Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a323333353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230383a323333353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          IwFZSBeN+NybvbgjXXqNYlbx4uhYNrZ0T6/8i6FaYOg=
Subject key identifier:   4D:FD:21:91:85:2F:47:97:49:ED:F5:AB:85:8F:98:26:61:C3:76:A0
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       7663D365C4173C427D32BEB468FBA518599E1913
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a323333353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Tue 08 Feb 2022 23:35:01 +0000
ROA not before:           Tue 08 Feb 2022 23:30:01 +0000
ROA not after:            Tue 07 Feb 2023 23:35:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:208:2335::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:d3:65:c4:17:3c:42:7d:32:be:b4:68:fb:a5:18:59:9e:19:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  8 23:30:01 2022 GMT
            Not After : Feb  7 23:35:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:b2:fa:6b:db:e6:0c:a4:bd:37:bd:b0:d2:
                    9b:77:90:78:c6:25:3b:4b:bd:e8:aa:3d:7e:be:9c:
                    fd:05:c6:e9:80:25:7a:7b:1c:83:c2:18:b8:24:9f:
                    1c:63:1f:50:d5:e3:be:46:be:76:81:f7:b9:f3:aa:
                    4b:04:ba:fa:cc:24:7e:b0:f5:6a:f2:c0:ef:3b:d4:
                    69:1a:11:18:95:79:3a:bd:d3:75:30:bf:61:54:7a:
                    09:58:23:b1:4d:76:ba:8b:40:63:28:c5:6c:70:ee:
                    6f:a2:98:73:60:b3:3b:c7:6c:c0:10:98:20:9c:3b:
                    d1:5e:b0:19:c0:24:e5:90:64:43:9d:4b:a0:fe:42:
                    99:aa:97:95:2e:e5:61:6e:c7:8f:fb:9c:d3:8d:1b:
                    05:00:3c:26:7a:aa:5a:c7:6a:13:c8:02:bb:35:76:
                    b4:30:02:22:21:b5:a4:54:bb:a6:7f:d5:fa:43:21:
                    ed:06:6d:f4:d3:0a:25:76:73:3a:fb:8a:73:0f:03:
                    dd:4b:67:0e:b9:96:8b:22:8b:0d:60:85:92:bd:62:
                    68:ad:62:cc:ad:59:79:ce:8c:64:16:b5:f8:df:0d:
                    a0:d2:86:b5:d8:b7:5c:92:24:a5:6f:eb:63:ad:2e:
                    43:ca:02:7e:33:62:c0:52:eb:67:17:91:d7:94:be:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FD:21:91:85:2F:47:97:49:ED:F5:AB:85:8F:98:26:61:C3:76:A0
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230383a323333353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:208:2335::/80

    Signature Algorithm: sha256WithRSAEncryption
         96:e1:54:ee:09:a4:3a:0c:05:a6:46:1b:b0:88:aa:fe:4e:51:
         64:bd:59:c9:e3:cb:ec:aa:f4:b8:76:5b:dd:97:34:7e:2d:1f:
         3e:3e:b6:7f:1e:91:d5:a1:63:5e:dc:2f:5f:cd:16:20:0b:0e:
         9c:56:34:63:b5:34:e7:4b:66:cb:8b:ff:a5:34:c7:06:1c:ff:
         05:b9:06:c0:b5:3e:9c:8a:89:4b:e5:de:ec:ca:58:59:c7:00:
         d6:d1:7d:e4:b9:a7:aa:94:fa:1c:9f:e1:19:1b:60:7f:bd:0e:
         0e:ce:0a:26:86:f4:35:c3:11:fc:17:ca:83:66:f8:7b:db:c3:
         50:80:7d:68:3e:b6:f5:88:83:5a:d7:27:56:43:e0:32:9b:1e:
