Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a323133303a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a323133303a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          tvmLtrGUj3gsnxT7LIDXjG92VnhkkLPb2ZPiuP+Ue2Y=
Subject key identifier:   2C:DE:00:05:57:1B:30:43:70:99:AD:8C:DC:CC:8A:DA:A8:AA:05:97
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       220220DF03B098DAF6B0CC2FB04C31FAD927D5DC
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a323133303a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 21:30:01 +0000
ROA not before:           Mon 07 Feb 2022 21:25:01 +0000
ROA not after:            Mon 06 Feb 2023 21:30:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:2130::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:02:20:df:03:b0:98:da:f6:b0:cc:2f:b0:4c:31:fa:d9:27:d5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 21:25:01 2022 GMT
            Not After : Feb  6 21:30:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:ad:c5:d2:f3:23:09:4a:73:7c:ad:a2:2c:
                    63:5e:2e:01:0e:42:58:ce:63:33:0e:df:8e:7f:17:
                    b8:24:cf:96:55:c6:02:ba:d7:66:55:4e:de:22:1a:
                    0c:83:5d:b0:0c:0f:f1:30:ae:e1:e1:ee:39:71:65:
                    d9:70:34:c6:51:bb:bc:d3:ad:d2:1f:56:d6:68:54:
                    bf:89:38:bb:b6:c7:66:51:de:f8:65:08:07:96:5f:
                    d1:49:0a:97:67:a8:49:be:7a:19:19:d1:e2:8a:d4:
                    b6:12:3f:a5:91:37:79:96:01:f0:b1:40:d8:ad:dd:
                    71:19:9c:04:bd:86:f7:71:b2:61:5d:63:75:ca:33:
                    a4:03:f0:37:eb:d8:6b:89:83:9b:c4:f5:70:fa:8a:
                    e2:fb:b9:15:e3:cb:3b:75:ad:57:93:85:64:1c:1a:
                    ac:19:24:5e:83:4d:1f:8e:58:e0:4f:54:d2:26:90:
                    5c:70:ce:c9:02:b0:ea:0c:d7:f1:1d:75:b8:a2:2a:
                    d8:5c:4a:d3:50:30:09:cd:87:fd:1a:35:0a:0b:3f:
                    13:15:98:49:89:8c:5c:08:d3:9d:ff:a7:87:3f:46:
                    7b:41:33:c7:6f:1a:23:ff:09:53:19:47:3c:f5:57:
                    f3:a2:5a:1f:37:25:c4:b0:07:d3:25:e6:5a:02:28:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DE:00:05:57:1B:30:43:70:99:AD:8C:DC:CC:8A:DA:A8:AA:05:97
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a323133303a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:2130::/80

    Signature Algorithm: sha256WithRSAEncryption
         d5:77:d1:9f:d8:f2:36:ea:f9:51:aa:05:15:20:c6:02:1f:43:
         79:08:1c:67:38:cb:c1:46:b8:0c:7b:59:7b:fd:34:3b:6a:1b:
         78:c1:c4:ee:81:39:2c:9c:07:8b:6f:bf:d4:fd:e2:d1:7d:cb:
         af:c4:e8:f8:ac:dc:20:a9:0d:e3:e0:90:15:1c:2e:27:cb:0f:
         34:c4:b8:3b:67:84:7b:f1:72:8f:ce:8a:c8:68:a2:33:b5:3b:
         6c:9a:6b:f2:a8:bf:9b:09:13:2a:aa:5d:c2:12:3d:1e:ae:2e:
         9c:18:ba:94:9e:d3:cb:6a:cc:7c:ac:f8:76:a4:cf:48:06:43:
         03:06:f6:b5:fb:9b:94:6d:db:bd:49:1f:a8:3e:6e:61:23:a3:
         1f:b9:ad:43:82:13:11:5b:a7:70:a0:75:31:ab:bc:4b:a2:05:
         f0:f6:4d:59:1c:f6:12:17:6a:f5:39:89:45:6a:94:09:09:aa:
         6c:26:40:1a:d7:f0:4d:4d:a5:d4:72:d4:44:92:c9:9a:48:cc:
         c5:d8:9a:cc:1c:64:68:48:48:54:15:0e:ae:42:1d:c1:9f:fb:
         c2:d7:17:4f:18:39:9c:43:2b:b4:28:8e:4a:04:da:ac:20:61:
         64:26:d5:55:e0:14:df:10:aa:1e:e9:0b:99:24:94:f0:f2:dc:
         62:62:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----