQYJKoZIhvcN
AQELBQADggEBAAul0Y/KucAJwj/r8n7ssJaydNFGf0XccNy7BXcwFxYsLu3Mqvex
+3/Z1V4SfywTmiEfa3awnn/epy3/LFWlbhTqKk7Yvg2mQSbSKLheAMzuDa80/TCh
u6nYwRK2QJ2V5GUhB8HjpzXOmBvLVyx6G4jBoNrtZAfRGutnkURrItP9TE8ZhRxX
1TIxUAHCX6brg8iCQ862YGrkqFe/jg98eLEge9JkrheMyKixDanNqbWGwia6wiMe
wBUSHchDzJJXWc5TjtgqxLmiLcAb3p0gTiLAm5xiA+uVWyf8CGfRoS56kbZjJtj1
PBcPxpBbKSMhN8ZBsOKG5kfk4Ph3z/cD5vI=
-----END CERTIFICATE-----