Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3432353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a3432353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          7ZThWdUqp9d4WNmcOJNGGUuT8yBHgYs/K9MdbjknZsk=
Subject key identifier:   AA:D7:6B:B0:90:E2:3B:DC:B1:ED:D4:98:11:44:A1:1B:FE:F4:F6:95
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       66CED88C6D31AB25496363B17A4CECEE3C7640AF
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3432353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 04:25:02 +0000
ROA not before:           Sun 06 Feb 2022 04:20:02 +0000
ROA not after:            Sun 05 Feb 2023 04:25:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:425::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ce:d8:8c:6d:31:ab:25:49:63:63:b1:7a:4c:ec:ee:3c:76:40:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 04:20:02 2022 GMT
            Not After : Feb  5 04:25:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:7a:1d:7c:20:54:58:0c:49:98:a6:3c:e0:
                    45:a7:57:98:e5:0a:c5:39:ec:ee:f3:ae:fe:5a:b4:
                    6e:ad:ac:5a:8c:31:a0:b5:ae:7d:a9:f5:60:14:a7:
                    4d:fc:ab:b0:96:e1:a0:3e:44:c8:2c:5e:91:e3:85:
                    7e:c2:ff:2f:fc:c7:53:23:b7:57:18:0b:9f:af:0d:
                    a6:2c:0a:21:24:af:8f:c5:72:f0:37:7b:41:bd:1d:
                    d2:d5:05:0f:4d:16:fb:b6:9f:9e:16:2c:24:2c:ac:
                    a7:0a:3e:6f:14:71:c4:fe:be:65:78:14:fb:65:18:
                    f6:b3:86:5a:79:30:59:d3:12:d9:2e:7f:41:4b:2d:
                    33:dd:b3:66:00:73:77:30:53:f1:94:9c:3c:53:e8:
                    44:5b:13:fb:d8:ce:7d:7b:ea:f0:db:e0:f8:a9:ab:
                    c9:a8:d4:28:c8:4a:aa:10:f9:9f:21:75:7f:24:c2:
                    13:27:d9:aa:82:c3:6f:ae:b1:5e:fb:eb:50:74:bd:
                    a4:75:f8:13:c7:42:1d:f2:46:2d:ae:6f:4b:29:87:
                    a4:b3:9e:79:51:e5:09:d2:87:71:f2:1d:d6:08:2c:
                    75:f7:0a:af:f9:0f:3c:88:48:69:51:9f:0f:9d:ad:
                    72:82:c8:ac:b1:6e:9f:6c:a1:04:ad:4a:b1:42:d2:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D7:6B:B0:90:E2:3B:DC:B1:ED:D4:98:11:44:A1:1B:FE:F4:F6:95
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3432353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:425::/80

    Signature Algorithm: sha256WithRSAEncryption
         ba:fd:e4:32:a5:2d:29:9d:4b:96:d7:c8:e4:a3:db:46:ab:b4:
         fa:36:53:9d:ed:b2:cb:94:e9:be:ac:02:fb:4a:2d:2d:12:4f:
         41:f6:b7:f1:71:6b:e6:5c:21:52:02:16:2a:59:a9:fd:c8:06:
         6d:6e:f8:9e:6e:23:06:69:50:e8:23:8f:d8:b9:3f:a6:58:49:
         a3:0f:fe:9e:6f:2f:9c:32:64:21:53:28:75:88:85:43:1a:24:
         d5:aa:da:24:e9:bb:ad:2b:12:4d:d4:f1:b5:d7:7a:10:77:03:
         18:1e:a3:2e:66:60:bd:51:a7:46:8f:d8:b1:f2:95:d3:a9:f5:
         ff:bb:69:0c:02:5b:ba:b6:f7:c6:ce:8a:89:9b:8c:6b:5b:96:
         26:04:32:de:d2:a0:db:cb:a1:d6:0a:49:fa:13:52:4f:aa:2e:
         56:2e:54:9b:c9:34:de:f8:57:db:68:3f:f2:e8:de:3b:45:d6:
         cc:fd:fb:cb:23:32:88:02:12:b6:e1:bf:8f:8f:8f:ea:ef:dc:
         b0:56:49:a2:19:3e:97:1d:a5:c8:f7:81:c7:75:97:69:ba:2c:
         eb:41:b4:41:36:40:1e:44:9f:cf:c1:76:0f:59:ea:60:cd:05:
         26:f9:36:36:15:fb:52:8f:24:b0:8d:c6:b4:a6:8f:08:7d:3f:
         cb:d7:a1:0f
-----BEGIN CERTIFICATE-----
MIIHljCCBn6gAwIBAgIUZs7YjG0xqyVJY2Oxekzs7jx2QK8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA2MDQyMDAyWhcNMjMwMjA1MDQyNTAy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEIyMDI3QTFE
N0MyMDU0NTgwQzQ5OThBNjNDRTA0NUE3NTc5OEU1MEFDNTM5RUNFRUYzQUVGRTVB
QjQ2RUFEQUM1QThDMzFBMEI1QUU3REE5RjU2MDE0QTc0REZDQUJCMDk2RTFBMDNF
NDRDODJDNUU5MUUzODU3RUMyRkYyRkZDQzc1MzIzQjc1NzE4MEI5RkFGMERBNjJD
MEEyMTI0QUY4RkM1NzJGMDM3N0I0MUJEMUREMkQ1MDUwRjREMTZGQkI2OUY5RTE2
MkMyNDJDQUNBNzBBM0U2RjE0NzFDNEZFQkU2NTc4MTRGQjY1MThGNkIzODY1QTc5
MzA1OUQzMTJEOTJFN0Y0MTRCMkQzM0REQjM2NjAwNzM3NzMwNTNGMTk0OUMzQzUz
RTg0NDVCMTNGQkQ4Q0U3RDdCRUFGMERCRTBGOEE5QUJDOUE4RDQyOEM4NEFBQTEw
Rjk5RjIxNzU3RjI0QzIxMzI3RDlBQTgyQzM2RkFFQjE1RUZCRUI1MDc0QkRBNDc1
RjgxM0M3NDIxREYyNDYyREFFNkY0QjI5ODdBNEIzOUU3OTUxRTUwOUQyODc3MUYy
MURENjA4MkM3NUY3MEFBRkY5MEYzQzg4NDg2OTUxOUYwRjlEQUQ3MjgyQzhBQ0Ix
NkU5RjZDQTEwNEFENEFCMTQyRDI1NjE3MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALICeh18IFRYDEmYpjzgRadXmOUKxTns7vOu/lq0
bq2sWowxoLWufan1YBSnTfyrsJbhoD5EyCxekeOFfsL/L/zHUyO3VxgLn68NpiwK
ISSvj8Vy8Dd7Qb0d0tUFD00W+7afnhYsJCyspwo+bxRxxP6+ZXgU+2UY9rOGWnkw
WdMS2S5/QUstM92zZgBzdzBT8ZScPFPoRFsT+9jOfXvq8Nvg+KmryajUKMhKqhD5
nyF1fyTCEyfZqoLDb66xXvvrUHS9pHX4E8dCHfJGLa5vSymHpLOeeVHlCdKHcfId
1ggsdfcKr/kPPIhIaVGfD52tcoLIrLFun2yhBK1KsULSVhcCAwEAAaOCApowggKW
MB0GA1UdDgQWBBSq12uwkOI73LHt1JgRRKEb/vT2lTAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzYzYTM0MzIzNTNhM2EyZjM4MzAyZDM4MzAyMDNk
M2UyMDMzMzkzOTM1MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAm
BggrBgEFBQcBBwEB/wQXMBUwEwQCAAIwDQMLACYGPsAgIgIGBCUwDQYJKoZIhvcN
AQELBQADggEBALr95DKlLSmdS5bXyOSj20artPo2U53tssuU6b6sAvtKLS0ST0H2
t/Fxa+ZcIVICFipZqf3IBm1u+J5uIwZpUOgjj9i5P6ZYSaMP/p5vL5wyZCFTKHWI
hUMaJNWq2iTpu60rEk3U8bXXehB3Axgeoy5mYL1Rp0aP2LHyldOp9f+7aQwCW7q2
98bOiombjGtbliYEMt7SoNvLodYKSfoTUk+qLlYuVJvJNN74V9toP/Lo3jtF1sz9
+8sjMogCErbhv4+Pj+rv3LBWSaIZPpcdpcj3gcd1l2m6LOtBtEE2QB5En8/Bdg9Z
6mDNBSb5NjYV+1KPJLCNxrSmjwh9P8vXoQ8=
-----END CERTIFICATE-----