Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a323135353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3230393a323135353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          on1aUoaLcmIBKDNY2lVI0y+CW7jV5eWpZPswzCISkUg=
Subject key identifier:   6A:23:F4:5B:8A:AD:FD:9D:2F:E4:17:3D:8F:03:1E:17:70:B2:83:1B
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       756A3BFB6788FD61C4747FF132776E1242659F44
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a323135353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Wed 09 Feb 2022 21:55:02 +0000
ROA not before:           Wed 09 Feb 2022 21:50:02 +0000
ROA not after:            Wed 08 Feb 2023 21:55:02 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:209:2155::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6a:3b:fb:67:88:fd:61:c4:74:7f:f1:32:77:6e:12:42:65:9f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb  9 21:50:02 2022 GMT
            Not After : Feb  8 21:55:02 2023 GMT
        Subject: CN=3082010A0282010100C20A3D2B35E0E3F726E29BBB6A3D8276C2614EA9515C20DBF547B4B7846677159D294A057C0E4A8F328F69E2F32C975F69DA0FA0D5731500D64A3B36C6D6AEDFF34A5BBE17AF62A6C9D4ACB7D01E4D4200CC13CFFA9EB00F2EE237589D947F610923ADBACA577AF272AAA094135E6102BAC30329E440013CB9679227028E0B93BFB1223ABE09EE0E9686FAF214352DBF71F74DAD85938982115F4A2313C0A0367A1AEF997694FBA14AE602008E0A0FCB2CE3374570F71C9C56E57B7BD78D3C84145F1B0F19D3699CE72480BD3E64AEF54DD8A4E77289D2F548C1918FAA2DF857E5B4FF06ECEDAF02FF5CCD3623A7A9F90C1792C515D791E7F4686EBBD5BDE2190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:3d:2b:35:e0:e3:f7:26:e2:9b:bb:6a:3d:
                    82:76:c2:61:4e:a9:51:5c:20:db:f5:47:b4:b7:84:
                    66:77:15:9d:29:4a:05:7c:0e:4a:8f:32:8f:69:e2:
                    f3:2c:97:5f:69:da:0f:a0:d5:73:15:00:d6:4a:3b:
                    36:c6:d6:ae:df:f3:4a:5b:be:17:af:62:a6:c9:d4:
                    ac:b7:d0:1e:4d:42:00:cc:13:cf:fa:9e:b0:0f:2e:
                    e2:37:58:9d:94:7f:61:09:23:ad:ba:ca:57:7a:f2:
                    72:aa:a0:94:13:5e:61:02:ba:c3:03:29:e4:40:01:
                    3c:b9:67:92:27:02:8e:0b:93:bf:b1:22:3a:be:09:
                    ee:0e:96:86:fa:f2:14:35:2d:bf:71:f7:4d:ad:85:
                    93:89:82:11:5f:4a:23:13:c0:a0:36:7a:1a:ef:99:
                    76:94:fb:a1:4a:e6:02:00:8e:0a:0f:cb:2c:e3:37:
                    45:70:f7:1c:9c:56:e5:7b:7b:d7:8d:3c:84:14:5f:
                    1b:0f:19:d3:69:9c:e7:24:80:bd:3e:64:ae:f5:4d:
                    d8:a4:e7:72:89:d2:f5:48:c1:91:8f:aa:2d:f8:57:
                    e5:b4:ff:06:ec:ed:af:02:ff:5c:cd:36:23:a7:a9:
                    f9:0c:17:92:c5:15:d7:91:e7:f4:68:6e:bb:d5:bd:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:F4:5B:8A:AD:FD:9D:2F:E4:17:3D:8F:03:1E:17:70:B2:83:1B
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3230393a323135353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:209:2155::/80

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:37:cd:7c:26:c0:9c:07:59:73:e2:2b:f1:a4:62:7a:1b:
         86:0d:13:a3:7a:7f:1b:cf:16:44:3d:83:0a:4e:a9:f2:a2:1e:
         8b:82:ef:07:7a:5e:47:bd:f3:e8:0a:f3:e0:cc:04:89:31:69:
         c8:96:48:ba:52:8b:16:6b:ad:74:a3:0a:39:b6:ed:ca:35:9e:
         79:19:84:8e:52:a4:56:fa:3f:c8:f2:08:09:90:e9:df:73:20:
         09:79:ff:cb:c9:92:94:fb:c0:48:03:ff:b1:d4:a7:03:e2:69:
         81:32:8c:e2:16:4a:56:10:76:24:24:12:38:69:ff:56:1e:ef:
         62:92:c0:65:a3:33:38:38:24:1f:a3:f2:80:62:7d:c1:ef:9a:
         cc:90:4b:55:c0:42:f2:39:88:b4:95:c6:e3:c2:89:30:02:08:
         57:4c:c1:e5:b1:fe:59:71:7f:a6:b3:57:26:22:3c:27:c8:c0:
         1b:0f:c1:e5:e5:a2:57:28:7d:35:b9:6f:44:c6:e9:14:68:21:
         9a:69:34:55:f9:55:03:7a:1c:f2:9c:a7:0f:a7:f9:4d:80:57:
         46:0b:6e:42:f6:4e:f8:0a:d8:a0:67:b7:a0:84:b2:2c:a3:54:
         ab:3a:77:7b:df:bc:8d:8a:39:88:e3:d3:f0:9e:e5:88:02:2d:
         f3:fa:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----