Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313233353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a313233353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          s0O9a83BPuxMFrvvTlS+ibqAZy41QRXZZ24owrMqxVE=
Subject key identifier:   80:FF:17:FD:E2:77:F2:09:7E:53:BC:F1:B3:B0:9D:BC:44:C1:45:D8
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       119B1663928F0984F506CFA3F61974F3AB25C939
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313233353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 12:35:01 +0000
ROA not before:           Tue 08 Feb 2022 12:30:01 +0000
ROA not after:            Tue 07 Feb 2023 12:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:1235::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9b:16:63:92:8f:09:84:f5:06:cf:a3:f6:19:74:f3:ab:25:c9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 12:30:01 2022 GMT
            Not After : Feb  7 12:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:39:b7:c9:12:5c:af:a6:20:df:07:e7:b1:
                    57:8c:e7:74:93:42:92:9e:b7:6f:c8:28:62:0f:57:
                    80:cd:58:eb:9d:65:58:5f:67:44:9e:c9:60:14:51:
                    ff:ad:9d:3a:b3:48:7e:ef:f6:8a:12:a9:d7:4f:3b:
                    54:7f:4c:64:11:af:85:90:09:7b:4c:d8:86:b0:ef:
                    3e:e7:4e:15:ed:4e:a5:c0:53:bc:05:b7:72:62:ea:
                    f4:ac:40:2e:4d:a0:fb:e9:aa:4c:89:3b:fe:0f:f0:
                    ec:43:5f:49:ed:10:84:95:23:61:0d:89:2d:b1:b6:
                    6b:71:95:4f:ef:31:51:e1:b5:17:da:f1:b9:41:b3:
                    48:0f:55:6d:3d:de:b2:2d:99:d4:62:63:3c:76:37:
                    32:79:2b:2a:52:de:bf:ec:74:10:03:e2:17:b7:be:
                    cb:f6:84:ac:ac:a5:b6:35:f9:13:79:c3:94:53:0e:
                    45:93:93:2b:0e:fd:3b:cb:80:18:d0:0d:93:94:f5:
                    50:af:19:16:e5:6b:dd:a4:2e:05:3b:d3:f8:bf:38:
                    3e:af:cc:a0:0f:65:87:0b:28:ae:f1:0c:3d:9d:ed:
                    05:ae:e0:ce:d8:de:76:10:dc:89:68:5a:13:c9:53:
                    c0:29:18:a4:fa:ff:94:f5:da:fe:96:67:20:bd:a3:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:17:FD:E2:77:F2:09:7E:53:BC:F1:B3:B0:9D:BC:44:C1:45:D8
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a313233353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:1235::/80

    Signature Algorithm: sha256WithRSAEncryption
         67:49:32:89:6d:18:3e:7e:ea:79:8f:ea:16:c2:43:d9:48:42:
         39:c0:af:4f:b0:74:88:8a:47:fa:94:a0:2f:41:b3:a3:7e:63:
         45:b9:0b:3a:7b:0e:fd:10:ca:d7:07:d4:f1:66:75:d8:d0:1a:
         b2:9d:d0:8d:42:c1:7b:3b:1b:bb:31:c8:20:df:dc:57:5f:2a:
