Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313235353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a313235353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          6eUDGSK5kZ2J3CozdTaADEh9L2dOjA+gzEyI6wucg9Q=
Subject key identifier:   A1:82:41:16:C8:B2:02:23:B0:82:76:96:F8:EE:3B:2E:9B:BB:1C:F6
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       5D8EE47111B14DC6F6A6CF0FB3EEE55E47422CAA
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313235353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 12:55:01 +0000
ROA not before:           Mon 07 Feb 2022 12:50:01 +0000
ROA not after:            Mon 06 Feb 2023 12:55:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:1255::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:e4:71:11:b1:4d:c6:f6:a6:cf:0f:b3:ee:e5:5e:47:42:2c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 12:50:01 2022 GMT
            Not After : Feb  6 12:55:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:0f:ac:c9:39:cd:ab:10:20:1b:96:4d:79:
                    5e:df:f3:d5:e2:09:4d:6a:48:3c:b2:6e:e1:a4:3d:
                    03:84:d7:15:66:1f:62:44:46:2f:31:8f:9b:61:5c:
                    49:6b:8c:e6:bf:88:01:a0:57:cb:ef:42:70:a5:e8:
                    7e:35:c5:cd:a5:71:63:f4:af:1d:71:56:49:ef:55:
                    3f:70:1d:b6:01:58:d5:99:8b:a5:3f:65:4e:01:34:
                    eb:7c:42:f2:0f:80:43:96:25:e5:78:49:11:76:b2:
                    59:0a:fc:87:96:88:49:5f:dd:53:ce:39:fb:f5:74:
                    8f:5c:a9:64:91:1a:d3:ec:38:b1:83:4b:64:91:11:
                    ce:fc:90:fe:41:e8:06:42:17:98:69:85:9c:69:31:
                    d2:72:4d:37:7a:04:70:89:d5:72:da:0e:1a:be:86:
                    5f:9b:2f:63:77:ce:30:b8:62:4c:12:17:ef:01:39:
                    ac:ca:26:3f:f8:cc:52:5e:07:eb:f3:26:11:ed:23:
                    4c:01:c7:80:ee:82:7e:8b:62:7c:6c:39:d8:16:e1:
                    c1:23:2e:11:60:af:db:97:9c:5a:9f:d6:f9:9a:5c:
                    0e:4f:b0:f3:1c:37:06:a0:ed:9e:9d:31:3a:42:f0:
                    09:3b:54:c0:b5:4e:24:46:08:51:8b:67:6c:03:79:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:82:41:16:C8:B2:02:23:B0:82:76:96:F8:EE:3B:2E:9B:BB:1C:F6
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313235353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:1255::/80

    Signature Algorithm: sha256WithRSAEncryption
         b8:5d:fc:8b:e7:02:6d:47:c7:5c:cb:5b:f0:5d:04:8e:1f:9d:
         45:73:3a:ce:79:04:3f:d8:eb:ac:19:2c:c0:30:14:50:df:58:
         8d:25:2a:0a:70:71:19:0f:5f:78:26:3c:95:68:a7:2c:bf:77:
         e1:82:33:71:83:f3:25:07:cb:8a:8c:fd:60:a1:b2:87:d3:0c:
