Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3832353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230373a3832353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          guBEi1qihsyetLVE2vfTdjZk3F3Baz+JpncJ5jytDJU=
Subject key identifier:   8E:85:2D:F7:4B:EA:8E:84:B2:D0:98:26:94:ED:6A:D1:92:3E:B7:62
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7FEE93A9F4CFADBBB5819BFCCE4705611EF69DFE
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3832353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Mon 07 Feb 2022 08:25:01 +0000
ROA not before:           Mon 07 Feb 2022 08:20:01 +0000
ROA not after:            Mon 06 Feb 2023 08:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:207:825::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ee:93:a9:f4:cf:ad:bb:b5:81:9b:fc:ce:47:05:61:1e:f6:9d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  7 08:20:01 2022 GMT
            Not After : Feb  6 08:25:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:5d:1a:20:77:62:16:fa:fb:f8:a8:b3:2c:
                    72:cb:2c:1e:77:eb:61:8c:07:f6:44:9f:4b:bc:98:
                    e1:52:7b:5c:44:91:c3:ed:24:4e:0d:a7:d4:82:fe:
                    03:58:32:f7:20:e9:cb:46:82:09:19:bd:11:fd:5e:
                    17:8d:2d:6f:ba:44:72:53:dc:3c:08:cb:6d:d1:fe:
                    70:91:59:3b:3a:d2:d2:a1:07:51:08:9c:aa:c4:a5:
                    93:5d:f7:bf:8b:c0:e1:02:16:e0:91:76:ce:d6:11:
                    08:cc:90:ad:62:9b:ab:44:6a:b2:5d:4d:7d:aa:1e:
                    db:76:4c:93:63:d0:af:87:6b:38:55:09:e8:6c:16:
                    ee:76:16:78:f7:9e:0d:03:ff:11:8d:68:4a:c3:5d:
                    39:80:53:40:ee:ce:85:32:9c:25:6d:d3:7c:c4:32:
                    83:c7:67:87:87:dd:65:5f:9d:ba:37:24:46:ff:5c:
                    b5:6b:74:21:24:ac:bc:28:7d:ae:ee:e2:89:5e:19:
                    fc:e2:5d:be:73:be:db:b9:aa:5f:0a:78:30:ae:72:
                    bf:41:bc:71:a0:ab:0c:95:d2:10:2a:a7:09:83:92:
                    37:18:10:d0:1a:5e:15:84:3f:22:8a:f2:92:3b:93:
                    50:d7:b4:e3:b0:df:dd:81:b2:9a:3b:f2:62:6b:09:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:85:2D:F7:4B:EA:8E:84:B2:D0:98:26:94:ED:6A:D1:92:3E:B7:62
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230373a3832353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:207:825::/80

    Signature Algorithm: sha256WithRSAEncryption
         77:b7:9f:6a:12:07:74:91:b3:65:f9:b9:fb:dc:a7:e1:60:bd:
         6d:89:54:21:f3:c1:c7:16:9b:ef:de:8d:a2:ba:b0:93:77:a9:
         0c:a6:0d:53:d7:db:41:6a:86:5b:d8:7d:b7:38:6d:82:69:ee:
         cd:b2:54:e7:11:0a:b8:c5:7c:cf:9a:f8:de:60:d5:1a:54:66:
         cb:7d:d0:24:34:c9:bf:51:cb:5f:2c:47:5c:20:74:a7:87:8b:
         aa:80:24:0c:0d:9d:29:97:56:0f:b9:75:f3:fd:9d:1f:f3:ef:
         02:35:5f:19:8a:c9:c2:b7:db:02:31:85:ce:6d:61:ea:39:0b:
         66:d0:3e:6b:1c:b9:78:15:c2:aa:b6:6b:4e:34:b2:08:85:1a:
         55:cf:c3:65:a0:5f:d6:90:65:7f:d0:d0:30:9e:48:51:b6:f5:
         db:86:00:bb:c4:a1:05:22:66:f3:52:4c:4c:cb:3a:19:43:a8:
         9e:ef:43:94:0d:65:1c:14:37:36:db:44:3e:29:8b:d7:26:42:
         76:30:9f:b7:9d:ce:a4:86:a6:e7:fc:70:de:99:94:df:17:f0:
         4b:14:d4:5a:04:44:df:b4:32:91:89:ff:ee:cb:b3:27:7c:85:
         11:89:7b:56:72:ee:c3:20:0b:a3:e5:e5:fc:cc:72:0c:0b:04:
         03:d1:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----