         78:d0:5d:16:de:c3:ba:7d:44:5f:56:d9:68:fb:25:b7:d9:bd:
         eb:40:88:d3:39:a0:b0:3d:88:0a:f4:7b:ed:06:2c:41:9e:e6:
         4b:49:a7:27:ca:28:e6:87:f1:fd:1a:bc:58:83:84:e0:42:01:
         7e:37:ad:62:8e:3f:a3:cd:0e:3d:48:8f:dd:f9:9e:3b:4c:7d:
         51:09:53:f6:48:12:36:e8:52:03:90:8b:32:be:4c:8d:fb:5b:
         aa:61:ab:ae:69:31:36:33:67:75:44:ff:85:c2:ab:c5:48:8e:
         63:a2:4b:db:fd:08:4a:d2:9a:b1:be:6a:82:eb:d0:67:34:ce:
         2a:ba:2f:bc:02:0f:0f:49:4a:8a:f3:8e:ae:44:aa:20:28:ab:
         bf:d8:24:00:6f:1d:a9:0f:d4:11:7c:66:13:dd:70:d9:7e:18:
         04:bc:dc:ae:f0:2a:df:bc:9b:d9:73:3b:46:cd:0a:38:2e:72:
         fc:ca:3b:b5
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUEZsWY5KPCYT1Bs+j9hl086slyTkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA4MTIzMDAxWhcNMjMwMjA3MTIzNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEJBMDczOUI3
QzkxMjVDQUZBNjIwREYwN0U3QjE1NzhDRTc3NDkzNDI5MjlFQjc2RkM4Mjg2MjBG
NTc4MENENThFQjlENjU1ODVGNjc0NDlFQzk2MDE0NTFGRkFEOUQzQUIzNDg3RUVG
RjY4QTEyQTlENzRGM0I1NDdGNEM2NDExQUY4NTkwMDk3QjRDRDg4NkIwRUYzRUU3
NEUxNUVENEVBNUMwNTNCQzA1Qjc3MjYyRUFGNEFDNDAyRTREQTBGQkU5QUE0Qzg5
M0JGRTBGRjBFQzQzNUY0OUVEMTA4NDk1MjM2MTBEODkyREIxQjY2QjcxOTU0RkVG
MzE1MUUxQjUxN0RBRjFCOTQxQjM0ODBGNTU2RDNEREVCMjJEOTlENDYyNjMzQzc2
MzczMjc5MkIyQTUyREVCRkVDNzQxMDAzRTIxN0I3QkVDQkY2ODRBQ0FDQTVCNjM1
RjkxMzc5QzM5NDUzMEU0NTkzOTMyQjBFRkQzQkNCODAxOEQwMEQ5Mzk0RjU1MEFG
MTkxNkU1NkJEREE0MkUwNTNCRDNGOEJGMzgzRUFGQ0NBMDBGNjU4NzBCMjhBRUYx
MEMzRDlERUQwNUFFRTBDRUQ4REU3NjEwREM4OTY4NUExM0M5NTNDMDI5MThBNEZB
RkY5NEY1REFGRTk2NjcyMEJEQTNEM0JEMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALoHObfJElyvpiDfB+exV4zndJNCkp63b8goYg9X
gM1Y651lWF9nRJ7JYBRR/62dOrNIfu/2ihKp1087VH9MZBGvhZAJe0zYhrDvPudO
Fe1OpcBTvAW3cmLq9KxALk2g++mqTIk7/g/w7ENfSe0QhJUjYQ2JLbG2a3GVT+8x
UeG1F9rxuUGzSA9VbT3esi2Z1GJjPHY3MnkrKlLev+x0EAPiF7e+y/aErKyltjX5
E3nDlFMORZOTKw79O8uAGNANk5T1UK8ZFuVr3aQuBTvT+L84Pq/MoA9lhwsorvEM
PZ3tBa7gztjedhDciWhaE8lTwCkYpPr/lPXa/pZnIL2j070CAwEAAaOCApwwggKY
MB0GA1UdDgQWBBSA/xf94nfyCX5TvPGzsJ28RMFF2DAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzgzYTMxMzIzMzM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAggSNTANBgkqhkiG
9w0BAQsFAAOCAQEAZ0kyiW0YPn7qeY/qFsJD2UhCOcCvT7B0iIpH+pSgL0Gzo35j
RbkLOnsO/RDK1wfU8WZ12NAasp3QjULBezsbuzHIIN/cV18qeNBdFt7Dun1EX1bZ
aPslt9m960CI0zmgsD2ICvR77QYsQZ7mS0mnJ8oo5ofx/Rq8WIOE4EIBfjetYo4/
o80OPUiP3fmeO0x9UQlT9kgSNuhSA5CLMr5MjftbqmGrrmkxNjNndUT/hcKrxUiO
Y6JL2/0IStKasb5qguvQZzTOKrovvAIPD0lKivOOrkSqICirv9gkAG8dqQ/UEXxm
E91w2X4YBLzcrvAq37yb2XM7Rs0KOC5y/Mo7tQ==
-----END CERTIFICATE-----