         03:e8:ec:37:97:8d:0a:bf:fd:da:bc:9a:b6:13:d7:17:eb:fd:
         6d:ca:63:79:da:a8:d6:e5:a3:55:13:be:8b:d3:dc:77:3c:a0:
         7f:0b:14:fa:4e:cf:4b:2d:a6:55:23:89:ab:ef:0d:65:6f:59:
         b3:67:32:d1:e6:91:99:0f:f0:b6:72:63:88:1b:77:b1:03:ab:
         96:05:13:3b:4a:2f:6f:a2:af:f9:4d:32:17:51:32:0a:b2:9b:
         8c:5c:07:c1:b3:53:54:20:b5:1b:87:b2:e8:3e:82:88:55:83:
         34:5a:07:14:b0:61:7c:af:6c:43:9b:38:5a:10:e3:4d:9e:95:
         d2:de:85:14:65:86:3e:6f:ac:dc:94:42:56:17:ac:63:68:a2:
         e8:ba:bc:a9:4a:ec:d2:c3:4a:49:88:e5:a8:a6:68:6b:9e:2e:
         14:b6:22:19:71:c0:ff:cf:d7:90:15:94:45:f7:9d:02:95:ba:
         0a:0f:75:56
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUXY7kcRGxTcb2ps8Ps+7lXkdCLKowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA3MTI1MDAxWhcNMjMwMjA2MTI1NTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEJCRkUwRkFD
QzkzOUNEQUIxMDIwMUI5NjRENzk1RURGRjNENUUyMDk0RDZBNDgzQ0IyNkVFMUE0
M0QwMzg0RDcxNTY2MUY2MjQ0NDYyRjMxOEY5QjYxNUM0OTZCOENFNkJGODgwMUEw
NTdDQkVGNDI3MEE1RTg3RTM1QzVDREE1NzE2M0Y0QUYxRDcxNTY0OUVGNTUzRjcw
MURCNjAxNThENTk5OEJBNTNGNjU0RTAxMzRFQjdDNDJGMjBGODA0Mzk2MjVFNTc4
NDkxMTc2QjI1OTBBRkM4Nzk2ODg0OTVGREQ1M0NFMzlGQkY1NzQ4RjVDQTk2NDkx
MUFEM0VDMzhCMTgzNEI2NDkxMTFDRUZDOTBGRTQxRTgwNjQyMTc5ODY5ODU5QzY5
MzFEMjcyNEQzNzdBMDQ3MDg5RDU3MkRBMEUxQUJFODY1RjlCMkY2Mzc3Q0UzMEI4
NjI0QzEyMTdFRjAxMzlBQ0NBMjYzRkY4Q0M1MjVFMDdFQkYzMjYxMUVEMjM0QzAx
Qzc4MEVFODI3RThCNjI3QzZDMzlEODE2RTFDMTIzMkUxMTYwQUZEQjk3OUM1QTlG
RDZGOTlBNUMwRTRGQjBGMzFDMzcwNkEwRUQ5RTlEMzEzQTQyRjAwOTNCNTRDMEI1
NEUyNDQ2MDg1MThCNjc2QzAzNzlCNzkxMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALv+D6zJOc2rECAblk15Xt/z1eIJTWpIPLJu4aQ9
A4TXFWYfYkRGLzGPm2FcSWuM5r+IAaBXy+9CcKXofjXFzaVxY/SvHXFWSe9VP3Ad
tgFY1ZmLpT9lTgE063xC8g+AQ5Yl5XhJEXayWQr8h5aISV/dU845+/V0j1ypZJEa
0+w4sYNLZJERzvyQ/kHoBkIXmGmFnGkx0nJNN3oEcInVctoOGr6GX5svY3fOMLhi
TBIX7wE5rMomP/jMUl4H6/MmEe0jTAHHgO6CfotifGw52BbhwSMuEWCv25ecWp/W
+ZpcDk+w8xw3BqDtnp0xOkLwCTtUwLVOJEYIUYtnbAN5t5ECAwEAAaOCApwwggKY
MB0GA1UdDgQWBBShgkEWyLICI7CCdpb47jsum7sc9jAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzczYTMxMzIzNTM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAgcSVTANBgkqhkiG
9w0BAQsFAAOCAQEAuF38i+cCbUfHXMtb8F0Ejh+dRXM6znkEP9jrrBkswDAUUN9Y
jSUqCnBxGQ9feCY8lWinLL934YIzcYPzJQfLioz9YKGyh9MMA+jsN5eNCr/92rya
thPXF+v9bcpjedqo1uWjVRO+i9PcdzygfwsU+k7PSy2mVSOJq+8NZW9Zs2cy0eaR
mQ/wtnJjiBt3sQOrlgUTO0ovb6Kv+U0yF1EyCrKbjFwHwbNTVCC1G4ey6D6CiFWD
NFoHFLBhfK9sQ5s4WhDjTZ6V0t6FFGWGPm+s3JRCVhesY2ii6Lq8qUrs0sNKSYjl
qKZoa54uFLYiGXHA/8/XkBWURfedApW6Cg91Vg==
-----END CERTIFICATE-----