Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3230303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a3230303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          Qtu6xw/Gun+lwVLNgX0YnR4Dxv+/9sft9xmud5bzkSo=
Subject key identifier:   4F:9C:48:96:49:66:05:2E:72:4F:90:BA:4D:A3:23:D8:C4:A5:EC:1B
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3167120E6CE22ED506C4245D1A55405859E81B25
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3230303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 02:00:01 +0000
ROA not before:           Mon 07 Feb 2022 01:55:01 +0000
ROA not after:            Mon 06 Feb 2023 02:00:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:200::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:67:12:0e:6c:e2:2e:d5:06:c4:24:5d:1a:55:40:58:59:e8:1b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 01:55:01 2022 GMT
            Not After : Feb  6 02:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:10:ee:7c:37:c8:d5:57:e1:10:20:0d:01:56:
                    ca:5e:37:83:06:93:f6:00:f9:b9:c9:43:63:20:1e:
                    44:be:e5:49:7f:6a:70:dd:ec:6c:59:16:42:49:b7:
                    36:7c:38:cf:5f:c0:3f:dc:74:31:10:0e:e8:72:be:
                    ed:4e:d4:f9:58:a2:b7:18:bb:ee:68:7b:ed:c7:8d:
                    b0:1c:54:bf:2e:a1:cf:cc:0a:76:05:12:2d:b7:51:
                    f8:6f:46:6a:52:78:74:b9:2f:b4:f4:a4:76:2c:c0:
                    c0:2c:a4:25:4f:47:4f:f6:60:10:17:44:12:06:9d:
                    88:d9:d7:52:39:64:a0:e4:7b:c3:e9:0b:b6:bb:f9:
                    48:b4:33:9b:6b:35:5b:de:43:fa:38:f1:98:91:fe:
                    74:74:58:68:42:be:19:1c:e1:0a:ae:5f:b5:3f:e5:
                    f1:6f:a8:3a:fe:0e:dc:f1:66:3f:96:01:81:46:e3:
                    d9:76:42:a6:7d:ff:d6:9a:0c:e8:3e:fa:b7:45:9e:
                    36:97:08:a4:2a:8e:9f:4c:86:25:09:84:59:ae:fd:
                    f0:f5:55:6b:f0:80:b6:34:ef:34:d0:97:eb:97:ef:
                    7a:72:73:0f:16:7b:c2:af:37:2c:45:7d:76:be:49:
                    94:21:01:ee:e3:ac:14:7b:84:0a:eb:08:86:c2:68:
                    62:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9C:48:96:49:66:05:2E:72:4F:90:BA:4D:A3:23:D8:C4:A5:EC:1B
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3230303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:200::/80

    Signature Algorithm: sha256WithRSAEncryption
         8a:10:74:3a:61:dd:a3:c4:b1:2b:2a:2e:04:6d:ec:ac:59:eb:
         5b:aa:c0:8b:a2:9b:36:28:2c:ac:10:04:2c:65:fa:1c:4b:7a:
         1d:18:59:7f:88:b3:ba:09:b9:19:fa:57:9c:70:7c:b0:4b:ae:
         c1:85:cd:e3:bd:75:6f:41:65:e5:48:87:bf:72:10:29:e0:07:
         27:36:87:33:c6:cf:d8:f3:1a:a0:4c:4e:45:93:96:e7:f4:39:
         b7:9f:5b:69:e4:f6:79:45:56:60:b9:27:f9:5b:8c:5c:12:b9:
         92:8e:e2:eb:1c:cd:22:7d:73:c4:2c:52:2c:5e:a3:37:2e:48:
         4e:41:c3:ba:89:46:94:50:85:87:96:47:2b:d0:8f:76:e0:61:
         bc:0b:0b:6d:c7:0e:71:71:1d:5f:af:7d:1e:ac:eb:e1:30:c5:
         1b:ec:35:e7:2d:e6:3b:e0:84:13:83:62:67:13:c8:95:8d:25:
         85:2d:de:5e:c2:ab:4a:66:9b:0d:1e:94:73:20:bd:23:1d:f3:
         75:3f:81:85:97:28:c1:5c:61:6d:8a:a6:03:e4:e5:ed:84:6c:
         1d:a0:76:81:99:7d:ce:50:c1:cf:16:2e:88:c6:52:12:ce:aa:
         cc:84:a3:d7:9b:59:16:93:35:fa:65:a7:69:08:28:5f:f6:48:
         ee:28:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----