Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a323334353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a323334353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          8tYfJWZGjsCNJoCNPvmlL2oeKfzwD3M+qj2QGi/khYk=
Subject key identifier:   3B:75:9D:87:2B:B6:45:5F:A4:1D:63:A9:1C:B9:E6:CF:A5:B4:8D:0A
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       01FE722A57771575C60281E93F68D57C0CDCD79A
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a323334353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 23:45:01 +0000
ROA not before:           Mon 07 Feb 2022 23:40:01 +0000
ROA not after:            Mon 06 Feb 2023 23:45:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:2345::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fe:72:2a:57:77:15:75:c6:02:81:e9:3f:68:d5:7c:0c:dc:d7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 23:40:01 2022 GMT
            Not After : Feb  6 23:45:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:e3:95:d8:58:f9:a1:cd:ab:61:4e:ff:03:
                    f8:cc:cc:cc:88:1b:6a:2f:ae:90:3c:0e:c9:5b:a0:
                    c9:c4:ef:9b:83:c4:fa:93:92:bc:49:14:74:75:15:
                    21:00:27:db:14:3f:9b:c8:ba:9c:08:fe:30:39:cd:
                    5b:9c:c0:d3:de:fc:fd:70:19:12:38:50:79:90:cb:
                    ec:5e:34:05:4b:e7:fc:98:65:b7:3f:74:c1:8e:ac:
                    29:c5:a0:e3:4b:45:8c:d7:cd:c2:8b:df:bc:bf:50:
                    3b:73:7d:ee:30:06:b5:b5:de:db:f1:42:20:aa:a0:
                    9f:5a:15:ad:9e:59:de:9a:9a:8d:42:c0:44:82:52:
                    ea:91:e2:a5:04:49:ca:62:01:f0:57:a5:88:43:c2:
                    00:19:8e:c4:2b:d4:1a:09:cc:96:28:73:da:a7:f9:
                    4e:fc:83:83:18:4c:e4:dc:bf:eb:3a:d0:24:4b:3f:
                    fa:ba:e4:08:28:86:ba:f0:d2:56:45:72:ed:34:14:
                    bb:8e:57:3e:86:ef:b3:f7:10:88:e7:97:76:fd:e9:
                    9d:29:93:88:08:e7:ed:69:82:37:c7:31:97:9e:a7:
                    f7:85:5b:86:af:3f:e1:87:d3:7e:ef:81:ec:cc:39:
                    ed:1a:f4:4e:ff:32:0c:57:a3:7b:a3:93:ff:d4:81:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:75:9D:87:2B:B6:45:5F:A4:1D:63:A9:1C:B9:E6:CF:A5:B4:8D:0A
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a323334353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:2345::/80

    Signature Algorithm: sha256WithRSAEncryption
         44:26:85:a0:99:d8:8d:53:fd:cb:ad:a7:e9:06:6e:ec:14:39:
         92:5e:51:26:5e:6c:36:ef:4d:bb:94:38:73:e1:0e:3d:d1:25:
         60:31:a3:d7:ab:65:12:b8:27:45:23:04:d9:e6:b3:b0:ac:b8:
         27:6f:23:13:1d:7e:55:90:41:4a:19:94:2a:53:c4:f6:fc:b0:
         ca:1d:05:3a:13:70:44:54:16:d5:47:9c:2b:b9:6b:f9:de:36:
         6f:b4:5e:eb:c3:1c:a7:cd:9d:84:c1:65:99:03:5e:e6:b1:a1:
         0d:94:09:23:46:64:23:62:f7:64:4c:6c:dc:32:5d:7e:75:ce:
         ea:8f:8f:1f:16:eb:3f:0b:1f:b8:7e:ac:12:5a:8d:67:eb:6e:
         74:86:7f:f6:2d:54:19:a7:ac:5c:16:8c:62:50:f6:9a:67:f9:
         5f:14:c2:59:cc:bd:6a:8d:26:e8:d2:cf:b2:82:10:b7:af:32:
         61:29:53:81:b3:36:99:2f:a0:01:fe:92:42:4e:36:4e:fb:0d:
         d7:53:f2:10:16:88:d6:a6:3a:5f:2e:d9:8e:4f:bc:3a:b5:8a:
         93:1a:a4:ac:0d:3d:a5:d3:71:5b:32:08:53:88:40:6b:7c:92:
         23:37:12:78:fa:e9:29:a9:2e:ab:fc:24:8a:b8:99:a4:f1:59:
         c9:4e:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----