Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3834353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230363a3834353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          j9FsOkewhLS6AF9Av1RG8FqKYD3UlHGRDkWmOX+yIy8=
Subject key identifier:   52:37:43:DC:BE:A7:B7:2F:AE:25:5F:30:15:3B:70:CA:9A:C3:B1:F7
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       19F0E25C3A3EFE9FFA6B4C52C744AB19FDE74D0E
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3834353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sun 06 Feb 2022 08:45:01 +0000
ROA not before:           Sun 06 Feb 2022 08:40:01 +0000
ROA not after:            Sun 05 Feb 2023 08:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:206:845::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f0:e2:5c:3a:3e:fe:9f:fa:6b:4c:52:c7:44:ab:19:fd:e7:4d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  6 08:40:01 2022 GMT
            Not After : Feb  5 08:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:f0:70:d9:f1:00:bf:b0:74:53:1b:59:00:
                    9d:58:55:a4:99:6a:3c:66:21:7a:f1:e2:6d:c0:db:
                    3b:b7:f9:ee:5f:e8:29:ef:f1:04:de:4e:01:fa:e6:
                    a9:85:8d:1c:87:5e:73:7a:83:f1:5f:c5:11:9f:d4:
                    b9:61:b7:8f:f8:13:b2:15:8e:42:92:3c:34:85:56:
                    09:d5:ad:82:b1:e5:f5:21:fe:51:47:78:9e:8b:50:
                    43:a1:c3:38:2f:cb:75:25:60:a1:cf:9c:90:de:c5:
                    43:ec:8c:aa:8e:ae:ef:b9:a2:87:6b:df:29:a7:bb:
                    bc:63:5e:3b:2c:a5:96:96:e2:36:05:b1:b2:fc:96:
                    31:a7:82:f0:e0:48:2b:5c:14:10:15:37:8c:0c:a8:
                    d2:8d:31:0d:06:31:15:2c:bd:77:32:44:0e:b7:98:
                    24:ab:aa:68:09:a8:b6:28:8b:2d:85:c8:d1:bd:c3:
                    95:90:20:ce:d9:35:90:aa:b8:a5:a9:93:dd:a1:1a:
                    40:4b:55:66:3a:31:d5:60:29:2f:4c:8b:6b:8e:31:
                    28:cf:ea:93:fd:ff:0f:82:7b:64:a1:31:41:8d:0d:
                    4e:12:52:da:30:eb:d0:16:96:48:1e:4b:03:49:71:
                    ad:23:4d:99:a0:10:91:a3:c8:f8:5f:08:4b:3a:84:
                    af:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:37:43:DC:BE:A7:B7:2F:AE:25:5F:30:15:3B:70:CA:9A:C3:B1:F7
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230363a3834353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:206:845::/80

    Signature Algorithm: sha256WithRSAEncryption
         33:14:39:e3:21:7a:55:34:92:63:d8:40:a4:8f:7a:51:e2:bf:
         13:2c:49:91:b5:b9:55:dd:cc:87:d2:79:c6:d6:67:8b:dd:c5:
         c0:9d:0c:7f:90:c8:a8:22:97:ee:84:3a:3b:af:77:c0:9b:f7:
         23:18:59:50:b4:d9:3b:b3:81:d3:d5:b7:33:bd:2e:24:af:5e:
         2f:cd:bb:ca:0e:a7:00:22:da:c5:ad:3f:07:af:9e:56:d4:e3:
         7b:aa:b3:fb:3a:cd:de:a8:5b:00:15:24:7a:99:32:1b:1a:f9:
         a5:73:da:97:19:b0:c1:de:b2:a5:b3:84:6c:f6:24:aa:7e:4b:
         12:21:51:00:2b:0e:90:8b:1e:d1:03:38:2a:8c:40:33:71:64:
         55:4b:17:ec:06:8e:42:f0:54:09:fb:71:a6:5d:9c:57:e3:4c:
         9e:24:6d:49:95:5d:3a:87:94:1f:b7:54:9c:56:e2:b8:c5:eb:
         23:2f:5a:b1:c4:48:28:93:f5:4e:1d:b7:cf:64:2d:ed:33:0d:
         92:fc:6a:80:b0:0e:24:51:cf:29:ae:b5:78:27:62:53:a3:8e:
         c9:56:7c:d9:82:0b:3e:db:f0:01:6e:3e:1f:10:76:46:4f:6b:
         49:79:ed:4d:ed:7b:32:65:df:5b:e0:05:4f:f5:41:69:04:f8:
         ef:c3:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----