         0c:99:25:59:df:23:e3:8d:15:ad:26:fd:0d:6a:ab:f0:2c:1c:
         cb:c2:67:11:bb:40:1b:85:06:e6:8e:11:1e:9b:21:ff:b4:eb:
         cc:77:01:c1:9e:64:06:3d:44:99:1b:d8:d4:db:86:5a:bc:4f:
         38:25:de:fd:d3:b6:6c:f3:fe:ec:ea:a8:fe:79:e0:ab:63:9d:
         74:27:7d:e6:fa:72:0f:89:7c:ca:31:2b:ea:96:01:de:56:c9:
         fb:33:1f:bf:7b:b0:f4:b9:e1:22:36:13:3d:93:67:e9:89:62:
         e1:2d:e5:34
-----BEGIN CERTIFICATE-----
MIIHmDCCBoCgAwIBAgIUdmPTZcQXPEJ9Mr60aPulGFmeGRMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNWE3YjVkMzJlM2ZiNTM3YzQxNmJlODNmN2Y2Y2JiNGE5
NWU5NThhNjFiMjUwMTc5MjIwHhcNMjIwMjA4MjMzMDAxWhcNMjMwMjA3MjMzNTAx
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEI4QUVCMkZB
NkJEQkU2MENBNEJEMzdCREIwRDI5Qjc3OTA3OEM2MjUzQjRCQkRFOEFBM0Q3RUJF
OUNGRDA1QzZFOTgwMjU3QTdCMUM4M0MyMThCODI0OUYxQzYzMUY1MEQ1RTNCRTQ2
QkU3NjgxRjdCOUYzQUE0QjA0QkFGQUNDMjQ3RUIwRjU2QUYyQzBFRjNCRDQ2OTFB
MTExODk1NzkzQUJERDM3NTMwQkY2MTU0N0EwOTU4MjNCMTRENzZCQThCNDA2MzI4
QzU2QzcwRUU2RkEyOTg3MzYwQjMzQkM3NkNDMDEwOTgyMDlDM0JEMTVFQjAxOUMw
MjRFNTkwNjQ0MzlENEJBMEZFNDI5OUFBOTc5NTJFRTU2MTZFQzc4RkZCOUNEMzhE
MUIwNTAwM0MyNjdBQUE1QUM3NkExM0M4MDJCQjM1NzZCNDMwMDIyMjIxQjVBNDU0
QkJBNjdGRDVGQTQzMjFFRDA2NkRGNEQzMEEyNTc2NzMzQUZCOEE3MzBGMDNERDRC
NjcwRUI5OTY4QjIyOEIwRDYwODU5MkJENjI2OEFENjJDQ0FENTk3OUNFOEM2NDE2
QjVGOERGMERBMEQyODZCNUQ4Qjc1QzkyMjRBNTZGRUI2M0FEMkU0M0NBMDI3RTMz
NjJDMDUyRUI2NzE3OTFENzk0QkVERjc5MDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALiusvpr2+YMpL03vbDSm3eQeMYlO0u96Ko9fr6c
/QXG6YAlenscg8IYuCSfHGMfUNXjvka+doH3ufOqSwS6+swkfrD1avLA7zvUaRoR
GJV5Or3TdTC/YVR6CVgjsU12uotAYyjFbHDub6KYc2CzO8dswBCYIJw70V6wGcAk
5ZBkQ51LoP5CmaqXlS7lYW7Hj/uc040bBQA8JnqqWsdqE8gCuzV2tDACIiG1pFS7
pn/V+kMh7QZt9NMKJXZzOvuKcw8D3UtnDrmWiyKLDWCFkr1iaK1izK1Zec6MZBa1
+N8NoNKGtdi3XJIkpW/rY60uQ8oCfjNiwFLrZxeR15S+33kCAwEAAaOCApwwggKY
MB0GA1UdDgQWBBRN/SGRhS9Hl0nt9auFj5gmYcN2oDAfBgNVHSMEGDAWgBR0oft7
pvANJOx3wAvpQJ+odR/+PDAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFyg
WoZYcnN5bmM6Ly9ycGtpLmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC83
NEExRkI3QkE2RjAwRDI0RUM3N0MwMEJFOTQwOUZBODc1MUZGRTNDLmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw
Yjg0MTUvNjhmMmI2NWYtY2M0OC00OTE2LWI5Y2MtY2FlOTBiNDlkYTdiLzVhN2I1
ZDMyZTNmYjUzN2M0MTZiZTgzZjdmNmNiYjRhOTVlOTU4YTYxYjI1MDE3OTIyLmNl
cjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtp
LmRhdGFwbGFuZS5vcmcvcmVwby9EQVRBUExBTkUvMC8zMjM2MzAzNjNhMzM2NTYz
MzAzYTMyMzAzMjMyM2EzMjMwMzgzYTMyMzMzMzM1M2EzYTJmMzgzMDJkMzgzMDIw
M2QzZTIwMzMzOTM5MzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAAjANAwsAJgY+wCAiAggjNTANBgkqhkiG
9w0BAQsFAAOCAQEAluFU7gmkOgwFpkYbsIiq/k5RZL1ZyePL7Kr0uHZb3Zc0fi0f
Pj62fx6R1aFjXtwvX80WIAsOnFY0Y7U050tmy4v/pTTHBhz/BbkGwLU+nIqJS+Xe
7MpYWccA1tF95LmnqpT6HJ/hGRtgf70ODs4KJob0NcMR/BfKg2b4e9vDUIB9aD62
9YiDWtcnVkPgMpseDJklWd8j440VrSb9DWqr8Cwcy8JnEbtAG4UG5o4RHpsh/7Tr
zHcBwZ5kBj1EmRvY1NuGWrxPOCXe/dO2bPP+7Oqo/nngq2OddCd95vpyD4l8yjEr
6pYB3lbJ+zMfv3uw9LnhIjYTPZNn6Yli4S3lNA==
-----END CERTIFICATE-----