Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3633353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a3633353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          pDxvv+HjSGerZapNKPKKXbZBCgU4n9jAc4ZF1jfP/QU=
Subject key identifier:   E4:33:7A:DA:56:04:A1:32:EA:88:E8:E0:63:20:E1:A8:8D:D6:55:D2
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       37F96FB02313553EEF179D13C23F6AE5FA600A5A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3633353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 06:35:01 +0000
ROA not before:           Sun 06 Feb 2022 06:30:01 +0000
ROA not after:            Sun 05 Feb 2023 06:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:635::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f9:6f:b0:23:13:55:3e:ef:17:9d:13:c2:3f:6a:e5:fa:60:0a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 06:30:01 2022 GMT
            Not After : Feb  5 06:35:01 2023 GMT
        Subject: CN=3082010A0282010100CF4AE82EEC79046F6BED2198D4C180EDDDD72D55D1A3E9429FEE2F481131F952BE57BE1E46147E895A32ADCA722D7E885B480DE5DA14EC230FFF1CFD134D07796934F86FBCC9EB2C6D94F383BE9EE9136956FA2BB9E2FE9150D72E92033D97CF8FA5179D25F4F7FDAD18F87940F502B0280E17C81625077207EB173B3A7B9C3670CCDBFFF828F005448A65B902AB5276FD0193C6706F19ABE1A3734916DC7C641D4CBDA78AC1D816CFFD475924664626F59502A39ED6D051D6F5E94615ADCE98DCB8B3156357FA6BD906AF5A5DB7EBCF2F824CE876E87F6ED1FFCBFF5F0FF5F199A1C40798936BF8267DF8AC2D13813D9DEF715B859064A26CD9AD61647A8C790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:e8:2e:ec:79:04:6f:6b:ed:21:98:d4:c1:
                    80:ed:dd:d7:2d:55:d1:a3:e9:42:9f:ee:2f:48:11:
                    31:f9:52:be:57:be:1e:46:14:7e:89:5a:32:ad:ca:
                    72:2d:7e:88:5b:48:0d:e5:da:14:ec:23:0f:ff:1c:
                    fd:13:4d:07:79:69:34:f8:6f:bc:c9:eb:2c:6d:94:
                    f3:83:be:9e:e9:13:69:56:fa:2b:b9:e2:fe:91:50:
                    d7:2e:92:03:3d:97:cf:8f:a5:17:9d:25:f4:f7:fd:
                    ad:18:f8:79:40:f5:02:b0:28:0e:17:c8:16:25:07:
                    72:07:eb:17:3b:3a:7b:9c:36:70:cc:db:ff:f8:28:
                    f0:05:44:8a:65:b9:02:ab:52:76:fd:01:93:c6:70:
                    6f:19:ab:e1:a3:73:49:16:dc:7c:64:1d:4c:bd:a7:
                    8a:c1:d8:16:cf:fd:47:59:24:66:46:26:f5:95:02:
                    a3:9e:d6:d0:51:d6:f5:e9:46:15:ad:ce:98:dc:b8:
                    b3:15:63:57:fa:6b:d9:06:af:5a:5d:b7:eb:cf:2f:
                    82:4c:e8:76:e8:7f:6e:d1:ff:cb:ff:5f:0f:f5:f1:
                    99:a1:c4:07:98:93:6b:f8:26:7d:f8:ac:2d:13:81:
                    3d:9d:ef:71:5b:85:90:64:a2:6c:d9:ad:61:64:7a:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:33:7A:DA:56:04:A1:32:EA:88:E8:E0:63:20:E1:A8:8D:D6:55:D2
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3633353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:635::/80

    Signature Algorithm: sha256WithRSAEncryption
         d7:dd:7f:9c:07:6a:1a:48:92:d0:fc:e5:a8:0f:7a:51:0d:76:
         9f:2c:d2:61:d5:93:32:01:8d:96:20:df:23:59:96:aa:c1:d1:
         b6:f9:b6:12:64:88:22:d1:07:4f:4f:dc:3d:9c:3b:59:03:f2:
         82:2a:7a:e0:76:e1:7f:6d:0b:9e:52:ac:90:0c:c5:58:f4:b2:
         0d:7e:91:f5:e7:c8:55:b1:52:e5:92:4e:ca:c2:34:00:fc:f3:
         a7:13:6f:5f:e6:6c:74:68:a1:96:09:0b:c0:69:68:8c:47:59:
         86:d3:b5:aa:d9:aa:6f:da:fb:a6:38:0a:21:40:65:42:0a:eb:
         e8:7a:eb:4b:52:f8:12:45:6c:11:02:11:57:f2:e2:ef:9c:af:
         98:bb:5a:68:e7:69:f2:4e:01:d4:5a:fb:1c:85:53:e6:78:b7:
         c3:e6:79:2b:0e:85:d9:5b:f0:d8:74:1a:5c:f3:cd:0d:73:d8:
         43:31:56:bd:2f:89:77:83:ce:5c:a9:da:c9:c0:5d:61:d1:ae:
         be:6a:d5:69:97:fa:8a:37:5f:3b:23:bb:dc:f2:e6:78:93:ec:
         45:28:b9:7b:27:36:31:6e:af:1d:4d:39:03:f6:fe:92:9f:88:
         cc:66:71:68:f3:bc:04:33:c0:c7:31:65:a6:c5:15:3e:c8:0e:
         8b:0c:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----