Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313932303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a313932303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          hG93jGvmgM1cS91+u7OS74Ue1m76B4jStOZNy28eCTU=
Subject key identifier:   72:07:3F:ED:D8:E3:90:12:67:E1:1B:DD:4A:87:81:18:64:30:F4:0F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       42366174D54733334494B247BCCF4A74C9C6CD0D
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313932303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 19:20:01 +0000
ROA not before:           Mon 07 Feb 2022 19:15:01 +0000
ROA not after:            Mon 06 Feb 2023 19:20:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:1920::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:36:61:74:d5:47:33:33:44:94:b2:47:bc:cf:4a:74:c9:c6:cd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 19:15:01 2022 GMT
            Not After : Feb  6 19:20:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:c9:44:fc:ec:9c:9a:f0:dc:ea:24:04:0d:
                    c5:cb:27:86:d1:43:7d:05:a8:9e:15:91:97:93:f1:
                    25:c3:19:6a:44:23:98:3c:0d:6f:8d:6a:42:4e:84:
                    13:ab:12:03:84:61:91:4c:d6:df:d9:3d:a3:23:59:
                    6b:6d:99:7e:c0:66:0c:d0:1c:75:ab:52:7f:d2:5d:
                    56:4b:ea:84:1e:60:d0:7c:f4:11:b8:f3:7e:64:33:
                    02:e8:60:0b:88:29:9b:53:12:88:03:69:d4:16:bc:
                    58:cf:30:48:a7:68:5a:e5:74:8c:be:20:88:80:f1:
                    6d:f2:36:a3:bc:c5:c4:fa:63:60:e2:39:be:df:7b:
                    e1:cd:8b:fd:31:b7:45:bd:85:bc:26:35:76:f6:0e:
                    20:41:a9:60:69:48:b5:12:ba:25:fd:6c:79:61:4e:
                    35:59:02:cd:f5:c8:b2:b5:d5:56:d6:dd:44:fa:5c:
                    25:2d:45:df:79:9d:72:9d:59:85:e0:5b:5e:08:44:
                    d2:da:fb:e8:ba:eb:a8:97:3c:02:24:b1:87:17:3a:
                    65:d7:1e:54:cf:27:98:f4:7e:1d:35:89:83:6e:ee:
                    32:9e:c5:3d:b7:9d:91:1d:f6:0b:be:e6:1a:f7:a7:
                    fb:8d:39:2a:9d:ed:d1:b9:3b:c0:35:aa:f2:4e:e5:
                    1f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:07:3F:ED:D8:E3:90:12:67:E1:1B:DD:4A:87:81:18:64:30:F4:0F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a313932303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:1920::/80

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:3f:de:a5:e1:03:7c:fd:c2:c7:2f:0f:52:db:1a:ad:d4:
         5a:23:a5:54:8f:ff:d8:27:42:84:89:5a:a9:6f:ac:a6:60:8a:
         13:02:56:82:81:38:a8:46:13:67:96:51:28:91:0f:af:e1:21:
         ce:f7:80:9e:87:e8:99:81:55:47:9b:6d:aa:93:34:8e:d7:ca:
         3f:14:da:47:4c:26:7a:2a:08:0d:d2:7a:fb:6f:35:4d:7a:e5:
         31:d2:ba:25:c4:b1:b6:d9:f4:05:b5:4a:c9:35:23:7c:00:06:
         ec:12:f6:29:2a:b4:5d:69:6f:9b:45:64:11:96:f6:69:9b:a9:
         75:8d:3b:fa:6f:54:6b:6c:e2:bb:21:62:b1:10:12:f7:13:d3:
         6c:cf:66:39:83:15:d4:de:f6:c0:29:3b:8a:cf:a0:a2:6d:91:
         45:4f:c3:59:5b:0e:07:09:41:3d:b0:1a:5d:40:64:b2:b1:30:
         73:33:44:a9:16:11:f9:37:6a:0b:b8:08:c3:1d:7d:69:fd:7a:
         c8:10:42:38:26:4c:6b:44:a5:1d:77:67:09:ae:63:20:28:0d:
         03:91:6c:1b:21:5a:dc:e2:10:e0:64:ea:53:f7:c2:17:bf:88:
         03:3e:e8:c3:e7:ed:a3:6c:42:fb:ea:50:09:52:39:1d:bf:ba:
         08:9a:d4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----