Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a3135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          KIv0QUYZA4w0EBwWxfGogFijODPzl+3jThXpQ9c5YXg=
Subject key identifier:   C3:59:42:A8:23:E5:84:86:64:39:1F:63:6C:BC:F2:16:57:24:8D:B9
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7F9085473B2BFB182FF0CBAAC5423ACEB779A869
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 01:55:02 +0000
ROA not before:           Tue 08 Feb 2022 01:50:02 +0000
ROA not after:            Tue 07 Feb 2023 01:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:90:85:47:3b:2b:fb:18:2f:f0:cb:aa:c5:42:3a:ce:b7:79:a8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 01:50:02 2022 GMT
            Not After : Feb  7 01:55:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:28:57:ad:fd:c2:21:95:13:9f:62:62:da:
                    5d:cb:79:55:04:bd:1a:a9:ba:a9:9f:6a:27:b0:b5:
                    1a:95:b3:5d:82:6c:79:30:4c:4b:16:4d:01:15:ec:
                    f7:95:3c:3d:44:08:5f:87:40:42:01:1b:75:1e:71:
                    8c:3c:b3:fb:eb:e6:4b:ca:91:49:f0:e7:50:11:a6:
                    78:bd:a9:ed:4e:7c:d3:a2:28:e9:90:2a:fa:4d:fa:
                    5e:a5:68:99:e7:1a:94:b0:e1:61:51:7c:8a:41:8c:
                    cf:86:ef:0a:4a:15:c9:23:90:54:47:2b:f8:91:d3:
                    28:15:7b:d8:58:5a:1b:c5:3e:94:1e:5c:2f:f4:c4:
                    d1:64:0b:35:58:a7:6f:7c:96:54:91:08:88:81:93:
                    3a:0a:d0:5b:84:42:2a:a9:ff:26:71:5b:59:d9:3b:
                    8c:8f:3d:64:97:56:d2:d4:96:98:5d:46:8f:a1:ef:
                    c5:45:c5:33:17:df:00:6e:07:67:29:8f:e8:51:19:
                    5f:fd:e6:03:83:41:03:07:be:30:0b:92:94:89:be:
                    61:4f:a5:f2:0a:68:fb:80:39:57:6b:d5:f3:e6:44:
                    9e:66:ac:30:37:ad:e4:fb:2e:3c:d3:bd:07:7b:96:
                    f1:9c:f6:ce:34:db:b9:f0:f9:50:30:99:ce:02:af:
                    1d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:59:42:A8:23:E5:84:86:64:39:1F:63:6C:BC:F2:16:57:24:8D:B9
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a3135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:155::/80

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:44:33:ea:d1:dc:25:69:f7:84:9c:5d:70:6e:79:93:26:
         1d:fc:79:c6:a9:16:f6:16:32:e9:04:17:9a:f8:c1:9f:e6:15:
         77:c2:66:59:c4:a5:7d:bf:7d:02:5b:83:68:fa:53:3a:8c:44:
         eb:6f:60:7d:bb:d3:68:52:b5:f5:cb:58:d8:2f:1a:50:94:4b:
         74:29:3d:80:bb:bf:89:a8:22:a4:f7:ba:82:bf:a7:91:5c:72:
         a8:a5:09:25:18:3a:e5:03:d6:65:c4:ae:af:9c:47:20:62:f5:
         74:9c:79:a0:fa:55:f1:30:4f:bf:49:8d:bf:16:8e:28:bd:0b:
         df:6c:97:44:27:0e:5a:2f:97:32:b0:66:83:75:22:8f:5f:45:
         9c:8a:c1:d3:e3:99:e2:0a:64:fd:04:bf:c1:8c:6d:53:6c:9b:
         21:0d:27:8a:84:62:ef:a7:5b:e9:46:5b:3e:99:07:41:3b:61:
         18:a2:12:07:97:cc:f3:0d:52:c4:8a:32:e2:d4:c4:d9:49:be:
         f8:22:98:f7:f4:fc:ed:1d:91:72:c7:0f:ea:d8:2d:df:8e:e0:
         04:ec:17:30:41:b3:71:5d:b0:02:3c:63:76:4c:98:16:4e:e7:
         4a:b6:6a:20:ab:66:da:82:8d:e5:20:9c:3f:36:e0:a8:82:d8:
         b8:ed:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----